Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/kx6OZL9Lu8DZJpNkNNoawmNPszs.roa
File: kx6OZL9Lu8DZJpNkNNoawmNPszs.roa (raw, json)
Hash identifier: rtOqi07RqenZiE3LTGFfvasobKT+keMUhWsV6jT/+xw=
Subject key identifier: 93:1E:8E:64:BF:4B:BB:C0:D9:26:93:64:34:DA:1A:C2:63:4F:B3:3B
Certificate issuer: /CN=d2323101b29596ff442d3749373b8e9983354670
Certificate serial: 018B3EEF377A21D5ECA8C52124B9FCD940B1
Authority key identifier: D2:32:31:01:B2:95:96:FF:44:2D:37:49:37:3B:8E:99:83:35:46:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/kx6OZL9Lu8DZJpNkNNoawmNPszs.roa
Signing time: Tue 17 Oct 2023 18:39:06 +0000
ROA not before: Tue 17 Oct 2023 18:39:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44125
IP address blocks: 45.152.24.0/22 maxlen: 22
45.152.24.0/24 maxlen: 24
45.152.26.0/24 maxlen: 24
45.152.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3e:ef:37:7a:21:d5:ec:a8:c5:21:24:b9:fc:d9:40:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2323101b29596ff442d3749373b8e9983354670
Validity
Not Before: Oct 17 18:39:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=931e8e64bf4bbbc0d926936434da1ac2634fb33b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ae:7e:64:79:14:11:d8:7f:f7:0b:18:e0:0b:
3d:b9:62:24:69:4b:1b:bf:4e:22:17:63:8e:18:fb:
86:13:9e:82:f3:dc:a6:cb:b9:7e:8c:70:d9:28:1a:
07:ab:cc:7c:de:32:8a:3b:83:74:e7:fd:27:55:b0:
67:4b:bf:37:a5:50:b1:14:bd:51:0b:fe:80:ef:62:
65:82:e6:3e:0e:33:c3:c9:2c:65:03:2d:58:bb:8e:
7b:c7:02:de:e8:c6:12:70:2d:ea:6b:0b:6d:4a:77:
03:f1:d9:2b:01:72:a1:52:6a:e3:cb:63:b9:1b:6b:
f1:ca:aa:24:5b:1a:bc:e8:09:fa:90:03:a2:66:6b:
40:6c:3a:e1:06:19:4a:8e:be:71:87:21:be:6a:df:
66:c1:26:ae:5b:ae:37:61:0e:68:ee:01:26:02:4c:
d4:b2:4b:f5:c5:f2:6f:97:1d:a6:58:3d:99:0b:72:
cd:64:25:d5:90:03:db:05:cc:a7:ff:2d:c6:67:f4:
d2:ac:98:80:98:19:3f:cb:3e:27:0d:16:c1:04:46:
9a:bd:fc:9a:27:91:74:f1:02:3d:26:81:55:db:69:
fa:6b:a1:3e:fc:b4:20:43:b5:a8:e0:62:c0:86:8a:
4b:57:9b:40:ba:99:80:e0:ae:e8:0c:8a:99:7f:31:
3d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:1E:8E:64:BF:4B:BB:C0:D9:26:93:64:34:DA:1A:C2:63:4F:B3:3B
X509v3 Authority Key Identifier:
keyid:D2:32:31:01:B2:95:96:FF:44:2D:37:49:37:3B:8E:99:83:35:46:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/kx6OZL9Lu8DZJpNkNNoawmNPszs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.24.0/22
Signature Algorithm: sha256WithRSAEncryption
45:50:0a:e9:f5:e2:3d:cb:d5:dd:0b:f7:56:53:a3:b1:8a:d4:
c2:c9:e5:96:d6:28:1d:1d:e9:2c:88:2b:d5:95:6d:4a:fe:05:
e0:fc:f6:0b:c6:c3:4c:06:77:31:3a:23:e9:6a:3c:cf:76:38:
93:d2:ff:b0:c6:81:1b:66:50:15:3f:6b:94:04:6d:84:13:bf:
dd:92:be:11:65:d6:48:86:b0:13:0a:4f:10:f0:c3:f8:f7:4f:
fe:c8:7a:6a:95:5d:60:58:d6:e5:b3:42:ea:1d:64:ff:39:59:
f5:85:5c:9c:15:ae:56:60:e1:af:f7:61:42:bc:da:04:a5:4d:
14:a3:71:59:ed:f0:d1:d2:d0:1c:99:68:2c:d9:cc:43:c4:cc:
ba:e4:2a:db:1e:af:0d:9d:21:ff:54:96:54:9c:ac:d5:52:3f:
aa:d5:87:8a:81:28:01:7a:2a:f7:c9:f3:6e:9f:25:f5:b0:d8:
61:bc:c0:90:64:91:ff:08:fd:64:1a:17:03:b3:f3:a5:29:a1:
5e:e7:d4:3a:e2:f9:7e:a3:1a:ff:1e:f6:88:bd:a0:16:e4:4e:
f9:76:c7:13:3c:16:07:69:ab:0e:f4:51:99:73:62:a4:88:65:
4e:bc:30:c2:dd:af:f0:92:7b:e0:59:1e:a4:fc:6f:99:35:aa:
36:86:31:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:30 2024 by rpki-client on console-ams.rpki-client.org