Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/pkcLruA-xmAkVGD8k7T009xd7QY.roa
File: pkcLruA-xmAkVGD8k7T009xd7QY.roa (raw, json)
Hash identifier: y4zIehp/LcihoW+kIueXTbtGcrhqLfoZtV9NH0KC6DQ=
Subject key identifier: A6:47:0B:AE:E0:3E:C6:60:24:54:60:FC:93:B4:F4:D3:DC:5D:ED:06
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01921E5E97B882016D18BCDF623C39A9F0E3
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/pkcLruA-xmAkVGD8k7T009xd7QY.roa
Signing time: Mon 23 Sep 2024 10:12:48 +0000
ROA not before: Mon 23 Sep 2024 10:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199724
IP address blocks: 45.10.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 13:39:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:1e:5e:97:b8:82:01:6d:18:bc:df:62:3c:39:a9:f0:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Sep 23 10:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6470baee03ec660245460fc93b4f4d3dc5ded06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8a:1d:47:e7:36:19:99:9c:af:f4:c4:4b:c8:
41:73:91:1d:3f:9f:dd:89:c3:94:ae:91:21:00:52:
85:f6:bf:cc:b9:23:93:2f:8a:db:f6:5f:d4:11:06:
6b:d8:1f:8b:16:12:e0:bd:95:83:e7:d9:2f:78:70:
c2:f8:c2:88:c3:21:2d:eb:bd:1d:84:1a:89:48:ac:
29:49:3c:a3:e0:58:b2:30:8b:27:ca:42:f8:55:45:
30:ed:25:0a:a2:63:74:fe:39:4d:b2:9f:f8:f4:d5:
ac:db:0b:67:06:2f:1e:fe:92:3b:af:b9:6a:27:cb:
1c:e1:f1:da:2a:32:0e:68:cf:04:1d:ff:5f:ed:a8:
02:9a:cb:d6:2a:21:8f:34:94:6b:e8:42:2c:db:ed:
aa:ec:a8:0e:90:bd:b8:65:17:a7:24:e5:55:6b:69:
25:93:fa:55:a4:c3:fa:f1:c0:0d:5e:22:9d:d0:c5:
07:86:30:26:94:76:87:6a:55:99:a9:9c:b4:99:f1:
8c:4e:b4:ef:8c:b9:fe:a0:4c:93:2c:5b:4e:37:8d:
12:c2:5a:24:52:8f:ab:79:a7:04:cf:c5:89:60:da:
13:91:69:ff:43:55:94:4f:5c:b9:04:a2:7b:44:88:
ef:f7:c0:eb:6b:bc:94:db:14:13:3d:62:73:79:35:
89:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:47:0B:AE:E0:3E:C6:60:24:54:60:FC:93:B4:F4:D3:DC:5D:ED:06
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/pkcLruA-xmAkVGD8k7T009xd7QY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.56.0/24
Signature Algorithm: sha256WithRSAEncryption
28:c2:80:34:62:38:5a:d5:bc:11:83:a5:8c:29:9d:ef:68:94:
30:5d:2d:2e:0e:bd:01:16:46:13:f6:46:f4:ea:09:44:6a:c9:
1b:c5:a2:67:21:24:8a:fa:3a:83:d6:18:99:fb:1e:9d:90:65:
e8:70:75:00:00:2a:7e:9f:8c:af:ad:a1:9f:48:b9:26:70:a3:
c7:23:d1:8a:bc:fd:a4:c6:b7:0c:6d:9e:99:5e:08:4e:a3:59:
da:7f:4e:7f:91:97:7a:9d:2a:ac:b1:35:09:fa:48:c5:e7:4f:
2c:46:4c:be:9e:ef:32:f5:6e:77:05:0c:ae:80:65:eb:2c:0e:
27:2a:37:f9:8c:47:96:bf:e4:8d:88:b9:13:74:bb:b9:4e:be:
92:a5:16:09:56:39:c3:8e:61:cb:b4:8d:ae:d4:f0:71:55:f4:
81:fa:8c:db:d3:e3:bf:d3:19:3b:92:29:fb:09:ce:66:0a:25:
a3:ed:8b:b3:41:98:9e:57:11:f3:9f:0d:11:23:f2:98:27:b0:
06:90:b0:91:a4:79:aa:3b:4b:47:c6:47:eb:49:0b:36:5d:3a:
4f:45:f1:bc:2b:66:1f:a0:15:af:10:51:49:99:02:07:85:f2:
dd:c6:70:5f:73:67:9b:25:dd:8e:10:93:44:24:7b:08:62:43:
55:5a:13:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 16:06:58 2024 by rpki-client on console-ams.rpki-client.org