Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/HMeVJk5aJnF9ACi8niMVZQXvFxk.roa
File: HMeVJk5aJnF9ACi8niMVZQXvFxk.roa (raw, json)
Hash identifier: NdI5+bKnwzPKRLIn8WL+JGXeCr9Yv7qXk5fdkN7uAjE=
Subject key identifier: 1C:C7:95:26:4E:5A:26:71:7D:00:28:BC:9E:23:15:65:05:EF:17:19
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 01874F2542AC315B633C25B184EBB0E0F559
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/HMeVJk5aJnF9ACi8niMVZQXvFxk.roa
Signing time: Wed 05 Apr 2023 02:00:54 +0000
ROA not before: Wed 05 Apr 2023 02:00:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23470
IP address blocks: 45.134.144.0/24 maxlen: 24
45.93.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Sep 2023 06:58:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4f:25:42:ac:31:5b:63:3c:25:b1:84:eb:b0:e0:f5:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Apr 5 02:00:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1cc795264e5a26717d0028bc9e23156505ef1719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d8:62:2f:b7:97:d7:67:61:ff:b8:ea:45:f2:
aa:70:2b:6c:ad:ba:84:b7:04:9c:b1:2d:a9:16:98:
69:d2:34:dd:04:5b:52:a9:1b:85:49:7f:12:0d:a9:
fb:16:a1:4a:07:d2:39:80:a9:d0:64:24:17:0d:25:
48:d1:bb:62:51:0a:ee:ea:11:95:f0:68:d6:1b:ab:
5a:b8:f0:7f:ec:c4:dd:d4:68:3b:c4:20:84:43:54:
24:e7:50:43:ca:32:80:57:fa:e6:4e:8b:9a:10:25:
be:8c:b8:93:27:7f:77:3a:fb:6c:ec:7f:0a:d9:f7:
2b:23:a6:84:99:fa:6a:10:24:e2:4f:73:c9:a1:65:
e9:1e:d6:52:ad:89:5a:22:57:6e:3c:d6:ab:fb:c7:
05:67:ec:f1:d3:ed:97:9c:8f:1d:62:b5:90:e6:8c:
5b:d4:56:9b:5c:29:1b:9f:6c:3c:a1:8b:48:42:94:
07:af:f1:18:a1:55:ee:a1:0e:aa:28:99:ef:91:c1:
0d:d8:15:c8:f8:cb:e7:1a:3c:0d:3e:aa:f6:c3:83:
24:eb:7e:7d:41:e0:9e:e4:52:8d:40:3d:3d:f0:45:
b6:b1:42:bf:4f:e9:73:cc:8b:0c:0d:57:31:17:24:
d6:65:71:3c:84:1b:7b:f1:06:3c:09:d9:29:e5:8f:
87:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C7:95:26:4E:5A:26:71:7D:00:28:BC:9E:23:15:65:05:EF:17:19
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/HMeVJk5aJnF9ACi8niMVZQXvFxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.16.0/24
45.134.144.0/24
Signature Algorithm: sha256WithRSAEncryption
35:38:d2:1f:89:ae:81:0c:80:e9:0b:42:54:d8:f3:51:58:b9:
24:d3:b9:27:b3:96:c8:7b:ba:29:99:05:e0:6f:0f:6c:f2:4d:
2c:0b:25:98:dd:fc:b0:3a:16:fb:a0:57:06:d8:05:8c:c7:e0:
b9:4f:5a:d5:fa:6a:e5:46:02:2e:27:bd:06:36:da:36:54:18:
a4:af:72:af:72:07:c9:24:02:5e:41:f4:81:be:66:2c:bb:f8:
2d:e0:a4:d4:99:e5:eb:05:99:a1:75:83:40:44:e6:44:3f:c4:
d9:6e:69:b1:1c:f2:2d:4c:3a:52:8e:f1:a3:01:93:d3:3b:73:
91:6b:10:ec:4b:ee:45:13:ed:16:ae:90:df:7f:80:d0:2f:19:
85:15:5c:d7:a6:50:ec:2b:2b:e9:5a:10:8a:a5:6f:50:12:35:
ad:1a:8d:88:2f:56:ae:00:36:c9:f8:db:f8:9f:94:7e:cb:b5:
92:7a:e0:2e:f1:96:46:04:90:b9:4f:cc:c2:15:44:99:2a:a8:
be:7e:35:ef:57:4d:c4:eb:25:21:67:2a:ad:68:f6:7c:d6:79:
6a:8a:84:43:88:d6:72:76:3f:61:c1:d2:25:df:13:05:ee:9a:
48:8c:ec:6b:23:dd:0a:81:37:92:ba:f8:86:8e:e6:99:57:08:
a1:b6:21:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:50 2024 by rpki-client on console-fra.rpki-client.org