Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/amNYMxtK4gzimLmqgAHaJ_lF6_c.roa
File: amNYMxtK4gzimLmqgAHaJ_lF6_c.roa (raw, json)
Hash identifier: zQLJxPjGdHIdDKhUPp3NmbH04Y79YqfhICy303/blo4=
Subject key identifier: 6A:63:58:33:1B:4A:E2:0C:E2:98:B9:AA:80:01:DA:27:F9:45:EB:F7
Certificate issuer: /CN=2d55c4dd7f212fc4896bd0c971860c05b30eeb8d
Certificate serial: 01856F5DA6E554BA1B16DEC6480226E2951A
Authority key identifier: 2D:55:C4:DD:7F:21:2F:C4:89:6B:D0:C9:71:86:0C:05:B3:0E:EB:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/amNYMxtK4gzimLmqgAHaJ_lF6_c.roa
Signing time: Sun 01 Jan 2023 22:04:46 +0000
ROA not before: Sun 01 Jan 2023 22:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211127
IP address blocks: 45.142.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:a6:e5:54:ba:1b:16:de:c6:48:02:26:e2:95:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d55c4dd7f212fc4896bd0c971860c05b30eeb8d
Validity
Not Before: Jan 1 22:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a6358331b4ae20ce298b9aa8001da27f945ebf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ea:8e:c9:a8:19:86:80:30:51:45:39:1f:15:
07:13:5c:c2:e5:2e:e8:63:25:b1:32:51:3c:74:f7:
7a:e1:d0:ce:01:8b:c1:ce:d6:ac:8e:49:eb:7c:af:
38:8a:db:ff:ce:56:89:c2:ce:84:63:1a:8d:c0:3a:
44:59:25:61:38:53:80:e2:c3:4d:2b:a6:5e:2e:46:
6a:df:4e:c6:09:e6:9b:e0:08:c1:a9:0c:8a:0f:43:
d8:77:3d:26:6d:3b:0e:88:8e:55:c1:23:0a:e1:65:
34:1d:da:1a:53:d3:52:dd:42:0c:5f:70:60:5c:c9:
6b:4a:7c:3e:09:05:b2:f3:0f:d9:89:fd:64:d2:80:
35:92:9a:72:ef:50:32:a1:f1:f9:4b:2d:60:83:3f:
4d:39:f3:18:bb:5c:6e:cb:8b:ea:a3:6d:bb:2d:c9:
70:a2:79:9f:5f:8a:e4:89:af:7a:4f:ab:eb:b6:9e:
58:93:7d:d2:30:40:aa:80:81:ca:e5:ba:f3:ed:76:
21:46:b6:bf:32:20:07:c7:68:56:b2:98:32:d5:57:
b8:0f:03:01:66:dc:e4:22:08:a8:07:ff:81:b3:4f:
46:40:55:a4:3e:47:03:34:c5:34:13:89:c1:c8:84:
a4:66:65:14:70:b4:ae:93:61:6a:d4:ac:d2:9d:b5:
c1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:63:58:33:1B:4A:E2:0C:E2:98:B9:AA:80:01:DA:27:F9:45:EB:F7
X509v3 Authority Key Identifier:
keyid:2D:55:C4:DD:7F:21:2F:C4:89:6B:D0:C9:71:86:0C:05:B3:0E:EB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/amNYMxtK4gzimLmqgAHaJ_lF6_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.13.0/24
Signature Algorithm: sha256WithRSAEncryption
81:e4:bc:da:b6:32:3e:d0:95:c1:ff:8f:45:f4:16:1b:8f:84:
d6:8d:65:8d:ff:fa:d0:9d:79:65:23:00:9d:15:49:29:a5:9a:
83:39:3d:6c:64:f5:01:e9:23:66:b9:73:ba:3c:13:da:21:fc:
2d:60:87:39:89:6c:44:5e:23:f9:19:f5:f2:06:f2:76:8e:ae:
3f:a7:78:97:7a:56:c2:24:e7:23:dd:1f:04:bf:59:51:ba:0c:
c4:8b:b4:85:df:51:fd:74:71:8f:29:09:37:3b:ab:ba:35:e5:
a2:cf:f5:30:7a:c3:de:4d:67:aa:84:8e:48:12:13:fb:f4:00:
dc:35:b4:94:b2:6d:b0:99:30:8a:76:e9:4d:ae:78:b6:70:f4:
11:66:dc:c4:33:d6:35:94:f5:cd:4d:02:8c:d6:9d:2c:33:ab:
4b:3e:57:03:fb:f7:9c:07:99:5c:bc:44:f6:a1:60:73:9e:20:
fc:46:16:c9:c0:d2:36:39:d7:d4:86:63:2f:00:dc:60:5a:40:
f4:95:54:f5:07:4c:cd:dc:af:46:4a:ed:ff:37:93:f8:c3:09:
12:74:38:46:9f:47:94:f5:92:50:f8:ed:ca:87:41:e7:e6:4c:
86:ec:25:da:40:49:a4:5f:5e:61:74:eb:83:58:c1:e9:7b:4c:
99:c0:f6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:22 2024 by rpki-client on console-ams.rpki-client.org