Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/RLh2-P72XtkE1j5qQ2idWR6x5Ps.roa
File: RLh2-P72XtkE1j5qQ2idWR6x5Ps.roa (raw, json)
Hash identifier: BkHbN3DLl0HkBC1TWwne5nIQdYVLYf+Fxyo8aSgBtl0=
Subject key identifier: 44:B8:76:F8:FE:F6:5E:D9:04:D6:3E:6A:43:68:9D:59:1E:B1:E4:FB
Certificate issuer: /CN=9e42ca46688a837b575234ce6a1a326587d6c204
Certificate serial: 018ADC935DCC15E32B23DD536BFCDCDF3366
Authority key identifier: 9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/RLh2-P72XtkE1j5qQ2idWR6x5Ps.roa
Signing time: Thu 28 Sep 2023 16:15:59 +0000
ROA not before: Thu 28 Sep 2023 16:15:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8881
IP address blocks: 45.13.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:dc:93:5d:cc:15:e3:2b:23:dd:53:6b:fc:dc:df:33:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e42ca46688a837b575234ce6a1a326587d6c204
Validity
Not Before: Sep 28 16:15:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44b876f8fef65ed904d63e6a43689d591eb1e4fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2a:a6:bd:07:a3:43:9f:31:e6:8f:5e:8c:b9:
2f:c4:43:6d:d1:9b:4c:77:60:0d:fc:5c:e5:ce:41:
49:cc:3b:2e:d7:8d:d0:a7:f8:4f:a5:ea:33:e9:96:
52:c8:4a:2d:69:0b:2b:5c:d9:5b:b6:fe:f1:d3:27:
54:ef:fb:c4:49:3b:2c:c6:60:27:81:aa:43:0e:68:
6f:4c:b2:5e:96:a3:39:20:f1:5f:2f:f1:92:40:44:
ea:f3:69:e9:03:74:37:8c:3a:f3:10:3d:e0:76:8b:
24:45:f0:0c:2d:85:d2:19:a6:a2:00:10:20:6a:55:
4c:6c:f1:68:5c:d1:be:b9:5e:96:c6:3b:43:99:4b:
37:20:48:56:0a:78:d4:0a:fc:5a:c8:57:8a:b8:7b:
1f:7c:05:81:ad:09:d6:f5:ef:ab:0a:b2:41:68:b2:
66:2a:cc:55:4e:1e:22:c5:70:42:5b:30:1b:7e:86:
9d:6f:39:35:fa:10:d6:10:91:96:4d:ac:3c:5a:69:
9c:86:b6:05:16:c5:8e:e7:4b:8d:10:09:d6:4c:98:
bc:ff:6c:76:f1:59:e2:44:97:8f:c7:85:0d:dc:83:
ad:59:91:97:3f:de:c4:b3:05:ee:0d:16:58:02:a7:
4c:8a:43:e0:8a:10:00:df:76:83:ad:5d:dd:47:e8:
27:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B8:76:F8:FE:F6:5E:D9:04:D6:3E:6A:43:68:9D:59:1E:B1:E4:FB
X509v3 Authority Key Identifier:
keyid:9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/RLh2-P72XtkE1j5qQ2idWR6x5Ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.15.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:22:ee:08:e2:38:29:6a:84:03:77:a1:62:f0:04:41:d9:d7:
ea:94:3f:d2:d1:38:61:ed:34:42:18:7b:b2:b7:1a:e3:31:b9:
a6:2d:b4:66:ec:01:d1:71:95:25:db:66:ba:42:3c:0c:88:ae:
38:0c:b5:d7:b5:db:5a:95:6b:8b:6f:81:53:1c:cc:9f:06:7a:
0a:e5:30:d0:76:30:41:da:0c:a9:79:32:94:5a:e2:15:48:f1:
13:5d:4b:d7:16:68:aa:2c:99:a5:64:69:03:6d:ff:0d:af:e6:
9f:35:16:61:59:b1:28:c7:64:87:de:10:2c:8c:4d:aa:d7:a3:
6e:f1:79:18:be:e9:8f:45:aa:50:b0:3d:bf:1d:6c:cd:1c:c9:
1e:b5:e5:da:4c:69:6f:80:a2:a1:bb:7a:09:b8:68:27:43:6c:
8b:86:ae:b9:b7:8d:94:41:e9:51:a2:dd:6f:18:cc:e6:8d:a3:
d2:ef:8f:82:8c:df:f9:80:90:8e:14:d6:0e:89:f7:5f:e8:69:
d2:ab:eb:91:e9:76:43:5a:fc:76:90:b8:64:56:e7:5e:e1:fc:
be:b3:92:d2:de:e2:21:56:13:e7:0c:27:e4:c5:b7:de:ab:7e:
18:c3:1b:5d:26:b4:43:72:8a:cd:92:ac:9a:e6:7f:de:66:21:
01:ef:c2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:50 2024 by rpki-client on console-fra.rpki-client.org