Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/SHHcXYJREOr2VVP09WFqf3rYZUI.roa
File: SHHcXYJREOr2VVP09WFqf3rYZUI.roa (raw, json)
Hash identifier: UhsMP4XuSm3Ueuy/irtWzImehRooOcIl7dY8grjhEMI=
Subject key identifier: 48:71:DC:5D:82:51:10:EA:F6:55:53:F4:F5:61:6A:7F:7A:D8:65:42
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 019294F35F99F6DA572E39BAE6694F603BCB
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/SHHcXYJREOr2VVP09WFqf3rYZUI.roa
Signing time: Wed 16 Oct 2024 10:50:30 +0000
ROA not before: Wed 16 Oct 2024 10:50:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.151.69.0/24 maxlen: 24
88.218.42.0/24 maxlen: 24
185.173.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Oct 2024 09:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:94:f3:5f:99:f6:da:57:2e:39:ba:e6:69:4f:60:3b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Oct 16 10:50:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4871dc5d825110eaf65553f4f5616a7f7ad86542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:13:8b:9b:d4:e8:75:69:c5:43:66:60:7d:56:
b7:50:90:23:69:a4:94:97:ec:d6:56:e9:08:46:92:
d0:81:ed:5f:bf:b1:c2:53:ec:3b:ce:e0:42:55:94:
29:55:86:e7:ff:8a:33:e5:e1:5c:18:de:bd:ba:2b:
eb:cf:c2:b6:66:e2:1e:14:e7:ce:d2:2b:c9:00:f5:
83:03:76:0d:55:a3:39:b1:9b:62:d6:0b:8e:f2:fc:
ce:16:7e:6f:b7:92:c4:bb:0b:4c:e1:fe:fa:67:9d:
91:c4:dc:05:98:be:32:e2:cd:7a:f4:66:f2:a4:44:
4d:81:f9:2c:49:42:1a:7b:1c:c8:96:76:4e:74:de:
de:04:0b:4a:7c:f5:39:dd:e5:23:d3:4e:65:0a:d0:
9a:59:3c:d4:dc:d2:8a:72:9d:cb:9d:1e:b8:11:5a:
18:a1:6f:00:71:08:9b:be:75:ed:72:d6:46:61:30:
58:8a:33:25:0d:2d:5d:88:75:b4:ed:07:74:d8:11:
92:fd:64:e6:18:ed:aa:33:b8:e8:af:1b:c5:c9:a0:
12:6f:53:ea:c3:20:2b:f4:a9:5a:eb:c3:42:67:65:
eb:87:64:28:93:36:ce:80:8b:97:b2:b0:0f:58:50:
fc:93:00:36:41:c1:1a:00:7f:ee:5c:4f:15:38:9f:
94:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:71:DC:5D:82:51:10:EA:F6:55:53:F4:F5:61:6A:7F:7A:D8:65:42
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/SHHcXYJREOr2VVP09WFqf3rYZUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.69.0/24
88.218.42.0/24
185.173.144.0/24
Signature Algorithm: sha256WithRSAEncryption
54:01:de:98:68:7d:0c:ef:90:de:ec:62:3c:6f:f1:d4:c5:14:
e6:a4:7d:74:1c:db:cc:52:93:fd:ed:bb:ce:5d:38:a5:23:bc:
cf:ea:f3:17:e5:23:55:f2:59:dc:a1:c7:8b:a0:2e:c2:84:2a:
33:f0:0a:e5:39:39:62:df:c2:f6:a5:ea:0f:d3:15:44:11:24:
b7:3c:28:3b:c5:bb:42:35:76:e7:fa:79:e5:cf:4a:e5:13:d6:
8e:86:39:80:58:e1:ea:ce:24:dd:0e:c3:f2:01:cf:52:ca:f0:
7a:60:6b:d2:9c:d7:bd:1e:56:31:8b:f8:fc:14:f6:bf:35:07:
9a:61:20:18:7f:d5:54:32:76:ee:63:e4:0c:e2:ad:ee:a5:50:
59:a3:fd:9a:fc:08:3f:7b:bd:96:e0:61:3f:1c:70:86:fe:33:
a9:e7:ce:27:89:98:82:4b:ba:53:8e:86:9f:dc:f6:13:27:84:
1e:4d:20:c0:12:2c:4e:0a:c8:7d:c3:e1:43:74:29:1e:7d:91:
b4:e2:73:92:c7:43:82:e6:17:f7:c7:78:54:f9:f9:85:96:8a:
c8:7f:15:a7:4a:65:7d:3a:80:7b:22:af:55:8d:8a:ac:27:be:
d7:1a:1d:1e:11:d7:c9:cb:5e:57:7d:c0:87:31:f7:4e:66:3d:
ad:40:14:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 10:44:07 2024 by rpki-client on console-ams.rpki-client.org