Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/viVvdtZUpl-gcneuCNlLFS_8Me0.roa
File: viVvdtZUpl-gcneuCNlLFS_8Me0.roa (raw, json)
Hash identifier: gtqFIW0Bs6UgQ/NhvvhXzbB2aR8UhfGqJ0c2SFD7hp0=
Subject key identifier: BE:25:6F:76:D6:54:A6:5F:A0:72:77:AE:08:D9:4B:15:2F:FC:31:ED
Certificate issuer: /CN=27484956736549eab3b06e23aab89ca5993a8076
Certificate serial: 018F7D48AD3055B8BE5094076222D1EF1EBF
Authority key identifier: 27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/viVvdtZUpl-gcneuCNlLFS_8Me0.roa
Signing time: Wed 15 May 2024 17:24:25 +0000
ROA not before: Wed 15 May 2024 17:24:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214934
IP address blocks: 45.84.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jul 2024 01:19:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:7d:48:ad:30:55:b8:be:50:94:07:62:22:d1:ef:1e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27484956736549eab3b06e23aab89ca5993a8076
Validity
Not Before: May 15 17:24:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be256f76d654a65fa07277ae08d94b152ffc31ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:93:df:83:77:ca:84:94:3c:9f:7f:2d:ce:84:
23:ef:f3:f3:5b:f4:2f:67:80:97:91:d5:95:1d:c9:
54:57:59:a1:f0:57:09:9b:7b:c1:c7:3d:f1:07:b9:
27:82:02:9c:e6:6f:8e:92:ed:d6:0c:8a:35:d8:df:
9c:a7:ea:bc:6b:57:4c:b2:d6:ea:9b:0b:42:a3:23:
c4:c7:ab:7d:df:e1:d6:0c:fe:02:40:df:2f:77:ae:
af:9e:3c:15:ef:bb:d5:0b:fd:a9:c2:39:17:d1:92:
62:51:24:7c:89:5a:36:83:e7:f3:4e:2f:74:8f:9b:
a4:34:68:ec:8b:7d:2f:68:bd:67:6e:02:8c:a3:cf:
8e:1b:f6:75:65:68:ed:a7:2f:b4:21:8f:3d:7a:26:
a4:6f:2d:cf:f6:11:b5:79:90:4c:54:5c:d0:94:19:
81:6a:be:0a:af:86:e1:df:45:76:fb:06:29:de:a2:
5d:04:18:14:34:a8:7c:9e:a5:bc:48:2c:b7:b0:3a:
fb:a9:ef:4f:0c:a0:51:44:b3:f2:33:84:a0:68:76:
f4:db:88:e3:fd:69:29:4a:34:e6:b5:81:1b:40:56:
98:d2:d4:57:89:a9:5e:f2:c1:29:4c:ba:e7:04:b8:
41:b3:27:b9:c1:58:4b:bd:c8:e9:fe:dd:53:b5:9c:
fb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:25:6F:76:D6:54:A6:5F:A0:72:77:AE:08:D9:4B:15:2F:FC:31:ED
X509v3 Authority Key Identifier:
keyid:27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/viVvdtZUpl-gcneuCNlLFS_8Me0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.102.0/24
Signature Algorithm: sha256WithRSAEncryption
15:d1:b5:10:01:e5:78:be:f0:34:99:48:66:db:0e:e1:73:cf:
1a:2b:92:48:d4:b4:11:e3:2f:de:64:9e:48:8b:b4:85:d0:11:
24:3a:a8:5e:c3:37:b2:85:4b:0c:e1:0b:62:c8:c9:10:7f:c8:
5b:d4:37:32:26:06:85:c8:00:00:03:1a:98:15:eb:53:c2:47:
41:47:52:66:81:f6:8f:06:7a:bd:40:15:47:70:f5:5e:96:73:
72:c5:0d:d0:94:00:0b:bf:f6:84:d5:75:1b:b8:07:1c:b0:03:
56:44:58:99:07:70:0e:e2:66:86:da:82:47:a9:58:20:2d:6d:
b3:73:f9:47:ea:68:4d:d5:0b:4b:16:97:c3:55:2f:56:1c:99:
87:db:85:9f:c6:57:05:3c:4e:e6:62:08:be:18:c1:bd:d8:56:
86:e5:c7:87:d3:18:18:2f:3b:6a:5c:7f:c6:1c:54:05:20:95:
53:d4:4f:47:3c:a9:2b:b0:2a:19:ed:b5:f1:6b:02:a6:a1:69:
cb:9b:e9:f3:15:83:45:48:9c:d9:f4:6a:3f:59:6d:30:fb:0c:
9f:e4:ed:56:99:af:33:b7:f7:05:24:1b:d3:94:c7:74:3e:0c:
94:1f:e8:80:0b:2f:6a:6c:ad:26:5a:45:ba:79:6f:ae:88:b8:
62:01:16:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 04:35:40 2024 by rpki-client on console-ams.rpki-client.org