Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/rpEF5JJPC5mOFXptIwG9PqyCFUA.roa
File: rpEF5JJPC5mOFXptIwG9PqyCFUA.roa (raw, json)
Hash identifier: QE79K9TO1jEMuu8DvGApcucbQRDaM2zo1h57Si5R1Y4=
Subject key identifier: AE:91:05:E4:92:4F:0B:99:8E:15:7A:6D:23:01:BD:3E:AC:82:15:40
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 0189ECECEF0D613E19974D4A96564F6C8964
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/rpEF5JJPC5mOFXptIwG9PqyCFUA.roa
Signing time: Sun 13 Aug 2023 03:24:57 +0000
ROA not before: Sun 13 Aug 2023 03:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135097
IP address blocks: 45.135.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ec:ec:ef:0d:61:3e:19:97:4d:4a:96:56:4f:6c:89:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Aug 13 03:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae9105e4924f0b998e157a6d2301bd3eac821540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:db:f6:73:00:de:c4:35:e5:af:95:14:4d:7a:
bb:2f:e1:4d:6c:d7:2f:6a:f2:9e:f2:73:ce:2c:6f:
7f:f3:ed:63:10:4a:92:85:47:e0:03:47:a9:68:69:
e4:cb:cc:09:dc:84:30:24:e2:14:fa:a3:a2:1e:32:
0c:aa:40:7f:eb:65:fd:77:70:af:10:ac:2e:73:73:
fa:f6:f1:af:d8:0f:e4:21:07:4c:e3:a5:54:f6:6d:
b7:46:2a:10:a0:f7:be:3d:17:bf:3a:89:54:1e:06:
0a:26:00:69:c6:d2:17:0e:21:1f:d7:7c:23:bb:20:
30:36:a4:4d:28:28:f6:c8:5f:34:a1:9b:76:cf:54:
9a:f1:f1:a3:ad:6a:66:65:42:51:be:60:d5:28:d6:
4f:c3:0b:fa:b2:ee:1f:b5:23:db:87:95:56:5e:cd:
d0:4c:53:3d:00:50:b0:26:4e:bb:e0:4a:07:e0:7d:
52:c1:5d:19:cb:39:71:6e:cf:cb:55:ce:aa:f9:bb:
27:46:f3:56:32:08:d1:f9:1a:09:ce:7e:3b:c7:db:
a7:06:e3:4f:9a:0f:97:8e:9e:b1:cd:7f:2a:9f:97:
94:4f:a8:74:44:75:90:ab:9b:c0:31:5b:f0:9a:f3:
ec:92:f3:54:0e:84:27:6e:8d:bd:d1:5f:fe:f2:9f:
aa:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:91:05:E4:92:4F:0B:99:8E:15:7A:6D:23:01:BD:3E:AC:82:15:40
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/rpEF5JJPC5mOFXptIwG9PqyCFUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.237.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:e6:97:c5:27:6c:bc:94:d3:a6:b6:21:34:0f:94:55:f8:9f:
c3:ca:63:23:79:6c:4d:fa:32:87:d7:e3:2e:bf:74:3e:01:42:
92:b1:2c:34:5d:d4:8e:de:b5:4e:51:a0:03:57:ad:f1:89:54:
e6:f9:fa:9d:b8:97:a5:f4:ef:10:ba:87:d7:b9:c8:cf:57:d2:
54:5a:02:a0:78:73:db:0d:08:8d:9a:3d:21:86:74:40:b9:81:
52:cb:db:b5:21:77:bd:47:1c:d5:0a:d6:0e:54:25:44:61:af:
0c:45:c5:3d:00:f7:4e:3a:c3:1f:75:c0:5c:c6:11:c9:21:76:
69:d5:d8:de:28:90:16:f3:9b:cd:20:31:20:30:9a:f1:de:b5:
94:bd:c4:4a:4f:fa:d8:a0:95:39:40:1c:0f:2b:ac:2c:55:9a:
20:e9:89:a9:60:da:95:4f:59:31:91:2f:cb:05:58:3a:95:bc:
5e:d2:de:4b:8d:16:1d:f8:90:0d:07:27:ed:54:32:5e:2e:2a:
d8:6f:f0:4b:8c:f9:9b:d5:5a:85:a6:cc:f7:c2:7a:e0:4e:c9:
a3:e8:e1:be:50:87:bb:f6:7e:67:ce:11:7b:87:cf:c0:31:9d:
3b:03:17:39:e1:cd:e9:a6:15:28:18:be:a1:17:f2:56:f6:d6:
c1:6b:3c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:04 2024 by rpki-client on console-ams.rpki-client.org