Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/0vISAZhHdML7RMVr6grkx3fLgSM.roa
File: 0vISAZhHdML7RMVr6grkx3fLgSM.roa (raw, json)
Hash identifier: jtJpjMTsngZpomtM0WFsldntCr/IRZmc7+QkdTIAnoY=
Subject key identifier: D2:F2:12:01:98:47:74:C2:FB:44:C5:6B:EA:0A:E4:C7:77:CB:81:23
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 0185822D425B16A3C6915F76B03C740F1824
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/0vISAZhHdML7RMVr6grkx3fLgSM.roa
Signing time: Thu 05 Jan 2023 13:44:42 +0000
ROA not before: Thu 05 Jan 2023 13:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20712
IP address blocks: 45.139.229.0/24 maxlen: 24
45.139.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:82:2d:42:5b:16:a3:c6:91:5f:76:b0:3c:74:0f:18:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Jan 5 13:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2f21201984774c2fb44c56bea0ae4c777cb8123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:70:38:92:1e:f3:7f:ec:15:c5:06:a7:e0:7d:
4d:3a:18:e5:63:17:c4:e6:7b:74:e1:95:05:6c:7e:
b5:ed:8f:45:29:a9:ed:bd:08:af:97:ab:d5:ca:84:
e3:84:d6:82:6e:cf:78:5b:6e:cb:6f:df:83:f5:9b:
5e:62:86:4f:cf:4f:25:f4:34:d2:49:f4:b7:a7:e5:
a3:26:3a:c1:5a:20:62:da:ca:20:3f:59:c7:ed:7c:
80:b3:10:27:92:03:fc:13:89:3f:da:44:36:ad:05:
64:43:e3:63:18:0d:38:11:cc:6b:cd:2c:34:78:40:
ce:14:48:b7:a6:3e:95:a0:e8:0c:c8:4d:1a:22:68:
2b:b7:0b:09:e7:55:fc:95:97:34:1a:00:21:39:03:
00:0a:ed:05:4b:8e:e9:85:b3:9d:cc:df:38:90:89:
4d:3e:a4:36:14:59:c1:fd:f6:3d:e7:22:86:80:b7:
c9:30:bb:cc:70:c6:51:fa:36:32:6a:53:a4:0e:80:
a6:76:2a:ca:b2:26:c1:ea:33:8c:20:80:58:bf:f8:
8a:8e:62:9d:50:91:ed:4d:ed:42:2e:ff:ba:49:e4:
b8:a1:00:44:11:a7:6c:58:80:64:f2:ce:11:5f:cb:
ef:cf:dd:20:b6:3b:45:49:ce:9d:6b:66:a7:ec:42:
1f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F2:12:01:98:47:74:C2:FB:44:C5:6B:EA:0A:E4:C7:77:CB:81:23
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/0vISAZhHdML7RMVr6grkx3fLgSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.229.0/24
45.139.231.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:3f:23:f2:34:41:f0:32:05:f2:f3:6c:c0:1e:62:a3:f9:b9:
ae:b0:cf:4f:e5:42:20:2a:d0:3e:0d:9a:50:1c:d2:65:3e:9b:
8a:6f:4c:e0:2a:18:f1:f5:a6:fa:c5:63:1a:ec:8d:ed:2f:7b:
52:23:23:4f:5a:f1:46:73:20:ac:72:81:0c:7e:a3:5c:67:13:
c7:d8:28:bb:ca:3f:3e:a2:d6:a9:d8:8b:e6:c9:b4:a2:00:9f:
0f:e9:81:74:ec:05:dd:f1:d2:ec:7d:80:9c:e7:a7:08:b9:f5:
c8:90:9c:b9:da:75:d2:75:b5:ff:df:66:34:a7:67:72:89:86:
0e:87:19:ba:44:66:99:08:5c:fb:10:da:be:31:d7:db:85:69:
31:3e:02:a7:fe:8c:d5:0b:0d:6e:c1:c1:a6:45:7c:81:60:40:
53:02:1d:0d:d7:c3:b5:cb:a1:a5:1a:2d:5a:22:5a:ca:ee:99:
6c:82:b4:1f:f9:64:d3:89:3b:02:fd:e3:6d:c4:6d:b2:c8:e8:
e1:34:64:91:c3:48:cd:6f:1d:5a:1c:99:96:55:e4:26:02:e5:
0f:c0:84:10:10:da:19:0b:0c:d5:05:a4:38:c7:b8:37:50:62:
1b:98:9d:1d:a1:9e:fd:d6:af:a9:62:96:1c:84:e5:c9:ee:4b:
f4:72:30:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:37 2024 by rpki-client on console-ams.rpki-client.org