Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/N1UHWfVqQJS29wRlbQm94p02A-Y.roa
File: N1UHWfVqQJS29wRlbQm94p02A-Y.roa (raw, json)
Hash identifier: 5Yttk01iKlm/w5dceSFCOmJa6Ccfc+WOW1Vp/NBc34s=
Subject key identifier: 37:55:07:59:F5:6A:40:94:B6:F7:04:65:6D:09:BD:E2:9D:36:03:E6
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018CC8DFABD89C6FA71C4FB572E657CB96C9
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/N1UHWfVqQJS29wRlbQm94p02A-Y.roa
Signing time: Tue 02 Jan 2024 06:32:30 +0000
ROA not before: Tue 02 Jan 2024 06:32:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 45.156.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Jan 2024 15:16:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:ab:d8:9c:6f:a7:1c:4f:b5:72:e6:57:cb:96:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 06:32:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37550759f56a4094b6f704656d09bde29d3603e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:05:7b:30:9b:34:63:b3:52:c7:67:d3:8a:1c:
0f:67:b2:33:c2:6a:74:e2:07:cf:34:a6:3a:94:69:
60:16:08:3d:50:ea:5a:62:72:6e:e2:fe:da:52:c0:
ef:1b:30:d6:fe:23:79:fa:1f:9d:b3:fb:5f:86:56:
b1:1f:9a:a7:68:73:00:c5:de:2e:4f:a7:fa:8a:72:
52:a2:61:2a:de:db:ca:cd:35:7f:f6:a1:bb:00:86:
ab:6b:9f:83:84:69:c7:69:3f:e8:7c:4a:0d:5a:e0:
89:59:2c:24:59:b9:40:b6:31:2e:db:aa:0f:04:71:
cc:a4:a4:53:b9:ea:1a:56:ec:98:88:71:0a:b1:4d:
03:b8:b7:af:07:6a:de:73:64:0c:28:12:bc:a3:50:
df:c9:2b:9e:fc:31:8e:63:15:47:ab:aa:ad:68:45:
76:67:81:f2:f8:b2:31:9e:41:d5:23:89:4f:b7:32:
40:e9:fe:46:a8:ba:5b:04:99:bd:33:ea:88:bc:d0:
8a:84:53:a7:fd:e7:06:a1:ec:37:78:4b:ed:e5:be:
e0:0d:bc:18:43:1e:d5:40:2d:0a:1b:6e:3c:e5:95:
b6:d6:2c:0a:b4:78:4a:09:c0:3a:b9:3f:48:b6:d0:
10:be:bb:71:f2:5e:b3:17:6e:76:4d:96:3a:11:99:
47:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:55:07:59:F5:6A:40:94:B6:F7:04:65:6D:09:BD:E2:9D:36:03:E6
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/N1UHWfVqQJS29wRlbQm94p02A-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.222.0/24
Signature Algorithm: sha256WithRSAEncryption
16:46:66:43:7a:37:81:64:73:73:56:9b:f3:2d:f1:ac:ec:c5:
48:86:c6:2f:15:11:05:4d:f1:e8:e2:07:c3:54:86:2a:64:2f:
34:64:18:ed:0e:8b:ba:da:ed:f1:8c:9d:c4:30:61:65:cf:cc:
3b:b9:43:ce:45:ca:bb:5b:12:82:76:8f:1b:12:a9:4a:38:e0:
c4:39:c0:ca:77:b5:b3:19:48:c7:ad:4b:2a:fe:e6:a7:cb:23:
28:33:fa:ec:ef:7a:f6:b1:b3:ac:10:b6:48:88:14:f5:2f:8d:
e3:13:16:34:69:a1:cb:f2:c2:11:25:46:6b:d1:fc:78:7f:3a:
0b:7d:40:70:d1:77:4e:e1:b7:6c:70:06:96:de:09:d9:87:96:
52:17:a6:1a:c3:63:81:e0:22:97:96:6f:72:d7:14:02:d7:3c:
65:89:c3:2e:ed:ad:42:72:ab:aa:a3:e6:bf:f5:2e:b9:21:80:
2b:c6:cb:f1:9a:e0:7e:0b:0c:57:d8:63:e7:31:f3:22:84:fa:
37:d3:f7:f8:f5:a3:6d:30:76:ac:f9:dd:49:03:00:41:63:25:
fd:98:b4:84:e3:7c:2e:8a:aa:14:ee:c1:9e:34:ee:92:08:60:
48:1a:7e:22:bf:75:77:d9:b0:f7:a5:80:cf:e2:0d:60:79:9d:
e9:2a:01:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:04 2024 by rpki-client on console-ams.rpki-client.org