Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/L9uqfwlwtKn4U1kSIcBKpatdTlE.roa
File: L9uqfwlwtKn4U1kSIcBKpatdTlE.roa (raw, json)
Hash identifier: Mep+hC9js6wGK3tUPj4o1wZzBlj6IPPuMSpAd1vGjoE=
Subject key identifier: 2F:DB:AA:7F:09:70:B4:A9:F8:53:59:12:21:C0:4A:A5:AB:5D:4E:51
Certificate issuer: /CN=1f53c06ca7976d737b23bc72768a228c397faf2f
Certificate serial: 018C874CFA4E9C6395BB6F3DC23A1E6CA55C
Authority key identifier: 1F:53:C0:6C:A7:97:6D:73:7B:23:BC:72:76:8A:22:8C:39:7F:AF:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1PAbKeXbXN7I7xydooijDl_ry8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/L9uqfwlwtKn4U1kSIcBKpatdTlE.roa
Signing time: Wed 20 Dec 2023 12:56:58 +0000
ROA not before: Wed 20 Dec 2023 12:56:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29657
IP address blocks: 45.132.100.0/24 maxlen: 24
45.132.101.0/24 maxlen: 24
2a14:4d80::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:87:4c:fa:4e:9c:63:95:bb:6f:3d:c2:3a:1e:6c:a5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f53c06ca7976d737b23bc72768a228c397faf2f
Validity
Not Before: Dec 20 12:56:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2fdbaa7f0970b4a9f853591221c04aa5ab5d4e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2c:3e:55:af:d1:ee:7c:92:68:fb:ea:b7:8b:
fa:c0:1c:9b:f5:84:57:f2:28:f7:69:79:d5:06:0a:
e6:70:cc:fc:87:5a:e8:05:47:ba:2e:27:51:58:0e:
3e:1b:1a:58:2c:ec:36:16:55:df:e4:02:c9:17:8c:
e0:a8:20:9f:f4:62:1f:b1:d8:d7:ed:a9:96:06:35:
a1:fa:fc:98:0b:a7:1d:98:17:b0:98:b8:0f:59:28:
54:5d:e5:f6:55:1d:40:e3:78:17:1d:22:c0:a6:2e:
b8:64:e8:8c:72:39:22:9e:ba:56:24:0f:7b:07:d9:
94:04:a0:76:ae:00:5b:95:b7:70:8b:b6:d0:76:ab:
50:42:5a:e9:43:ee:20:4d:a3:0a:e7:8a:7a:09:4d:
52:ac:39:06:33:f8:92:da:77:c9:00:3b:bb:af:f6:
27:5f:0e:6a:0c:e8:d0:43:63:0a:3d:85:8e:2a:d2:
43:a9:70:19:69:fb:05:f2:1e:e1:67:50:d5:8e:41:
66:cf:7b:9b:c2:07:9d:f7:1a:f2:77:b7:d1:1b:21:
a7:66:c5:22:ad:0e:a8:81:ed:94:f9:bb:aa:60:6d:
20:22:dc:9a:10:d4:22:52:b3:2d:64:d4:38:2c:3d:
01:c2:7b:79:d3:03:40:4e:f5:b7:85:7f:83:24:be:
ec:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DB:AA:7F:09:70:B4:A9:F8:53:59:12:21:C0:4A:A5:AB:5D:4E:51
X509v3 Authority Key Identifier:
keyid:1F:53:C0:6C:A7:97:6D:73:7B:23:BC:72:76:8A:22:8C:39:7F:AF:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1PAbKeXbXN7I7xydooijDl_ry8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/L9uqfwlwtKn4U1kSIcBKpatdTlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/H1PAbKeXbXN7I7xydooijDl_ry8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.100.0/23
IPv6:
2a14:4d80::/32
Signature Algorithm: sha256WithRSAEncryption
3e:7d:e1:53:45:e4:82:3f:12:a9:37:22:25:de:b0:cc:68:e0:
58:a1:8e:a3:9d:93:bc:ce:56:65:0c:20:c7:89:c3:80:f2:0f:
66:3f:53:8e:be:83:80:f1:02:fc:1d:b4:2a:03:6b:e8:b6:dd:
04:dd:c9:9e:18:c8:b0:c1:f7:52:b3:94:f5:91:48:63:c9:5c:
15:91:38:53:fc:6e:60:65:e6:c7:4d:0e:84:bb:66:cf:38:2d:
a0:56:72:9a:d0:00:e8:65:df:e0:06:c8:10:a6:39:88:81:4a:
1a:cb:f8:9c:da:ee:c3:06:ec:15:7a:d7:11:83:ff:bc:e7:75:
92:34:d4:07:cb:75:d1:6b:18:93:07:eb:d2:a4:85:72:52:ec:
da:91:1f:d4:7c:7c:5e:c8:60:d9:ad:e1:80:aa:96:81:6b:21:
25:97:36:45:83:f1:e6:7f:75:ca:fa:70:4d:e6:97:a4:00:cb:
27:fd:5d:5f:96:20:48:3b:74:4d:18:75:3a:42:f7:f0:79:55:
82:ce:24:f5:25:3b:19:c7:e9:e7:04:c2:23:55:64:4c:ce:76:
30:c9:f9:17:76:60:76:2e:42:81:02:bc:4c:52:10:4f:ea:13:
83:bb:a5:7f:06:fa:de:4b:13:dd:b9:4d:8f:f1:97:e3:07:e5:
50:07:a0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:03 2024 by rpki-client on console-ams.rpki-client.org