Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/VkkHlIfJhKdPSekVc9nh_NFMgCM.roa
File: VkkHlIfJhKdPSekVc9nh_NFMgCM.roa (raw, json)
Hash identifier: vTxWasKn/4BnbGkJGvgd+1RdCdTIcHZoAgmebZ87yC0=
Subject key identifier: 56:49:07:94:87:C9:84:A7:4F:49:E9:15:73:D9:E1:FC:D1:4C:80:23
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 0191237DAE890FA5C1AB3B5DA520B14E312D
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/VkkHlIfJhKdPSekVc9nh_NFMgCM.roa
Signing time: Mon 05 Aug 2024 17:02:04 +0000
ROA not before: Mon 05 Aug 2024 17:02:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 45.140.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 01:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:23:7d:ae:89:0f:a5:c1:ab:3b:5d:a5:20:b1:4e:31:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Aug 5 17:02:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5649079487c984a74f49e91573d9e1fcd14c8023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:78:df:be:de:a9:72:b2:85:f0:81:ba:22:69:
c2:ef:14:ba:0e:b7:56:86:86:2e:d8:c6:85:c2:7f:
c7:86:51:38:7e:b8:21:da:73:ca:e8:aa:4a:ab:1a:
f7:a0:87:03:96:7e:00:c8:d6:cd:db:8c:cd:a4:8f:
0c:9d:02:31:df:59:73:af:f6:2d:1f:69:5a:93:3e:
44:47:23:13:72:0c:6f:80:cf:89:82:dd:62:35:ee:
66:ad:74:a2:05:da:b3:81:e9:30:bd:ad:f9:a3:10:
d8:62:58:df:4d:7b:2a:f0:fc:c7:5c:aa:ee:52:43:
b8:e3:0d:ad:e5:c0:a3:3d:a1:a6:79:99:7b:f5:08:
99:1a:f0:2f:a3:cc:8e:84:86:9d:9d:16:f2:18:86:
09:9d:c8:ed:23:99:02:26:36:70:a4:38:74:a7:8f:
61:ea:02:cd:8e:ff:1d:eb:97:b4:a3:13:f3:d4:c6:
57:07:99:0e:ed:fb:e4:64:73:9a:47:e8:91:f2:64:
30:b8:99:05:50:b5:d8:54:51:d1:24:75:98:06:49:
c4:3a:26:0b:7f:a7:20:36:f0:43:5a:49:16:4e:8b:
fa:41:02:35:3c:e7:fd:89:3d:ce:42:73:e6:53:dc:
5e:6a:66:8d:fd:d0:0c:a8:4e:95:0b:4e:68:91:0b:
c4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:49:07:94:87:C9:84:A7:4F:49:E9:15:73:D9:E1:FC:D1:4C:80:23
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/VkkHlIfJhKdPSekVc9nh_NFMgCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.246.0/24
Signature Algorithm: sha256WithRSAEncryption
49:50:55:aa:0d:88:4d:41:f4:3f:79:b5:f6:4e:8f:26:c5:81:
ce:b0:ce:12:dc:a8:bf:8e:19:19:8c:ce:a6:a5:2c:0c:96:5c:
76:3e:71:36:c9:f3:77:01:20:87:b8:1c:11:70:93:42:61:c9:
70:48:33:05:3c:7d:d1:6e:10:d4:76:2a:40:62:2f:3c:a1:9a:
78:7f:89:b3:60:f1:1e:c6:32:a4:69:54:07:57:0d:1f:78:d1:
2a:4a:c0:6b:a3:49:e6:e3:25:84:a6:59:dc:51:e0:1e:0f:1f:
95:f5:86:1a:36:10:ab:2a:cc:a1:44:2c:ab:ed:84:b7:02:3d:
95:7d:62:d6:c0:20:6b:e1:97:6c:bd:1d:5b:97:9a:0c:c4:f2:
27:fd:3e:c0:ea:c1:6e:12:7c:58:e5:bb:99:29:3e:0e:de:34:
56:f7:80:ba:e6:f3:5e:c5:93:df:2a:fd:6b:2e:26:88:88:95:
9c:e6:fb:87:73:1f:b5:e5:0f:28:70:b1:8f:26:ab:6f:b3:2f:
9f:03:00:e5:42:40:39:03:86:04:cf:9f:2f:a3:c7:84:8f:2f:
53:a3:66:73:e4:16:7b:cd:3f:cc:e2:2f:0f:a3:5e:d2:9a:41:
0d:67:ab:01:28:4f:40:52:f0:fb:88:20:9d:12:c1:21:98:1a:
81:b7:3f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 03:20:55 2024 by rpki-client on console-fra.rpki-client.org