Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/kR5LMArBzMySRvv3aBfYkEWNzJU.roa
File: kR5LMArBzMySRvv3aBfYkEWNzJU.roa (raw, json)
Hash identifier: rNC343Venr6X5aFjx5/++h9ioUT8uDpgbI0r1uWSTKw=
Subject key identifier: 91:1E:4B:30:0A:C1:CC:CC:92:46:FB:F7:68:17:D8:90:45:8D:CC:95
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 0191E01996F9787B31DC0CCB441A84BEDCF6
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/kR5LMArBzMySRvv3aBfYkEWNzJU.roa
Signing time: Wed 11 Sep 2024 08:00:58 +0000
ROA not before: Wed 11 Sep 2024 08:00:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214766
IP address blocks: 45.134.146.0/23 maxlen: 23
45.134.146.0/24 maxlen: 24
45.134.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Sep 2024 10:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e0:19:96:f9:78:7b:31:dc:0c:cb:44:1a:84:be:dc:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Sep 11 08:00:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=911e4b300ac1cccc9246fbf76817d890458dcc95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5a:72:36:32:e2:1d:25:59:9a:f1:02:45:16:
86:a8:28:76:bd:89:27:de:a8:63:ab:d6:ab:9c:3a:
97:fd:dd:f6:e3:66:77:af:9f:85:aa:9f:50:08:bb:
8c:45:9e:93:b7:6d:07:71:83:43:45:8f:df:ee:1c:
da:18:90:2d:b4:71:ea:ab:75:2d:1a:82:59:cd:b2:
b4:af:76:81:f2:59:aa:11:69:a2:70:3e:9b:5b:ea:
5a:50:32:cf:70:45:56:c2:9a:cb:f9:06:3f:1a:2e:
28:c1:e3:52:ea:7d:c2:8b:4e:7b:6e:63:9b:d1:42:
af:60:96:cf:dc:fd:30:54:dd:1f:f0:51:1e:41:dd:
dc:3a:1b:88:70:ae:44:2b:89:a1:3a:32:f7:13:bb:
3d:46:db:fe:0a:b9:5e:ce:06:82:a8:84:89:e3:a7:
d7:04:c3:61:dd:ad:d2:34:bd:58:3e:f9:20:7e:b4:
bd:04:10:8c:e8:7b:10:a9:49:b1:31:99:b3:0a:ba:
e4:a5:6c:f7:1d:81:d7:e8:78:49:06:8e:71:de:b7:
35:97:81:fb:7c:47:f9:8a:0c:04:c2:2a:42:96:b2:
4b:f7:4a:d8:c5:4e:9b:9e:59:f1:db:b5:6a:50:bd:
a5:29:2d:f1:cc:20:64:cd:e2:d3:71:7e:4d:81:ae:
3d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:1E:4B:30:0A:C1:CC:CC:92:46:FB:F7:68:17:D8:90:45:8D:CC:95
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/kR5LMArBzMySRvv3aBfYkEWNzJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.146.0/23
Signature Algorithm: sha256WithRSAEncryption
62:e8:5b:6d:7e:c7:79:dc:c7:d1:a8:eb:05:40:cc:b9:81:04:
e5:e1:fa:e3:4c:d1:7b:9d:54:9e:d1:d2:45:01:bd:bd:62:a3:
5a:a4:47:ce:fb:8e:65:05:3e:16:77:ff:5e:e1:5c:d9:51:cb:
b4:13:96:a6:aa:6d:5d:eb:77:d6:3c:94:43:b2:c5:3e:e9:56:
ab:e7:a2:87:93:4e:b0:d4:2b:1f:b7:f6:83:09:38:78:58:ac:
e1:b3:2e:2a:96:2e:71:35:ec:e3:11:67:2a:e1:bd:97:59:e6:
9d:ae:8d:56:26:34:e0:94:e2:c2:2a:5f:27:79:66:7e:cc:bd:
4f:33:32:fb:d8:8e:94:50:58:34:b8:ac:9e:b4:ad:c6:0b:60:
af:b0:d7:ed:22:2a:97:16:2e:81:e9:e8:a2:56:6a:bc:55:0c:
f4:3d:0f:a0:54:04:81:f7:b7:9f:e1:64:5b:24:d5:cf:fc:87:
3d:8a:4d:e6:51:81:94:0d:88:b2:06:a3:f0:c1:22:8e:99:ca:
64:e0:82:17:31:82:d3:2a:a5:9c:cb:81:ed:20:f6:6c:67:38:
5b:38:da:e3:09:4a:8d:31:fb:fe:d9:46:63:31:8c:21:c3:84:
3b:13:6f:02:3c:f4:fb:f0:56:6f:1a:9e:b6:5d:91:bc:14:de:
cf:12:f2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 13:24:06 2024 by rpki-client on console-ams.rpki-client.org