Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/S51kLli6gUkY679RIQ_hW99bR50.roa
File: S51kLli6gUkY679RIQ_hW99bR50.roa (raw, json)
Hash identifier: eti/VyvteRGpkwsH9X8hihRazI11LTkr2nxrcFhCwrk=
Subject key identifier: 4B:9D:64:2E:58:BA:81:49:18:EB:BF:51:21:0F:E1:5B:DF:5B:47:9D
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019074276BA49D276B8A84ECE1966A5A514A
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/S51kLli6gUkY679RIQ_hW99bR50.roa
Signing time: Tue 02 Jul 2024 15:54:18 +0000
ROA not before: Tue 02 Jul 2024 15:54:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49478
IP address blocks: 45.95.30.0/24 maxlen: 24
80.242.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Jul 2024 14:08:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:74:27:6b:a4:9d:27:6b:8a:84:ec:e1:96:6a:5a:51:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jul 2 15:54:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b9d642e58ba814918ebbf51210fe15bdf5b479d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b9:25:9c:17:12:33:34:2f:7b:3a:46:3e:6a:
82:ef:3e:8f:e9:86:f6:5f:31:9c:ab:b7:5a:ed:33:
f8:89:1f:f0:61:d3:8e:d3:23:d3:6e:8e:7e:fa:38:
1c:8b:b2:b3:62:ec:9e:81:0a:de:3c:3b:cd:95:67:
37:62:c2:e5:7e:0b:59:a5:64:9a:80:68:c3:7e:3f:
0c:a2:9a:31:dd:5b:65:c2:55:10:ef:fa:fe:b3:03:
93:37:ac:94:29:5d:3d:16:b7:5a:07:1e:2d:a2:e5:
c0:dc:5d:95:8d:3d:6d:1e:b8:d0:75:f2:f3:92:0a:
f5:a0:91:3a:d3:c5:06:2e:c1:23:62:42:24:5f:43:
33:f0:0e:f2:7a:bc:1c:35:82:64:ea:c9:c3:b4:fb:
66:67:4b:bb:7a:ca:75:1d:4c:71:49:a3:af:f8:67:
ea:4f:d8:ae:1b:9c:eb:c8:9f:89:c5:85:0b:8f:da:
1b:4b:1d:87:b4:87:a9:5e:bf:d1:e5:9b:4f:b9:ff:
90:1f:02:ea:d7:f7:e6:9a:c0:88:3a:08:e2:43:5a:
07:e1:6e:bb:1d:53:e7:02:9f:1d:bd:fd:df:59:69:
9e:63:20:16:35:81:ad:b6:2e:aa:c2:51:45:d0:1d:
1f:4a:96:0e:55:d4:c0:99:58:a8:62:9d:83:c6:c6:
82:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9D:64:2E:58:BA:81:49:18:EB:BF:51:21:0F:E1:5B:DF:5B:47:9D
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/S51kLli6gUkY679RIQ_hW99bR50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.30.0/24
80.242.55.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:2b:b4:6f:31:78:fc:e6:13:2d:8e:ae:0f:9e:df:ae:82:15:
d0:05:2e:a0:17:cc:49:4b:0d:e8:5d:9f:94:1e:41:54:1c:40:
6f:fe:d7:2e:18:ed:bb:4c:4a:77:d5:0f:54:45:68:b5:c8:5b:
f5:67:69:53:86:db:31:1f:16:cb:21:a4:39:ed:7d:ee:b9:22:
5d:d2:1b:f9:2c:e7:4c:9c:9a:fd:23:ae:54:b4:fb:a8:45:ae:
36:8c:c0:9b:15:7a:1d:ff:a1:28:ca:9c:88:01:7c:2c:0c:f8:
77:1a:52:ea:d3:27:0f:95:d7:cf:46:86:77:56:94:b0:e2:33:
1a:89:bd:c7:0f:f4:e1:59:48:0f:78:0e:49:dd:2f:8a:7a:3b:
6e:86:08:73:ae:19:56:f5:c8:cf:6b:85:8f:e7:b1:ef:58:9b:
cf:31:76:5f:d8:a4:94:13:ca:28:c2:88:3a:49:bf:56:91:81:
c3:0b:5c:bd:fd:1f:bd:c2:0e:9f:5b:ac:f1:13:21:fa:e6:17:
4a:3f:0e:eb:dc:ed:c8:09:ce:4b:ff:05:41:e9:d5:02:8a:03:
0e:89:8f:fc:50:4c:a2:46:2e:d0:ee:90:5f:8c:b4:38:3a:50:
72:d3:bc:40:b8:1b:2b:bf:dd:c7:4a:b4:f2:ff:85:80:24:96:
25:70:53:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 15:56:53 2024 by rpki-client on console-ams.rpki-client.org