Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/i76CSttb2hbiz9NuxyXjX9MZuyA.roa
File: i76CSttb2hbiz9NuxyXjX9MZuyA.roa (raw, json)
Hash identifier: 5jmJshz5KZW15iOJ3no6FpwrMNhPNXeExatY+cY94Wc=
Subject key identifier: 8B:BE:82:4A:DB:5B:DA:16:E2:CF:D3:6E:C7:25:E3:5F:D3:19:BB:20
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 0191D9D7426BDC10C8B636D4D7E84961B988
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/i76CSttb2hbiz9NuxyXjX9MZuyA.roa
Signing time: Tue 10 Sep 2024 02:50:48 +0000
ROA not before: Tue 10 Sep 2024 02:50:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214766
IP address blocks: 45.134.146.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Sep 2024 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d9:d7:42:6b:dc:10:c8:b6:36:d4:d7:e8:49:61:b9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Sep 10 02:50:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8bbe824adb5bda16e2cfd36ec725e35fd319bb20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6e:7e:57:85:58:64:17:92:a2:24:7f:a4:b9:
7c:fc:5f:9a:20:44:06:bc:31:f2:34:d4:01:23:2c:
f8:3c:72:81:aa:4d:c2:21:6d:6d:48:2f:70:2b:f7:
fb:a4:c0:91:e2:9f:33:aa:5e:44:eb:93:b0:7f:38:
94:7d:95:8b:a0:16:3f:64:18:71:33:fa:04:47:ff:
27:86:dd:21:06:d7:eb:da:3f:f3:f3:f6:ec:1e:3e:
3a:14:e1:02:13:dd:df:0c:a3:c7:15:91:ee:79:0b:
25:66:f4:f3:3b:a0:76:cf:44:6e:94:c2:51:10:1d:
48:cf:f6:e2:2e:9d:18:e9:97:ef:f9:85:5f:ec:b2:
d5:32:15:71:f7:86:b2:3b:eb:7f:84:85:8b:dc:75:
19:54:e9:dd:b3:e2:0b:e3:2f:e5:d7:c9:d3:78:ae:
49:88:55:dd:7f:e2:55:94:6e:a9:42:2e:20:eb:7e:
39:8a:11:9d:1a:cd:8a:1c:8c:45:40:96:dc:2c:32:
ca:e9:ce:61:f8:aa:0e:f7:3e:3e:c1:23:04:63:73:
7a:d6:c5:f4:ed:d8:68:61:a7:f7:d6:0d:71:aa:7a:
a5:74:a9:16:72:53:e1:8c:2f:bc:3d:eb:ac:af:f7:
16:d6:94:6d:cd:25:6c:c8:d6:69:a5:c0:d1:2d:7a:
54:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BE:82:4A:DB:5B:DA:16:E2:CF:D3:6E:C7:25:E3:5F:D3:19:BB:20
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/i76CSttb2hbiz9NuxyXjX9MZuyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.146.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:5c:f4:f8:e9:f5:31:55:64:26:ad:b3:bd:e6:e0:60:44:09:
4e:7e:4f:f6:fd:56:83:3a:0a:ad:62:66:21:b0:1e:43:57:e4:
90:4a:37:ca:12:c4:47:c5:c5:29:0c:8b:b8:dd:fe:cc:7c:43:
48:2d:4b:69:51:53:18:6e:5c:a1:ff:3a:a3:9a:4b:27:bd:23:
9b:a3:84:59:5c:95:5b:48:d4:90:c8:49:2a:99:59:91:f7:6c:
75:ff:86:91:a2:26:00:7b:e7:bd:c9:19:df:a4:1b:d1:42:fe:
fe:3a:a9:04:0b:c8:cb:22:2d:20:10:14:e3:5d:58:82:10:67:
c8:dc:53:19:25:83:db:f8:85:09:d8:02:0a:c9:92:ab:eb:8f:
97:6c:04:9f:23:c9:f5:a2:c1:11:94:45:d5:cc:f7:91:52:e0:
5a:5b:9a:3a:27:8f:4b:51:5c:f5:df:77:8c:92:14:ca:f6:92:
3c:81:c1:db:bd:82:16:7b:7b:84:aa:a8:7a:87:60:a8:2e:fc:
39:88:db:e1:8c:d4:21:f5:de:b0:1d:ab:70:3b:2c:c9:99:d3:
e6:5f:dc:8d:82:2c:a5:9b:0f:87:65:4e:9d:dd:f2:71:d6:ff:
3c:a8:1e:2b:51:54:a6:a9:e0:72:ce:2c:87:f5:02:93:01:9f:
0b:4f:39:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 10:41:58 2024 by rpki-client on console-ams.rpki-client.org