Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/vfat9u88706xeprQeXV0994w3c4.roa
File: vfat9u88706xeprQeXV0994w3c4.roa (raw, json)
Hash identifier: pS4QQdvc2OFFDhFTF9LS1c3xbPhmzS8mpIxQwxGoxpY=
Subject key identifier: BD:F6:AD:F6:EF:3C:EF:4E:B1:7A:9A:D0:79:75:74:F7:DE:30:DD:CE
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 018CC50013F0410E9D7C3DF19E357EBF7D4C
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/vfat9u88706xeprQeXV0994w3c4.roa
Signing time: Mon 01 Jan 2024 12:29:25 +0000
ROA not before: Mon 01 Jan 2024 12:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205220
IP address blocks: 45.89.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Apr 2024 08:46:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:13:f0:41:0e:9d:7c:3d:f1:9e:35:7e:bf:7d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Jan 1 12:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bdf6adf6ef3cef4eb17a9ad0797574f7de30ddce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c8:ec:d8:df:92:ad:5a:36:60:71:b7:bd:a3:
4b:78:28:37:96:7e:43:1b:42:61:7c:02:36:26:5e:
91:85:ab:b7:89:57:90:54:c7:21:4c:29:f9:47:39:
33:d4:d7:f6:0d:c7:70:7f:e8:33:0e:e3:70:ad:d3:
5f:a1:2a:8f:05:59:55:e8:d0:6a:5f:1b:9c:da:c7:
30:ba:01:18:f1:6c:50:92:a3:b4:b6:75:6a:20:f5:
99:65:8d:41:11:4d:ae:26:b4:1b:d2:4f:28:fd:b4:
f0:01:5e:2c:4a:87:37:cd:9c:e6:58:fa:d2:09:1d:
26:48:28:2e:d8:cb:01:59:56:6f:66:2e:19:11:e5:
8b:66:fb:47:d9:3f:ac:82:aa:99:f3:a6:40:57:23:
e0:51:60:16:c8:5d:d2:51:01:2d:d7:fc:e6:61:29:
4d:71:b6:e5:14:59:bf:73:9f:35:f8:84:10:03:a1:
b2:ff:79:94:19:cf:30:a5:1e:a4:68:0f:73:ad:e5:
91:8c:9a:5f:44:92:a8:74:6e:d8:af:4a:92:cc:0b:
0e:9e:42:78:b0:25:ad:94:0b:c4:ed:22:25:eb:85:
ec:7c:66:d3:5f:b1:2a:e6:8b:45:f3:80:55:8c:d8:
ec:da:86:d6:6c:79:49:a2:53:13:a8:52:7a:fd:d5:
12:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F6:AD:F6:EF:3C:EF:4E:B1:7A:9A:D0:79:75:74:F7:DE:30:DD:CE
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/vfat9u88706xeprQeXV0994w3c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.28.0/24
Signature Algorithm: sha256WithRSAEncryption
70:f9:1a:ed:45:70:bd:61:3c:49:59:a6:65:64:43:fd:16:35:
3e:77:77:e3:70:f2:c6:95:e6:4a:43:0f:98:54:39:cf:2f:ef:
7c:3b:99:2a:30:0a:fd:4e:82:f4:62:b0:de:8d:a1:96:83:6f:
fa:5a:17:8f:92:b5:32:19:c8:61:42:85:41:ac:99:dc:01:2f:
19:a0:44:9f:6e:70:84:06:2b:7a:77:bb:f9:b7:5b:f6:9d:e6:
ff:14:29:ae:3d:90:28:0e:6a:fd:62:86:f2:91:5b:54:a5:42:
44:b7:c5:55:b7:d2:31:03:92:45:3c:13:fd:cb:11:ba:ac:fa:
ec:6e:6c:c3:98:34:c5:d6:de:f1:08:12:06:61:f0:63:3b:11:
ac:e0:3d:38:77:7c:d4:a4:3f:d2:b9:17:b9:e6:d0:06:30:77:
5e:71:9e:49:e6:1e:a4:26:38:58:ff:e8:14:54:8e:78:5c:2d:
a4:6a:02:14:d2:3a:5f:b0:e2:52:98:77:2e:d4:f2:16:25:b8:
1a:78:56:56:71:73:55:1e:68:27:58:99:63:0e:97:af:5f:a5:
3b:f3:7e:f2:96:52:4c:1d:61:82:77:4d:a3:ed:c3:bf:6d:b8:
e0:f2:71:40:52:ac:58:6a:eb:99:0d:16:99:24:da:b0:c2:cd:
ac:2e:0a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:40 2024 by rpki-client on console-fra.rpki-client.org