Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/lH1A56A5rgL6IajBTE1rgkReiV0.roa
File: lH1A56A5rgL6IajBTE1rgkReiV0.roa (raw, json)
Hash identifier: 9NmwcOTaHN+6o5z32X0xbJ15LZ9VF+8ucWpLyzVN6Dc=
Subject key identifier: 94:7D:40:E7:A0:39:AE:02:FA:21:A8:C1:4C:4D:6B:82:44:5E:89:5D
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 018B3C80A86642EC5BD9D5D53997C0C7F943
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/lH1A56A5rgL6IajBTE1rgkReiV0.roa
Signing time: Tue 17 Oct 2023 07:19:06 +0000
ROA not before: Tue 17 Oct 2023 07:19:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.89.31.0/24 maxlen: 24
45.89.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3c:80:a8:66:42:ec:5b:d9:d5:d5:39:97:c0:c7:f9:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Oct 17 07:19:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=947d40e7a039ae02fa21a8c14c4d6b82445e895d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:69:f9:c9:c4:5a:7b:bb:57:14:dd:9a:06:d1:
cd:ed:dd:e5:6b:c5:fe:e2:f0:02:ef:a5:5c:64:ad:
71:83:7e:dc:00:00:52:d2:49:89:bf:c5:dd:51:ee:
ee:5b:62:1c:17:0e:98:26:16:61:95:07:a9:b8:7b:
04:24:d3:99:9a:f5:64:ad:22:3c:9b:42:bb:74:50:
a0:bd:97:0c:b7:d2:18:58:8c:86:66:08:b0:ed:cb:
75:2b:af:2a:2e:b5:74:f7:49:9a:35:4e:16:fb:db:
00:97:9a:d4:b4:ea:89:3f:2e:1f:c9:d1:8e:e9:bf:
23:4b:14:2d:b8:5b:78:f3:88:9c:bd:82:ae:9b:23:
b3:81:b2:99:aa:2c:9c:3e:db:f6:ab:d6:7c:01:42:
db:bb:a4:2b:c7:62:8b:31:00:57:d7:0c:68:ae:5f:
ca:e8:f3:de:f5:39:ad:05:58:e3:20:6a:94:a6:c7:
b9:7c:a9:0d:6a:e8:41:8c:4d:51:b9:2e:96:e6:64:
2e:38:b0:0a:b7:90:e4:ea:86:4b:9d:3a:67:76:77:
25:19:cf:8f:66:ae:9f:a8:2f:ac:43:cd:77:8a:9e:
b2:ae:59:88:18:a7:87:c0:0b:d8:70:c0:e5:c8:a2:
9f:ed:31:43:76:3b:60:15:70:cb:b8:12:db:ac:15:
91:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:7D:40:E7:A0:39:AE:02:FA:21:A8:C1:4C:4D:6B:82:44:5E:89:5D
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/lH1A56A5rgL6IajBTE1rgkReiV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.29.0/24
45.89.31.0/24
Signature Algorithm: sha256WithRSAEncryption
65:08:ac:7a:73:e9:d7:d7:13:24:59:e5:24:99:47:5b:bf:20:
09:02:ee:33:d9:b2:c0:fd:a3:78:1f:63:6b:ae:2e:6e:53:06:
04:e9:bc:ba:19:fd:e1:f2:a2:51:82:39:60:0b:2f:f9:43:ec:
a2:d9:00:4b:39:9c:d8:82:3b:3e:8f:c2:82:13:c4:09:e4:a1:
38:52:94:3a:a7:2d:ed:22:15:55:bc:5e:de:f0:62:31:16:a7:
74:f8:ff:13:f7:8c:11:06:6d:46:d9:94:c8:9f:f1:fb:eb:1d:
75:65:7d:e8:50:ed:b8:67:39:13:bd:7a:c1:c9:f5:d3:96:ba:
c4:00:81:af:94:89:53:21:6b:9f:96:b9:47:15:89:19:a2:d5:
cb:d6:3a:2f:74:f9:ce:42:58:04:a7:9f:93:03:41:69:de:1f:
f2:34:a2:6f:bc:2f:8b:41:83:d9:34:2f:98:c5:41:56:0b:81:
e3:e3:de:42:92:31:36:b2:9f:69:8e:1e:0d:50:c5:a8:ca:11:
e3:be:f4:11:cb:f4:e3:08:5e:40:ba:d5:12:59:82:84:95:bc:
07:51:0f:fd:80:2e:11:3d:0b:5a:d3:8c:57:ac:6c:ce:6b:5e:
77:d7:5f:bc:73:5e:9e:be:10:3e:f3:d8:da:be:b8:ee:b4:1c:
47:39:ff:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:40 2024 by rpki-client on console-fra.rpki-client.org