Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/EtLQfRO6tSTA2nigVL_H0g1AKkE.roa
File: EtLQfRO6tSTA2nigVL_H0g1AKkE.roa (raw, json)
Hash identifier: cObyFV1S3rbAbOSnxmiOJzhkxNa7IZeewPPMD0hcltU=
Subject key identifier: 12:D2:D0:7D:13:BA:B5:24:C0:DA:78:A0:54:BF:C7:D2:0D:40:2A:41
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 018983F792C61668D93B85BFC90E31160D69
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/EtLQfRO6tSTA2nigVL_H0g1AKkE.roa
Signing time: Sun 23 Jul 2023 18:16:27 +0000
ROA not before: Sun 23 Jul 2023 18:16:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 45.140.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:83:f7:92:c6:16:68:d9:3b:85:bf:c9:0e:31:16:0d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Jul 23 18:16:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12d2d07d13bab524c0da78a054bfc7d20d402a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4a:a7:12:93:21:c9:f3:78:bb:57:92:92:4a:
58:57:5c:35:0b:6d:9f:fe:65:50:bc:d3:d6:ac:e6:
4f:7a:b0:d0:44:90:49:b3:77:b2:88:a5:92:4e:f1:
5f:63:b2:c0:d6:c6:ab:36:24:0a:a5:94:82:12:a4:
67:90:a6:da:89:5a:ae:47:00:c1:af:2f:58:38:e3:
d0:06:2b:bf:7e:13:03:b5:17:dc:b1:e9:1c:de:a5:
cb:ed:4c:35:87:ee:ca:87:8a:bc:09:ed:c6:e6:07:
50:b5:0d:90:41:b7:20:bb:f6:0f:81:75:4f:02:9a:
d5:c8:1f:9e:ff:1e:bb:b2:bb:d3:ac:58:dc:59:7d:
41:7f:d9:f1:f7:e4:d2:38:dc:d8:d1:3c:55:ab:6e:
e5:8a:1f:71:b7:89:57:00:ad:9a:47:a1:5b:7a:14:
c2:0e:fb:30:ae:a7:19:af:cf:90:3a:a4:46:18:b8:
6b:84:28:41:5f:30:70:6b:4c:28:9d:2d:26:a7:f9:
b8:33:6a:8d:51:c6:8c:24:a4:95:7f:44:a7:5f:d4:
de:20:86:d6:7a:e6:53:ed:ec:c3:cf:c1:e1:fc:59:
ee:b4:61:96:f8:6e:94:bb:57:4c:36:4c:45:c5:6d:
77:49:c0:c8:9f:64:51:4b:98:0d:18:cf:1c:b4:89:
bd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D2:D0:7D:13:BA:B5:24:C0:DA:78:A0:54:BF:C7:D2:0D:40:2A:41
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/EtLQfRO6tSTA2nigVL_H0g1AKkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.6.0/24
Signature Algorithm: sha256WithRSAEncryption
21:65:68:89:b3:0c:57:fa:5f:30:01:e6:43:6b:49:2b:96:f9:
f7:b9:df:c5:61:2e:ca:1b:1d:32:28:cb:98:c9:c0:11:58:3d:
9c:c1:9f:54:43:54:6e:a2:fa:44:c6:f0:28:3b:ca:b0:f4:84:
8e:31:8e:f6:72:b1:83:fa:7a:30:03:3e:56:3b:70:23:b3:56:
a7:a9:bb:5e:4d:54:2b:3c:c8:e1:99:e9:a0:67:aa:c3:3f:61:
dd:2f:66:ad:74:11:62:68:2e:e6:cf:7e:5d:ed:d4:a2:9d:b3:
9a:38:15:fe:89:0c:e8:34:d7:e3:53:0f:ad:37:a5:b1:4e:6b:
b7:62:89:16:8b:30:a1:c3:81:4e:17:a4:04:88:d4:5d:c2:4a:
bc:ae:40:b4:4a:e8:b6:6c:60:b6:d6:96:89:bb:67:fa:70:28:
b4:53:aa:0d:40:af:aa:59:80:be:ad:0e:46:57:dd:c1:19:44:
e2:29:6d:93:4c:70:66:28:ac:a8:45:d5:a6:9a:f0:23:1d:12:
d1:ae:75:2d:9f:b2:34:c0:08:9e:d6:98:d9:d0:c3:4f:e4:47:
55:8b:c6:4b:8b:d6:12:90:99:bd:e9:a9:d9:b4:bd:6f:fc:17:
91:d6:ed:08:9d:61:ec:c3:b8:fa:55:4d:33:f0:38:d1:b6:55:
6c:e8:50:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:37 2024 by rpki-client on console-fra.rpki-client.org