Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/mK_UmUYHojd2x0Vs9eu_BlHppFU.roa
File: mK_UmUYHojd2x0Vs9eu_BlHppFU.roa (raw, json)
Hash identifier: uKa602vqMIDqHSSc/ds8sw0D+BA21c5WBVLz62R3o7I=
Subject key identifier: 98:AF:D4:99:46:07:A2:37:76:C7:45:6C:F5:EB:BF:06:51:E9:A4:55
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 018CC794902B2DA7A57BE45C146052D74EA4
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/mK_UmUYHojd2x0Vs9eu_BlHppFU.roa
Signing time: Tue 02 Jan 2024 00:30:51 +0000
ROA not before: Tue 02 Jan 2024 00:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 393894
IP address blocks: 45.15.196.0/22 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:47:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:90:2b:2d:a7:a5:7b:e4:5c:14:60:52:d7:4e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Jan 2 00:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=98afd4994607a23776c7456cf5ebbf0651e9a455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:26:5e:21:3f:24:53:94:c4:25:c4:ca:b3:68:
47:77:8a:d1:2c:fc:9b:38:c3:bb:42:6b:2f:62:69:
7d:cf:5f:43:20:fe:4b:3b:58:41:ed:f7:47:d9:65:
08:8d:6b:a7:bd:65:cb:ea:45:fa:25:81:c3:c9:2f:
5c:46:d9:62:ab:fd:77:96:9a:3c:6a:7a:d3:88:dc:
e0:32:8d:28:a9:7e:dd:b4:40:6d:ec:d1:5a:94:46:
43:b4:d5:74:22:cd:bf:dd:cb:92:c5:b5:bb:c6:2d:
eb:81:ac:83:d3:4b:58:b9:c8:5b:3c:b8:7f:12:ba:
c9:95:c8:08:ad:15:3d:51:64:ba:74:45:86:77:5a:
39:94:6f:7e:40:24:ef:e6:d8:a0:46:07:94:47:04:
81:76:aa:a9:19:df:dd:ea:d0:5e:c7:03:a9:c3:2f:
f6:ca:b6:41:75:4e:00:44:ef:3b:ad:d0:38:58:6b:
2d:2e:72:2b:41:76:21:20:40:1c:e9:5e:86:8b:f3:
a7:ee:3c:2d:d8:ac:80:0c:82:bf:1d:1d:17:19:42:
7e:45:08:da:e3:41:c3:00:3d:76:f1:bd:8b:f5:dc:
a9:c1:4b:66:b8:d1:0e:f1:7e:4d:d0:48:09:81:11:
8f:62:63:8a:e9:e2:7e:f4:65:a6:93:b7:a4:06:8a:
35:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AF:D4:99:46:07:A2:37:76:C7:45:6C:F5:EB:BF:06:51:E9:A4:55
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/mK_UmUYHojd2x0Vs9eu_BlHppFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.196.0/22
Signature Algorithm: sha256WithRSAEncryption
76:13:86:35:d5:a7:18:e0:ff:55:8c:79:c5:a1:52:51:28:dd:
ad:8f:44:c1:31:d5:9a:16:45:10:87:86:ea:5c:24:71:27:c9:
29:87:e3:d2:ed:7e:51:ed:16:2a:3b:1f:aa:ca:a1:c8:bb:cc:
20:99:88:53:ff:38:a9:44:5f:3e:a5:00:11:97:88:bc:0e:97:
49:13:d9:b1:0d:49:06:e9:30:42:06:29:7b:ed:32:83:72:c2:
6e:bc:6d:9e:c1:4c:68:c6:6f:3c:b6:32:1b:84:58:f6:e2:94:
6d:e9:91:3e:e0:9e:22:bf:a6:4c:f9:8c:86:ed:30:0c:f7:51:
75:e1:83:09:45:1f:64:81:f1:d7:93:9c:f0:c1:79:c6:9b:26:
28:08:5d:65:60:fc:c9:d5:d6:0c:96:2e:94:b2:73:52:16:ec:
d4:3d:1c:7b:c2:3a:2f:c0:d6:46:0b:84:96:83:13:34:ce:9e:
ba:68:6e:1e:57:b3:3d:d3:ee:1c:ab:7f:d5:3d:47:e6:97:bb:
92:65:3f:f4:44:48:cb:44:5f:b4:96:24:97:69:4c:cd:08:32:
3c:57:9f:c2:15:4b:82:81:c3:9d:7c:77:91:40:0c:2c:75:64:
63:a4:58:f8:42:73:c6:b0:5b:06:9d:9d:b4:f7:a7:1e:70:d1:
f4:e8:0b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:29 2025 by rpki-client