Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/vsOKkdD_MsuQNtvmfN3-QsRJ_yU.roa
File: vsOKkdD_MsuQNtvmfN3-QsRJ_yU.roa (raw, json)
Hash identifier: zy5BxX794nFwWori6ej8I2KOXdu55lDx7989PGvrVcs=
Subject key identifier: BE:C3:8A:91:D0:FF:32:CB:90:36:DB:E6:7C:DD:FE:42:C4:49:FF:25
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 018CCBA1F64B5B8F0A6E4DA1A4D6B9D051E2
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/vsOKkdD_MsuQNtvmfN3-QsRJ_yU.roa
Signing time: Tue 02 Jan 2024 19:23:58 +0000
ROA not before: Tue 02 Jan 2024 19:23:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 45.89.31.0/24 maxlen: 24
45.89.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 11:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:cb:a1:f6:4b:5b:8f:0a:6e:4d:a1:a4:d6:b9:d0:51:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Jan 2 19:23:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bec38a91d0ff32cb9036dbe67cddfe42c449ff25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0c:9d:3e:62:2f:2a:81:99:a2:95:8f:5e:93:
a9:5c:3d:e7:c6:1a:ef:02:70:95:fc:d0:c5:22:65:
dc:b3:dc:af:f0:22:b7:e3:35:22:02:86:5d:00:1b:
1e:ae:9d:8d:06:a0:a4:9e:0d:87:46:99:c9:27:66:
f8:01:fe:31:6b:86:0e:5b:4d:37:9c:66:0d:d5:28:
1f:f2:47:c6:74:e0:0f:0b:97:a2:f4:ed:b0:78:5f:
92:74:34:c1:48:32:99:b2:18:30:9c:c2:56:5e:93:
0c:0c:fc:d0:c8:f4:f3:79:ce:46:60:d8:50:b0:94:
8c:36:98:c4:1d:f4:3e:5f:84:fe:db:56:b6:c9:28:
34:09:e9:e6:30:3a:70:59:c2:a6:bb:6e:55:38:5c:
fd:39:2b:f9:cd:a2:33:62:98:31:55:de:e6:40:eb:
b3:03:c0:63:cd:4c:6c:58:af:11:99:95:f2:86:b4:
a9:a5:de:07:73:58:f8:39:40:f4:60:24:5f:10:d9:
ba:c5:1e:ce:24:a3:67:c1:b7:17:e1:dc:0b:88:ea:
ec:f3:3f:17:8f:f9:20:e0:07:9c:7d:c9:51:86:10:
df:47:7b:a1:6b:76:5a:ef:93:22:8a:d5:b1:72:e3:
d2:e7:f7:45:71:51:9a:32:b8:36:b1:83:ac:c9:b1:
05:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C3:8A:91:D0:FF:32:CB:90:36:DB:E6:7C:DD:FE:42:C4:49:FF:25
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/vsOKkdD_MsuQNtvmfN3-QsRJ_yU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.29.0/24
45.89.31.0/24
Signature Algorithm: sha256WithRSAEncryption
20:93:0a:e5:cc:c8:83:fc:dd:a2:93:17:01:8b:3f:40:87:c7:
2a:0e:d0:d1:99:a3:ec:90:ae:25:fc:7f:aa:52:da:50:74:ed:
b2:69:ef:14:b2:75:bb:81:52:34:c2:56:98:1c:2b:46:a8:82:
b8:4c:e2:fd:ad:09:be:e2:c8:59:ed:e7:ea:75:7c:f9:4a:66:
72:c2:18:a0:68:33:80:d2:48:97:40:d8:21:ae:71:f3:bd:b3:
5e:89:b3:66:f9:31:13:bc:31:09:bd:e1:1d:10:f2:14:ff:1e:
36:eb:32:9e:1d:91:21:cb:73:ea:da:7d:f2:74:e7:a7:a9:19:
02:c6:86:5f:31:59:ef:51:c1:91:08:d9:69:be:01:be:92:03:
2b:b3:1c:fe:42:95:26:f5:38:81:1c:6f:cb:d1:c6:b7:3f:e0:
72:4c:d5:63:f6:60:fd:40:65:0b:26:bc:db:ae:9d:f8:c8:0b:
de:5f:dd:6b:a5:41:3e:df:d6:e7:cc:94:42:a0:e3:31:e8:5c:
e8:f8:9e:34:61:3c:d6:a1:dc:c9:e2:4c:14:f4:b1:60:84:1d:
5c:8d:64:9c:70:a8:b1:f1:3d:84:96:cb:91:5a:91:9c:61:40:
86:7f:d6:df:66:14:4a:1c:ba:9a:ef:ee:0b:a9:b4:0e:f5:ea:
45:f2:fe:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:11 2024 by rpki-client on console-ams.rpki-client.org