Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/0E4UJ5qN2hA0OxfXbfPu275lRXo.roa
File: 0E4UJ5qN2hA0OxfXbfPu275lRXo.roa (raw, json)
Hash identifier: waR9VcgMGncVkxM4YxNQVPZACbCjENQ1JfM6JkswhPY=
Subject key identifier: D0:4E:14:27:9A:8D:DA:10:34:3B:17:D7:6D:F3:EE:DB:BE:65:45:7A
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 018D699895F3D2B1691997E0981605CD0D1D
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/0E4UJ5qN2hA0OxfXbfPu275lRXo.roa
Signing time: Fri 02 Feb 2024 11:33:43 +0000
ROA not before: Fri 02 Feb 2024 11:33:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 45.89.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Apr 2024 18:47:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:69:98:95:f3:d2:b1:69:19:97:e0:98:16:05:cd:0d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Feb 2 11:33:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d04e14279a8dda10343b17d76df3eedbbe65457a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a8:6b:8c:8c:7f:da:4e:df:80:d1:63:d4:0a:
7b:e3:9d:64:e5:e5:80:36:a9:72:b7:3e:65:35:86:
d6:c8:28:ee:62:69:29:c7:76:a1:6a:44:f7:82:6d:
e3:ce:12:b8:45:b2:ba:ad:83:e7:ea:d3:77:bb:4b:
33:a9:6c:47:1f:78:da:39:93:99:5a:08:7e:55:27:
77:30:04:c4:46:3a:6a:48:6a:f6:29:8b:2f:1d:03:
2b:e3:68:a8:ea:22:c7:82:65:48:ec:3e:8f:03:df:
b1:87:df:db:a2:5d:c3:7a:c5:57:3e:db:23:34:83:
5c:5d:f5:10:91:f0:ab:04:3f:c0:15:f6:64:01:d7:
ae:d8:7b:28:f2:a9:5d:e1:7b:fd:e7:8a:25:31:f4:
6f:80:29:fc:b0:e6:0b:19:e3:30:47:21:b3:66:7a:
74:24:02:30:42:e9:dc:2a:cc:f7:53:70:88:9a:f0:
95:93:20:51:ed:a6:b6:e2:22:cc:8d:ba:d0:61:91:
9f:4e:cd:55:b1:43:05:16:2c:23:87:1e:2d:e5:31:
36:d5:2f:e1:4c:aa:b7:28:a4:15:7f:4e:13:a8:2a:
c6:5f:e9:2f:5c:83:02:c4:0f:5c:3e:ce:0d:9b:9a:
ef:bb:b6:06:ca:15:0e:8f:81:a0:a2:67:7a:2c:3d:
2b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:4E:14:27:9A:8D:DA:10:34:3B:17:D7:6D:F3:EE:DB:BE:65:45:7A
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/0E4UJ5qN2hA0OxfXbfPu275lRXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.31.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:61:58:b3:bc:c1:30:7a:f1:a8:5a:b4:46:6e:64:60:b4:3a:
75:c4:c9:33:cc:1f:57:4c:8a:b6:d9:7b:df:2d:62:26:d9:ef:
79:b1:88:6c:b8:42:f0:01:1b:7a:75:af:df:8e:21:7f:32:59:
c1:66:5e:f2:6b:0c:01:ed:04:df:37:6b:41:4d:3c:6f:0e:a3:
d7:5c:14:97:f5:65:60:41:77:63:df:30:d8:d9:cb:d5:f9:72:
3e:35:83:e1:b2:3a:99:e2:34:6d:a7:39:ad:1c:fe:47:e4:57:
eb:50:df:13:90:10:c5:bf:5b:03:36:5e:d1:ac:04:63:bb:7b:
b6:93:62:35:55:79:1b:a7:71:05:c5:fb:24:56:65:36:27:d6:
ef:e9:f7:d9:d8:86:74:ba:64:61:3e:88:7b:48:a7:b2:56:5e:
63:e0:59:3d:63:43:1c:e6:a1:8a:43:7b:cb:97:97:cc:eb:d0:
ad:4d:05:2f:c8:09:47:44:00:fa:c7:b5:b8:cd:46:0b:76:3b:
a8:73:e7:3b:2b:f1:66:7b:20:56:16:f1:f0:19:15:b0:81:56:
49:c0:f6:7b:88:e4:f2:12:a3:fc:e4:17:c6:35:e8:70:63:79:
d8:12:91:20:2c:44:cb:ce:ec:b0:9b:7e:2c:0a:0e:5e:58:a0:
11:dc:df:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:40 2024 by rpki-client on console-fra.rpki-client.org