Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/_HT1LmoovwJpCpa1W9YwHSdV9Qk.roa
File: _HT1LmoovwJpCpa1W9YwHSdV9Qk.roa (raw, json)
Hash identifier: 0gB1hTNJevwqiR+wdHq2o3oCPgmMLoHnbnUHyMzz3M4=
Subject key identifier: FC:74:F5:2E:6A:28:BF:02:69:0A:96:B5:5B:D6:30:1D:27:55:F5:09
Certificate issuer: /CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
Certificate serial: 0190BB2FDC33157994631F11B8E249A8F26E
Authority key identifier: C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/_HT1LmoovwJpCpa1W9YwHSdV9Qk.roa
Signing time: Tue 16 Jul 2024 10:56:34 +0000
ROA not before: Tue 16 Jul 2024 10:56:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211381
IP address blocks: 45.132.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jul 2024 14:29:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bb:2f:dc:33:15:79:94:63:1f:11:b8:e2:49:a8:f2:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
Validity
Not Before: Jul 16 10:56:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc74f52e6a28bf02690a96b55bd6301d2755f509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d5:5c:51:de:85:36:b0:dd:28:72:24:b9:3e:
4f:2f:cb:26:d3:30:32:77:82:d2:02:0a:b8:89:ea:
ce:ed:9b:be:ae:ad:81:e9:7b:f4:1e:8e:82:6d:6c:
70:70:86:66:c0:5f:37:21:f4:e2:aa:60:2b:65:1e:
8b:15:a7:c2:b9:af:b2:95:61:b0:5b:2f:71:22:3d:
ec:51:6d:f9:24:96:5a:99:4e:cb:f1:69:b8:5b:8c:
01:a6:13:16:43:a3:bc:d9:0a:a0:75:58:d9:b9:4e:
fd:71:e0:fa:b7:7d:f7:af:49:17:e4:7b:e5:cf:a0:
fe:2b:51:f1:89:ff:15:64:02:18:d9:75:78:3a:1f:
36:c3:ee:56:c6:78:c5:d5:99:bc:e0:24:9a:6c:fe:
8d:4f:0b:66:1d:04:9b:9b:e8:5b:ab:8f:8b:77:ac:
c0:73:0d:df:c5:53:56:19:ac:b0:53:9d:c0:46:59:
58:28:a9:07:d2:b4:8d:1d:06:1d:2f:0f:0f:18:9a:
a1:8c:ed:64:1d:49:cd:79:62:ab:35:dd:d4:6f:ce:
d0:c5:31:bd:a2:08:3d:6d:af:bb:d2:e6:3a:bc:79:
0f:77:7f:e3:00:62:57:c7:88:b2:e0:76:98:14:e9:
d3:f1:93:04:92:7f:98:0c:85:8a:51:52:4a:02:8c:
a8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:74:F5:2E:6A:28:BF:02:69:0A:96:B5:5B:D6:30:1D:27:55:F5:09
X509v3 Authority Key Identifier:
keyid:C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/_HT1LmoovwJpCpa1W9YwHSdV9Qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.107.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:21:6a:d1:2e:f9:5b:01:10:70:2a:40:10:19:11:05:df:d7:
0f:e3:cd:6c:46:34:ac:89:5a:1a:c9:12:84:e9:04:f9:0b:7d:
52:7e:7e:7f:1c:c6:c1:25:23:5a:3b:70:9a:40:ba:a1:75:98:
89:3b:4c:e2:3e:84:e9:a6:e2:9e:5d:dd:3f:eb:78:76:2f:bb:
b7:8d:c0:cb:5b:cf:0f:3e:48:e4:41:04:19:6c:41:63:6c:79:
ad:d4:27:37:d6:f4:be:ce:e4:90:fe:c8:87:a9:2d:20:1b:c6:
2b:d3:5b:48:9d:c0:8b:be:5c:75:84:9f:f1:9f:77:1f:74:cb:
9d:0f:b4:94:78:6d:c2:28:c3:be:4f:8f:a9:b1:73:5a:d8:a0:
81:32:a4:a2:08:8f:0c:bb:24:e5:a9:9b:49:68:ca:d8:3e:4a:
f7:21:3b:a4:86:fb:dc:ae:2e:3d:9b:50:7e:ec:73:5a:55:70:
21:fc:8e:93:15:9d:7c:2d:9f:d6:eb:4a:3a:38:ce:21:e0:72:
ce:4d:d6:90:59:e4:a6:01:4e:9f:3b:d5:dd:bc:e6:76:3a:ec:
58:e7:3c:7c:1f:b1:5c:e8:26:50:48:e0:a6:c8:94:81:d7:af:
cf:d9:ed:06:b3:79:f9:ec:4e:39:a0:3e:84:19:1d:a0:74:3e:
4b:f0:a7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 30 18:12:30 2024 by rpki-client on console-fra.rpki-client.org