Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/70c451-876e-4581-98dd-08618e6b2c1c/1/JtMurqHhYbUX4KcPZCW72gRpjQQ.roa
File: JtMurqHhYbUX4KcPZCW72gRpjQQ.roa (raw, json)
Hash identifier: I/tAzR3ZK7getbaPTaHOLU/nm+iZcnzXJBmdRVPcXFI=
Subject key identifier: 26:D3:2E:AE:A1:E1:61:B5:17:E0:A7:0F:64:25:BB:DA:04:69:8D:04
Certificate issuer: /CN=be810fb3ce83c623c7c9894fadb595310d41818f
Certificate serial: 018573716C4F72DF7C5B60B918E319BF619E
Authority key identifier: BE:81:0F:B3:CE:83:C6:23:C7:C9:89:4F:AD:B5:95:31:0D:41:81:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/voEPs86DxiPHyYlPrbWVMQ1BgY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/70c451-876e-4581-98dd-08618e6b2c1c/1/JtMurqHhYbUX4KcPZCW72gRpjQQ.roa
Signing time: Mon 02 Jan 2023 17:04:51 +0000
ROA not before: Mon 02 Jan 2023 17:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213373
IP address blocks: 45.141.56.0/24 maxlen: 24
45.141.58.0/24 maxlen: 24
45.141.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:71:6c:4f:72:df:7c:5b:60:b9:18:e3:19:bf:61:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be810fb3ce83c623c7c9894fadb595310d41818f
Validity
Not Before: Jan 2 17:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26d32eaea1e161b517e0a70f6425bbda04698d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:90:0a:cc:44:1c:2a:99:85:b5:da:8c:33:f5:
48:cd:fe:df:0f:38:d8:97:92:8d:47:94:05:7d:75:
bf:97:44:70:5e:05:df:73:59:02:11:06:9e:52:c2:
a6:eb:37:b1:f1:32:5a:f0:74:f0:4c:03:d1:29:4b:
f9:6d:56:6f:93:fa:31:2b:b3:a3:bc:58:52:7c:11:
b5:99:01:77:2d:27:62:cb:c0:20:c2:58:af:df:11:
76:90:26:a3:6f:5a:46:08:7f:2b:fc:f0:02:85:f1:
3b:11:11:fb:8d:b1:01:a4:ab:46:aa:4c:de:45:2f:
0a:7c:8d:ea:5c:16:4e:04:05:ad:c4:b4:ae:41:be:
c0:10:12:1b:0b:65:0b:3e:10:a7:9a:17:bf:45:d6:
76:cb:11:2d:25:d1:21:ef:e0:d7:78:98:1d:db:d1:
14:44:bc:b2:f8:fa:3b:2d:e2:65:27:0a:c1:70:8c:
5c:e2:32:de:1a:b7:91:6f:9b:40:12:97:ed:3f:13:
c1:64:c0:92:15:bb:07:06:30:4c:1e:27:f9:c5:3f:
88:93:10:c2:67:9a:58:6d:1f:6b:09:db:30:9c:49:
24:76:57:09:d5:96:45:15:6e:4f:5c:59:db:a1:fe:
85:4c:94:f7:c9:f9:e2:6c:91:8a:9c:1a:8a:5c:01:
e9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D3:2E:AE:A1:E1:61:B5:17:E0:A7:0F:64:25:BB:DA:04:69:8D:04
X509v3 Authority Key Identifier:
keyid:BE:81:0F:B3:CE:83:C6:23:C7:C9:89:4F:AD:B5:95:31:0D:41:81:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/voEPs86DxiPHyYlPrbWVMQ1BgY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/70c451-876e-4581-98dd-08618e6b2c1c/1/JtMurqHhYbUX4KcPZCW72gRpjQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/70c451-876e-4581-98dd-08618e6b2c1c/1/voEPs86DxiPHyYlPrbWVMQ1BgY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.56.0/24
45.141.58.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:ff:ef:cf:b6:17:c4:e1:d2:4b:b6:7c:21:1b:6a:96:24:38:
5f:bc:ca:bd:a5:71:5b:4e:90:c8:1a:28:a8:d0:29:84:f3:b8:
2e:fa:ff:6b:ae:fc:be:fa:b7:2b:52:4e:1c:2c:30:4e:61:36:
91:46:9f:1b:49:49:1e:32:e1:cb:98:b7:9e:11:0d:68:76:84:
b0:c7:fb:fa:be:1d:48:e3:5c:60:2f:83:92:e9:ac:ea:6a:4c:
ec:bc:9b:33:a8:a1:8d:20:09:b1:82:96:47:cc:de:cc:c3:0d:
60:75:f1:a0:06:89:b2:f1:26:a3:27:b8:bb:97:30:c3:1b:61:
2b:22:d7:18:5c:dc:49:f6:88:1e:b5:7a:4b:1e:89:2b:fd:b7:
5d:b4:d6:e4:2f:ea:ea:19:89:eb:5e:bd:81:16:0f:b0:c7:19:
09:9b:1d:08:46:06:b7:90:11:4c:3d:75:f5:e0:74:ac:c0:a6:
c9:15:50:93:81:d2:71:28:d9:67:5e:f2:7e:6c:ec:d4:db:c9:
75:fc:82:63:74:0a:4e:77:b1:0f:b6:73:a7:28:d4:ef:20:78:
a8:63:69:12:db:4d:1e:ec:74:e1:1d:20:73:90:f2:a3:8c:f2:
d8:d2:2e:7c:98:45:51:d5:c7:b3:4b:d1:f6:f9:39:e2:c1:b9:
6b:f9:ea:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:15 2024 by rpki-client on console-fra.rpki-client.org