Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/xlpKOYitTVWMZ13z4AwZO75TZeU.roa
File: xlpKOYitTVWMZ13z4AwZO75TZeU.roa (raw, json)
Hash identifier: 9jaWRyvmpyqeLt+XDz59g/w8gvEMM25F72Q9yrYAWnE=
Subject key identifier: C6:5A:4A:39:88:AD:4D:55:8C:67:5D:F3:E0:0C:19:3B:BE:53:65:E5
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 019252754175B0E68CCF827FA959743326E3
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/xlpKOYitTVWMZ13z4AwZO75TZeU.roa
Signing time: Thu 03 Oct 2024 12:57:48 +0000
ROA not before: Thu 03 Oct 2024 12:57:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.140.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Oct 2024 14:37:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:52:75:41:75:b0:e6:8c:cf:82:7f:a9:59:74:33:26:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Oct 3 12:57:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c65a4a3988ad4d558c675df3e00c193bbe5365e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e8:0c:f8:fd:a0:e8:19:c7:ff:ea:4c:4c:48:
4c:48:11:85:25:94:1a:67:e6:b8:32:f8:8f:02:ce:
c0:68:8e:f2:ea:03:5f:cb:f3:a0:3e:4f:c4:3e:9c:
61:64:47:80:d6:d3:e7:94:c0:a9:ab:94:63:ec:33:
2e:d6:ae:eb:f2:58:9c:e3:34:26:92:28:29:32:8d:
a8:15:eb:76:74:41:ca:58:c5:90:94:1e:5c:4d:45:
7e:ba:d6:91:73:06:56:01:28:25:47:cc:c1:20:7f:
f2:2f:96:63:77:d8:61:0f:54:10:04:d7:84:8e:cb:
f9:00:e4:32:e7:df:dc:ba:89:4f:c0:db:a8:13:fe:
6a:43:e9:9e:26:9b:98:0b:4b:62:e4:27:34:8b:ba:
1d:f9:20:54:29:53:8d:85:89:bc:56:d4:58:59:3e:
85:6b:b4:41:d7:83:d9:cb:12:f3:6f:95:66:4f:85:
f9:f1:1f:13:2e:58:0d:e6:55:ab:06:90:cc:f7:ff:
c1:d2:db:66:a4:d7:ff:ae:2b:8e:95:35:5e:52:a8:
29:e4:6a:ad:37:30:00:b3:8a:3a:cd:08:46:c4:47:
95:e8:d7:7a:c4:cd:d9:f2:65:83:cf:ef:41:89:52:
1f:1f:0e:ea:7f:27:91:1d:99:d2:00:a3:96:5b:95:
27:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5A:4A:39:88:AD:4D:55:8C:67:5D:F3:E0:0C:19:3B:BE:53:65:E5
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/xlpKOYitTVWMZ13z4AwZO75TZeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.246.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:ab:38:0e:3d:e9:d1:f8:f4:f1:19:9d:7e:71:1c:d1:01:6f:
f7:35:26:c5:e7:3d:95:d1:ff:b7:bc:ca:df:65:e5:8f:b9:d3:
be:21:6b:67:48:d0:39:20:6d:6b:f4:22:b0:2f:d5:f4:c1:9f:
5a:fe:2d:24:0e:75:7d:63:00:e9:28:e7:41:b6:99:e4:d6:95:
b4:0f:c1:42:1e:2e:32:ad:2f:1f:5f:cb:ee:64:af:10:cc:b0:
83:8c:b6:f5:62:26:c1:bc:f6:30:8e:59:71:09:c2:45:59:f1:
a9:de:30:e9:4a:10:bf:2d:53:74:2e:31:66:f4:be:ab:0a:59:
d4:df:3a:bf:de:18:03:d9:b0:60:89:72:2d:e8:86:38:ea:cb:
11:de:1b:81:ef:83:41:2b:07:8c:76:db:cd:34:f8:bc:c3:30:
39:85:f7:84:26:1f:49:f8:06:79:98:38:81:f1:2c:d1:fc:fc:
52:43:b9:84:c2:51:c6:fc:36:92:f2:10:8b:a6:42:81:41:2d:
d0:eb:c6:ef:9c:17:0e:4d:eb:47:d6:82:63:66:6d:09:86:14:
05:5a:48:7d:5e:88:41:04:99:17:5f:df:e8:1e:e9:45:39:50:
2c:fa:75:88:f8:17:6d:cd:f5:ad:c1:7d:d7:d6:03:7c:2b:ca:
4c:55:e8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 18:08:34 2024 by rpki-client on console-fra.rpki-client.org