Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ye6pGnH2xW_Z-EHttuUqcgTEyOU.roa
File: ye6pGnH2xW_Z-EHttuUqcgTEyOU.roa (raw, json)
Hash identifier: WV6DwbEqIz+r315mKlK8U9qGbFAkBa5IXkrFDoz+tI0=
Subject key identifier: C9:EE:A9:1A:71:F6:C5:6F:D9:F8:41:ED:B6:E5:2A:72:04:C4:C8:E5
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019262A232A577F6C86C4FEA076B883475CF
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ye6pGnH2xW_Z-EHttuUqcgTEyOU.roa
Signing time: Sun 06 Oct 2024 16:20:49 +0000
ROA not before: Sun 06 Oct 2024 16:20:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44948
IP address blocks: 45.131.184.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Nov 2024 08:39:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:62:a2:32:a5:77:f6:c8:6c:4f:ea:07:6b:88:34:75:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 6 16:20:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9eea91a71f6c56fd9f841edb6e52a7204c4c8e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1e:ae:40:86:42:e5:95:2f:43:b4:87:ad:69:
17:66:1d:f1:bf:f4:c2:b6:13:71:da:24:5c:4d:a5:
c9:a8:b7:d9:60:3e:2c:b1:5a:ed:6d:68:a2:9a:da:
54:65:08:80:bc:d0:dc:f9:38:2c:1f:d4:0e:3a:16:
fb:c6:13:4d:df:e9:ae:e2:0b:7e:65:7a:dd:89:6d:
31:10:37:ec:dc:70:8c:f6:67:e5:f6:f6:be:7b:cc:
9c:b6:28:62:aa:6f:3c:f6:0f:98:0b:9d:3e:38:f5:
6d:90:62:02:2b:8c:64:f2:02:2a:2f:68:49:13:c8:
b3:3d:8c:ca:f5:e3:6f:64:6c:76:0d:e4:92:ca:09:
98:c4:f7:d7:c3:c7:4c:a7:c7:5c:51:76:f3:fb:90:
38:67:0a:de:ea:3e:6b:d4:f0:a3:1b:60:f2:ac:76:
69:22:a0:ad:ab:8e:56:23:29:81:e1:3b:3f:4d:34:
0b:3b:da:25:07:dc:89:7a:34:c9:54:f0:42:0d:ad:
d2:fc:4a:b6:c9:1b:06:a1:18:52:d8:ef:fd:bd:32:
64:83:60:18:12:71:e8:bc:85:d3:63:af:77:61:87:
04:d7:58:0f:1a:c3:7a:32:99:a2:fb:d0:25:39:9e:
e0:3c:0f:69:fc:14:f8:e8:87:81:2a:6e:cf:3f:da:
ba:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EE:A9:1A:71:F6:C5:6F:D9:F8:41:ED:B6:E5:2A:72:04:C4:C8:E5
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ye6pGnH2xW_Z-EHttuUqcgTEyOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.184.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:e7:8f:7e:40:cb:b6:43:ad:05:8e:7d:2c:20:82:94:ca:47:
1a:d1:8d:77:87:8e:08:55:be:70:c8:ef:14:f6:2d:19:58:0c:
6e:3a:3b:f5:db:da:3d:1e:7e:eb:63:23:e8:8d:51:ca:d0:fc:
48:6f:54:99:61:50:8d:6d:af:d6:35:83:db:32:2b:3c:dd:81:
ad:7b:cb:a0:9b:e4:86:17:34:4f:5a:fa:3f:da:78:55:93:7f:
c4:b9:c8:51:0f:95:04:15:c7:e7:2d:8a:81:2c:14:51:15:8e:
43:aa:4f:01:66:ad:97:3c:b9:da:eb:32:e3:a5:23:5e:18:3f:
7e:a1:6a:0e:6d:ea:14:29:05:3a:e9:fc:09:15:1e:3e:94:ec:
d4:ab:47:24:51:44:8b:be:10:5a:c1:d1:1e:f5:3e:56:12:3f:
36:f3:dd:ac:c7:6c:44:36:33:78:d9:cb:2b:e9:e6:95:a5:56:
66:48:5a:61:d1:74:c4:3f:f2:97:a7:6f:fe:09:14:8a:91:76:
86:13:bd:50:5b:a0:11:04:c0:2a:32:05:30:e1:df:8d:ed:85:
74:08:f2:21:cf:3b:57:ba:f2:66:a4:61:cc:3a:63:fb:2d:a0:
5f:35:45:da:78:6b:99:33:b3:5d:5d:22:e9:cc:ba:87:dc:5d:
d8:09:03:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 10:45:01 2024 by rpki-client on console-ams.rpki-client.org