Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/3aXomm4WxnCVA16mTVH2wL3lVas.roa
File: 3aXomm4WxnCVA16mTVH2wL3lVas.roa (raw, json)
Hash identifier: zFwQo6hCuMA5wXEIifWRRCt0tb2NKUjAkyhy7guv9DY=
Subject key identifier: DD:A5:E8:9A:6E:16:C6:70:95:03:5E:A6:4D:51:F6:C0:BD:E5:55:AB
Certificate issuer: /CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
Certificate serial: 018CC64B350DD79F6942303139A42840A4DC
Authority key identifier: BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/3aXomm4WxnCVA16mTVH2wL3lVas.roa
Signing time: Mon 01 Jan 2024 18:31:06 +0000
ROA not before: Mon 01 Jan 2024 18:31:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209835
IP address blocks: 45.149.182.0/23 maxlen: 24
151.248.20.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 20:30:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:35:0d:d7:9f:69:42:30:31:39:a4:28:40:a4:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
Validity
Not Before: Jan 1 18:31:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dda5e89a6e16c67095035ea64d51f6c0bde555ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bf:af:83:61:93:40:60:74:ba:b7:65:9f:f4:
18:d3:a0:b3:a8:2a:3c:e7:f6:a3:0c:bc:63:9d:57:
fb:48:26:e2:f5:08:00:91:06:98:9c:9e:52:d1:dd:
f5:12:80:01:41:e4:f5:95:0e:37:0d:44:3a:75:da:
29:7e:87:9e:cf:68:4e:24:24:f2:4e:e1:0f:13:96:
34:af:11:fd:ae:a9:70:a5:1e:3e:bb:cc:5f:d3:9f:
20:7a:d0:68:9b:18:f4:9d:92:d5:88:03:90:34:79:
d8:a0:93:d9:fa:4e:b2:f0:74:74:ff:25:fa:e9:66:
08:bb:46:02:ab:a9:46:e8:e7:b0:4f:0b:52:ba:6e:
bc:86:6b:f6:12:ae:42:4a:7c:4e:4d:5f:2a:8e:3c:
bf:26:aa:f6:f6:75:db:9d:d6:b2:ba:79:ba:82:aa:
ac:dc:ed:fb:5c:87:a3:d9:76:d7:9e:a3:b0:b6:33:
f2:fd:f5:63:7a:a3:9b:ad:65:dd:30:42:f3:a5:db:
45:04:50:21:ed:0e:b9:1c:2e:27:f4:fd:f9:ea:d7:
f9:e7:ef:b7:cc:41:2d:67:3f:df:9d:79:61:d8:00:
e3:dd:78:de:ce:f7:69:6f:19:38:1b:c5:6e:0b:51:
5b:29:14:b5:62:8a:b1:8c:c0:73:9c:f1:9e:e4:57:
6b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A5:E8:9A:6E:16:C6:70:95:03:5E:A6:4D:51:F6:C0:BD:E5:55:AB
X509v3 Authority Key Identifier:
keyid:BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/3aXomm4WxnCVA16mTVH2wL3lVas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.182.0/23
151.248.20.0/23
Signature Algorithm: sha256WithRSAEncryption
99:36:fe:38:93:9e:05:35:55:d9:9d:55:25:1f:98:8a:27:1a:
b4:83:44:dc:87:01:0d:db:2c:9d:a8:60:2f:2a:28:a7:71:c2:
c3:51:a5:a7:91:4b:e7:f8:17:54:7b:92:cb:02:85:66:46:19:
fb:16:e2:85:c5:78:1d:e6:4f:52:18:85:ad:28:44:6d:86:fb:
44:8d:91:13:ff:2a:35:3b:63:7f:58:f5:4c:f4:8c:2f:73:7e:
11:03:97:92:d4:7b:72:bf:07:82:97:1a:42:e7:64:f3:2e:c1:
e1:12:c0:b1:7b:54:36:0f:41:2a:6b:f6:48:b5:2b:70:41:b3:
73:84:78:f0:06:02:7c:56:7e:ee:4d:a2:56:7a:b5:ae:33:93:
11:9d:ea:a9:bd:7c:ed:ef:7a:98:73:00:bc:07:33:2d:f6:98:
e0:d5:b4:51:37:1e:6e:fe:b0:5d:bd:ed:1e:fc:c1:bb:ee:a5:
4d:ec:a2:c5:a9:2b:29:d0:64:f7:61:61:1e:52:ff:4e:45:10:
31:05:0f:7a:01:f5:da:30:b3:dd:8e:04:93:0e:92:96:53:97:
b7:85:45:fa:19:13:f6:85:0b:1f:2a:3e:57:7a:ae:9a:e9:da:
4e:12:c0:eb:6a:30:5c:d6:d7:71:e5:7c:4e:63:63:88:84:ae:
1b:25:c3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:36 2024 by rpki-client on console-ams.rpki-client.org