Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/AelJ3JrONoiU9bSqeAuKo20rPnY.roa
File: AelJ3JrONoiU9bSqeAuKo20rPnY.roa (raw, json)
Hash identifier: eSYwpmQmtvIatJ5C+i8kRpA57D1BvyTnI3aWdTdhfEE=
Subject key identifier: 01:E9:49:DC:9A:CE:36:88:94:F5:B4:AA:78:0B:8A:A3:6D:2B:3E:76
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 018C3F59706096181B2610AC7976A60A7C87
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/AelJ3JrONoiU9bSqeAuKo20rPnY.roa
Signing time: Wed 06 Dec 2023 13:37:55 +0000
ROA not before: Wed 06 Dec 2023 13:37:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212477
IP address blocks: 45.15.210.0/24 maxlen: 24
45.15.208.0/24 maxlen: 24
45.84.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3f:59:70:60:96:18:1b:26:10:ac:79:76:a6:0a:7c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Dec 6 13:37:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01e949dc9ace368894f5b4aa780b8aa36d2b3e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:11:91:9d:56:a5:23:4e:08:d6:96:26:95:e4:
cc:6e:15:71:4e:16:b9:a3:fc:4e:a1:96:d3:2f:7c:
75:44:10:f6:0e:98:c2:3c:83:5d:e5:a5:43:42:b1:
06:b5:f3:ec:73:46:ab:bc:95:b3:e6:cd:17:fd:1c:
77:41:21:8c:23:c9:23:e6:9b:dd:4f:38:76:9a:90:
e1:95:94:ba:bb:59:5f:ea:6b:b3:2f:f7:41:fe:80:
47:6f:f2:72:74:db:00:41:57:36:21:d6:8e:da:8e:
ba:ac:0c:d6:56:13:fc:92:b5:1b:f3:d4:16:41:0e:
77:4d:d3:6d:8e:f8:46:d9:77:d2:6d:0e:93:43:78:
cd:ab:5e:c2:41:56:23:8d:a1:7c:1c:16:c5:a0:e0:
2d:9b:99:13:ce:b3:eb:c6:c1:12:c3:33:2e:ed:99:
82:42:bf:d2:7e:72:4d:22:4b:51:e6:c3:56:d5:22:
f8:3a:00:15:0d:bb:97:30:eb:43:8b:93:15:36:f2:
24:25:ee:98:da:e9:35:c5:ec:3b:73:00:40:d8:7c:
43:11:69:46:d2:64:85:9d:e4:aa:6d:94:45:dd:dd:
be:c4:01:83:67:9d:62:12:1d:a5:78:62:22:aa:5e:
7f:14:ad:d1:d6:b9:aa:c0:4c:7d:a9:db:6d:40:48:
24:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E9:49:DC:9A:CE:36:88:94:F5:B4:AA:78:0B:8A:A3:6D:2B:3E:76
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/AelJ3JrONoiU9bSqeAuKo20rPnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.208.0/24
45.15.210.0/24
45.84.59.0/24
Signature Algorithm: sha256WithRSAEncryption
00:64:4d:10:c2:18:d6:91:2f:ad:6f:c9:5a:7c:a1:8c:fc:90:
91:da:cf:07:92:b0:41:2d:bb:64:62:e2:1f:7d:ea:4c:ec:f8:
3d:59:5c:bb:72:7f:d0:51:10:b1:7c:31:c1:f5:9e:5a:37:15:
82:bf:e7:a0:61:f6:88:1a:14:fd:fa:f8:0f:8b:f7:d0:f9:29:
44:d4:d2:03:02:9c:43:00:a0:1b:2a:02:be:9f:15:39:38:e9:
e9:5d:ab:9f:11:e7:53:4d:c5:e1:63:de:2e:73:fa:78:0e:7b:
22:00:8e:04:e5:2c:e7:7b:d6:ac:16:6d:93:2d:e3:ba:46:7a:
9a:c7:14:b7:d8:15:2f:55:be:04:24:24:29:11:1d:a4:b7:47:
a4:6a:20:59:52:fe:72:14:01:31:af:47:58:a6:be:c8:d2:04:
d8:f6:0c:e8:1d:f8:4e:1d:c7:4c:4f:93:eb:4b:f2:bb:24:1a:
3a:05:0a:93:1c:16:28:1d:95:dd:6c:aa:45:0c:10:f9:37:ab:
7f:9e:80:cd:d0:eb:c5:1c:a7:73:66:d2:bc:ce:a3:9d:43:6d:
79:e1:21:91:13:8e:ea:a2:39:e1:47:8b:49:3a:d5:12:71:1e:
2f:d0:aa:4f:2f:8c:01:7c:f3:31:1b:9a:a1:0f:fc:e3:42:a5:
ce:50:ae:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:54 2024 by rpki-client on console-fra.rpki-client.org