Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/BaUqDGfEY8snNpctHgSJtPQj2tA.roa
File: BaUqDGfEY8snNpctHgSJtPQj2tA.roa (raw, json)
Hash identifier: xD4cBRzozFKtM5DgxnS5jSC3hpzgC/pqjK6MtAJw9eM=
Subject key identifier: 05:A5:2A:0C:67:C4:63:CB:27:36:97:2D:1E:04:89:B4:F4:23:DA:D0
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018D7A9312FA8FEE8201C4A6DE983FBEA239
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/BaUqDGfEY8snNpctHgSJtPQj2tA.roa
Signing time: Mon 05 Feb 2024 18:41:15 +0000
ROA not before: Mon 05 Feb 2024 18:41:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9123
IP address blocks: 45.132.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 14:13:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7a:93:12:fa:8f:ee:82:01:c4:a6:de:98:3f:be:a2:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 5 18:41:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05a52a0c67c463cb2736972d1e0489b4f423dad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b0:2b:53:8d:3c:1d:ff:e0:bc:74:24:38:83:
89:ec:fb:6f:4d:42:a3:54:33:b5:81:0d:58:39:03:
13:92:c8:f8:ff:f5:c6:ff:68:61:eb:88:a9:5e:a4:
42:fc:10:8f:fe:35:1f:17:8c:99:32:b1:2b:00:3d:
40:9a:e6:1b:34:42:f4:a0:f6:35:0b:e5:a5:d2:89:
a5:45:a5:08:35:9d:eb:1b:bf:f9:bd:6b:3d:09:0b:
c9:5c:50:82:3f:4b:af:fb:8a:e4:16:67:4f:c0:5e:
70:bf:44:3c:2f:93:28:9a:2b:24:26:7d:29:a6:8a:
b2:c7:2c:4d:3d:9e:ad:fa:21:8c:8f:e4:2f:c3:3f:
c9:63:84:ed:5b:e2:5d:38:66:a4:d1:2b:d5:13:07:
e7:63:1b:39:57:a4:f0:9e:41:5c:58:3c:84:f6:76:
e2:fe:e4:d1:4f:02:d4:a5:53:53:99:ae:8d:2a:ab:
51:b3:98:83:26:ba:d5:d4:de:94:6e:df:9a:14:0e:
c2:f4:2f:e8:b9:31:37:45:f0:a0:27:bd:b9:60:4b:
63:49:26:db:9f:50:92:3d:a7:16:44:bb:9f:b5:57:
f4:08:1e:ac:17:b9:ee:60:00:2e:c6:98:d7:d4:04:
41:07:4e:13:54:27:fb:da:db:c4:ea:85:4e:42:b5:
75:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A5:2A:0C:67:C4:63:CB:27:36:97:2D:1E:04:89:B4:F4:23:DA:D0
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/BaUqDGfEY8snNpctHgSJtPQj2tA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.50.0/24
Signature Algorithm: sha256WithRSAEncryption
72:50:eb:24:28:79:13:a5:1f:07:8f:88:aa:2c:93:30:1d:1d:
2e:33:00:48:99:b1:03:30:c3:9a:ff:f9:3c:f3:f4:d4:6f:ed:
26:91:03:47:0e:df:0b:53:6f:6a:6f:08:9c:0b:b3:90:6e:9b:
41:1d:1c:e5:21:e8:1d:3e:27:c7:5b:f1:e0:20:ea:ef:8b:69:
38:25:06:43:17:fd:34:06:7c:1d:62:20:3e:91:57:6f:53:19:
90:88:4a:0d:b1:ce:38:0b:c7:88:64:f3:23:7c:50:53:dd:05:
bc:21:d6:62:eb:68:f9:54:1c:f2:97:dc:08:dd:45:cd:e9:62:
db:b4:ea:67:9d:c4:61:c5:39:a0:da:35:d8:10:f7:c3:ec:fb:
04:0e:cd:9c:a5:a8:d5:55:f6:c1:ba:ae:07:35:13:bb:f4:65:
5d:ec:8a:05:7c:ac:15:91:d9:2e:65:97:0b:92:5f:1c:f7:cc:
66:f6:2b:e9:44:e2:29:a1:af:a2:1b:4a:42:17:d3:1d:c8:7a:
86:41:eb:43:63:3e:27:2f:dc:09:3f:58:57:1b:58:ab:9e:4d:
bb:3a:01:1e:f4:2e:25:0d:21:fb:de:42:39:7d:39:c5:3d:68:
9c:43:9f:87:0d:2a:aa:a9:b2:7f:54:31:25:63:03:07:3c:be:
b6:cc:93:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 5 17:53:06 2024 by rpki-client on console-ams.rpki-client.org