Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2Jl2VacMZqbh7qHFyRyTpZ-zUWM.roa
File: 2Jl2VacMZqbh7qHFyRyTpZ-zUWM.roa (raw, json)
Hash identifier: excixasNj5wLTMUYJ1mVSiZ1yjRC0S0pKHVfAb6WzUg=
Subject key identifier: D8:99:76:55:A7:0C:66:A6:E1:EE:A1:C5:C9:1C:93:A5:9F:B3:51:63
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018FFC0C803BD6C5BB4FE37277B86AC191B6
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2Jl2VacMZqbh7qHFyRyTpZ-zUWM.roa
Signing time: Sun 09 Jun 2024 08:10:28 +0000
ROA not before: Sun 09 Jun 2024 08:10:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47924
IP address blocks: 45.148.116.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 09 Jun 2024 22:51:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:fc:0c:80:3b:d6:c5:bb:4f:e3:72:77:b8:6a:c1:91:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 9 08:10:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8997655a70c66a6e1eea1c5c91c93a59fb35163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:46:ac:48:8b:4f:b3:19:ee:1f:ce:21:fa:2f:
a6:f0:ec:ad:c4:61:75:6d:5c:6a:c7:c3:ce:1d:19:
78:83:1d:b6:00:9a:08:bf:c5:3d:09:be:9e:fe:c9:
26:95:bf:97:b7:fc:81:3f:0f:20:82:bc:4d:b6:c6:
de:30:e1:b5:fa:37:e4:64:44:6a:a1:f5:55:23:85:
39:b4:30:0a:2f:f8:f0:b5:fe:c7:4a:38:d4:16:4d:
6a:ed:b8:13:7e:45:a4:82:4b:3c:4d:a4:70:19:55:
89:40:c1:6d:ac:ee:cd:a3:5f:c6:c1:ff:d0:55:e4:
2e:f8:4f:5c:03:50:33:bc:99:aa:d9:72:72:f4:37:
3d:34:13:7d:a9:04:59:a6:93:19:6e:ca:6e:a4:96:
76:11:aa:db:75:e0:65:3c:db:b0:47:90:53:62:f5:
40:db:64:1b:db:53:1c:9c:a3:33:31:9d:9e:76:d4:
2e:ac:82:c6:4d:53:2b:ce:a8:fd:15:3a:96:86:81:
8e:f5:7d:93:36:bb:b0:7b:b0:82:dd:00:f2:03:b6:
75:96:0b:fa:9e:49:73:40:92:a3:d6:75:24:02:a4:
55:17:2a:e9:2e:88:9e:c8:55:b8:4d:13:92:33:4a:
1c:86:3b:dc:65:e4:80:70:78:81:8b:cd:2e:b8:e8:
f0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:99:76:55:A7:0C:66:A6:E1:EE:A1:C5:C9:1C:93:A5:9F:B3:51:63
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2Jl2VacMZqbh7qHFyRyTpZ-zUWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.116.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:8c:c1:19:7d:f8:f4:6f:af:fb:2a:06:a5:3f:ac:3f:55:46:
09:81:b9:44:0d:6b:73:04:bb:3f:c8:bd:5d:f4:43:71:d9:8a:
19:da:44:a4:44:ea:89:c9:93:af:5e:50:e1:c2:1e:8f:c0:51:
08:9e:df:0d:e1:9d:86:30:c8:6d:ae:98:b9:95:7d:bf:b8:65:
6e:b6:73:36:f5:76:d4:19:74:bb:48:71:bc:bc:1a:3d:d4:bc:
de:6e:0b:b6:b6:f9:57:06:df:d9:2e:8a:44:65:a2:82:fe:5f:
3a:3b:29:14:14:2a:f6:aa:60:bb:73:d0:0a:2b:d3:5d:0d:21:
17:51:59:b2:87:ac:d1:9f:73:ce:cf:3c:56:fd:50:e9:b5:e3:
ad:85:4f:f4:66:cc:bf:26:80:d1:55:43:cb:a2:09:4a:9b:f7:
e8:a7:b1:93:5c:e8:99:a9:ac:27:ae:0f:02:91:9a:16:0e:d1:
91:ad:ae:52:6d:0f:42:70:61:07:84:36:52:9e:11:0c:60:4e:
3f:e1:02:d7:1e:06:a5:7f:86:45:a7:32:9f:62:d4:93:61:3d:
04:35:bc:fc:25:c8:37:e9:3a:e3:4b:eb:c9:20:ee:7e:e5:76:
b4:3b:5d:77:91:26:1f:eb:7a:88:af:45:72:6f:96:6f:bb:fa:
74:0d:82:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 02:15:00 2024 by rpki-client on console-fra.rpki-client.org