Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ImbqQkA_7U_iDgZPBWKbDy0frIk.roa
File: ImbqQkA_7U_iDgZPBWKbDy0frIk.roa (raw, json)
Hash identifier: EYlBXcNCGd3YLarMaSQkgSEQcmVbaQWGv2cSvygSop8=
Subject key identifier: 22:66:EA:42:40:3F:ED:4F:E2:0E:06:4F:05:62:9B:0F:2D:1F:AC:89
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018FBEF4C3320A5BA6633B6DF119D180DCC0
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ImbqQkA_7U_iDgZPBWKbDy0frIk.roa
Signing time: Tue 28 May 2024 11:27:42 +0000
ROA not before: Tue 28 May 2024 11:27:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42375
IP address blocks: 45.129.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 May 2024 14:37:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:be:f4:c3:32:0a:5b:a6:63:3b:6d:f1:19:d1:80:dc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: May 28 11:27:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2266ea42403fed4fe20e064f05629b0f2d1fac89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:19:18:4f:ba:06:f4:f9:8c:13:6f:49:a8:e6:
4d:81:a0:50:be:b9:ec:13:ff:2e:55:3e:c8:cd:64:
2c:00:11:82:2b:71:9f:3f:3b:10:93:35:be:39:ba:
4b:85:6e:78:e8:e4:23:c3:fb:a4:8b:93:d4:9f:f6:
45:04:6c:cb:f8:ab:bb:09:26:66:c9:00:5c:4c:1b:
ce:83:dc:9a:08:b0:85:45:2a:c1:08:88:63:bb:2b:
33:10:77:88:eb:4a:59:fc:4c:78:dc:82:bb:15:c4:
dc:32:b2:b8:87:25:82:58:61:54:53:6a:c3:48:0f:
7b:42:45:3a:0f:cd:4d:c7:a6:cf:b8:68:8d:33:c5:
2d:a4:b2:44:65:58:a0:b8:f8:c5:2e:2d:05:2f:5e:
c8:c2:e9:f6:cc:f0:a5:03:9b:1f:28:e3:2d:30:66:
d4:d1:ce:3a:e7:e0:6c:fe:e8:00:ab:e3:a7:38:f2:
f8:b7:7f:58:0a:54:9e:24:63:ad:34:4a:27:5f:5b:
01:48:cd:c1:1d:c8:63:99:c8:ae:81:34:44:0e:ef:
ba:fb:29:ea:d8:fb:3a:5e:d9:40:fe:ef:bc:9d:11:
66:7c:34:41:3e:f1:f5:01:66:9d:3a:93:45:8f:d8:
6c:e3:82:f6:20:84:f2:b4:7d:b7:f9:a2:38:3a:11:
17:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:66:EA:42:40:3F:ED:4F:E2:0E:06:4F:05:62:9B:0F:2D:1F:AC:89
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ImbqQkA_7U_iDgZPBWKbDy0frIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.128.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:5d:ec:6b:b1:24:f9:b3:04:dc:a0:6a:e2:d8:d9:a5:5f:b2:
28:f5:f5:49:46:84:16:df:48:e7:9e:ad:32:65:c0:79:55:9f:
bc:b3:e4:8c:85:01:d8:52:33:6b:aa:36:4d:41:42:24:98:45:
65:9b:db:14:f8:f4:66:7f:48:9c:2e:94:80:52:80:d4:53:ab:
d7:ca:16:37:1c:2d:cf:b1:e6:04:3a:7b:1c:d3:49:f9:64:6c:
c3:2a:11:32:ab:e2:95:0c:e0:7a:bf:dd:1f:30:c2:6d:29:29:
46:11:48:e6:1f:96:09:c2:1c:6f:22:13:0e:20:c8:57:a3:0d:
d9:e7:ea:fa:ab:9f:90:95:d7:ae:5e:7c:4a:48:d7:bf:5a:3b:
65:ad:24:ba:f1:53:f7:98:eb:9e:92:51:58:bd:8d:1d:54:c4:
b2:07:19:3e:ee:de:d2:aa:06:49:fe:51:cd:d0:5c:38:8f:f2:
43:cf:d5:39:7c:9c:ba:98:5e:26:06:a0:12:bd:c3:c3:9a:5d:
70:bb:41:d4:cb:ec:8e:e7:14:de:17:fc:49:78:2e:a0:94:82:
f5:48:b3:27:1b:e0:93:25:eb:bd:9d:96:3e:65:02:b2:be:1a:
b0:78:ea:25:be:1a:f0:17:b9:44:6a:74:c3:16:4e:2f:b2:54:
1c:3f:4e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:22 2024 by rpki-client on console-fra.rpki-client.org