Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/34y5oPN0tDFZs9JJnK0k42duS9E.roa
File: 34y5oPN0tDFZs9JJnK0k42duS9E.roa (raw, json)
Hash identifier: yegRLzmf1HRFl/MFsHHl5v8HbwTLpjpXv9NsUJjy2UQ=
Subject key identifier: DF:8C:B9:A0:F3:74:B4:31:59:B3:D2:49:9C:AD:24:E3:67:6E:4B:D1
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 0191C154C05EC56D93606A3EEC163A3AD44E
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/34y5oPN0tDFZs9JJnK0k42duS9E.roa
Signing time: Thu 05 Sep 2024 08:37:22 +0000
ROA not before: Thu 05 Sep 2024 08:37:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214311
IP address blocks: 45.10.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 10:25:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c1:54:c0:5e:c5:6d:93:60:6a:3e:ec:16:3a:3a:d4:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Sep 5 08:37:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df8cb9a0f374b43159b3d2499cad24e3676e4bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c2:dc:48:da:05:c2:f7:5b:8a:06:c8:28:bb:
82:dd:c6:42:b7:6c:95:2d:75:db:5c:64:21:87:aa:
90:42:35:76:b0:0c:28:ed:95:13:ce:89:af:52:2d:
11:23:83:3d:67:ce:f0:44:7f:4f:ae:ed:09:af:ae:
e4:92:39:21:19:1a:ac:1b:0b:08:f1:9e:85:8d:39:
77:ed:12:d8:cc:b4:36:9f:04:bc:77:99:ca:2f:b4:
b6:35:a6:76:4a:a6:23:bb:ed:a9:18:3f:5f:12:70:
3e:8a:bd:fa:47:cf:d3:ad:99:6e:0a:c5:95:67:64:
ff:05:69:69:13:93:b6:ec:85:37:b2:96:5d:00:b8:
98:16:bf:52:3f:93:fe:35:33:d3:d4:b3:78:a9:9e:
20:ec:02:72:eb:6b:d3:f5:00:54:96:bf:77:55:76:
4e:68:d4:bd:78:00:fd:99:2f:ee:4f:eb:49:68:27:
9b:2d:5e:e2:f3:26:b0:d1:f2:55:7b:66:69:3e:06:
04:0d:b7:fc:08:df:56:c1:27:35:fa:e5:1e:e1:6b:
8a:aa:e1:96:35:81:93:08:cc:69:f0:e3:80:4d:23:
d3:3d:c0:0d:c8:bb:df:51:fc:28:24:b0:14:af:ec:
c5:a4:e6:f7:cb:02:71:2b:54:b3:79:86:ec:65:01:
e7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:8C:B9:A0:F3:74:B4:31:59:B3:D2:49:9C:AD:24:E3:67:6E:4B:D1
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/34y5oPN0tDFZs9JJnK0k42duS9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.56.0/24
Signature Algorithm: sha256WithRSAEncryption
95:3a:68:57:02:2c:c9:65:a8:34:7f:44:c2:33:b6:e5:a7:12:
6a:b0:8e:45:9f:e0:ca:eb:fb:7f:3a:4a:af:09:f4:27:b1:67:
9a:4d:6c:9b:21:8c:d7:21:49:1e:6d:e2:16:a0:63:2b:6b:bf:
61:7e:25:a4:9a:38:6c:3d:71:47:df:1b:76:c4:35:97:82:9d:
4c:3e:2e:2e:dd:3a:96:ff:9d:fd:eb:68:db:92:e4:cf:b8:e0:
16:95:71:e4:11:69:a0:7a:ee:9b:ad:46:b4:15:f9:60:98:d5:
61:43:d8:5e:50:87:1c:b9:a8:aa:9d:c0:86:2a:b8:09:4b:da:
5c:49:ae:5c:58:cc:91:2c:f4:62:46:03:37:18:a6:19:e6:08:
a0:d0:65:52:05:ba:89:af:e2:1a:db:ef:3a:20:c2:cc:d2:5c:
52:d7:28:0b:b3:b6:49:82:a7:8b:92:3d:fa:d9:9b:0c:29:d0:
a1:e2:ab:79:59:b3:81:6a:4f:10:dc:25:ad:8c:8f:fb:02:7b:
43:d6:ac:57:91:0c:fc:b7:5e:90:8e:a6:03:29:77:e3:9b:5b:
49:20:7a:06:6d:1c:2d:1c:42:68:f3:b6:0a:e2:b7:26:fd:d8:
0b:5b:29:1a:6b:5f:66:68:23:6a:86:d4:2d:63:e6:5e:44:34:
05:93:d7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 12:31:35 2024 by rpki-client on console-ams.rpki-client.org