Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/q84cQ2C5bpdDeECjD5Gvlj3LTpQ.roa
File: q84cQ2C5bpdDeECjD5Gvlj3LTpQ.roa (raw, json)
Hash identifier: EccRnvxU99ZjPeyWvv8kzKlaECxP5FhUxzpM90P+5I0=
Subject key identifier: AB:CE:1C:43:60:B9:6E:97:43:78:40:A3:0F:91:AF:96:3D:CB:4E:94
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018E18AD6725B93D2E76F520B8D93D626431
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/q84cQ2C5bpdDeECjD5Gvlj3LTpQ.roa
Signing time: Thu 07 Mar 2024 11:30:01 +0000
ROA not before: Thu 07 Mar 2024 11:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47585
IP address blocks: 45.135.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 11 May 2024 15:25:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:18:ad:67:25:b9:3d:2e:76:f5:20:b8:d9:3d:62:64:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 7 11:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=abce1c4360b96e97437840a30f91af963dcb4e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:36:18:7c:a7:80:7f:e3:f6:e1:8d:99:54:53:
52:fb:ba:d3:22:b2:3e:f6:75:ef:c7:ae:ad:61:f2:
5a:f1:57:ed:b3:7d:4d:ab:2e:74:f4:37:23:50:c8:
b4:3a:fe:4d:f5:dd:d5:b9:ec:4d:a4:6a:cd:f2:15:
2c:ce:27:0f:3c:8a:79:89:7f:32:12:2f:e4:50:18:
e8:a2:1b:77:3d:49:b1:f0:ae:10:75:64:b3:2c:27:
a3:d6:ca:a3:59:5c:1e:d8:8b:a2:30:4c:94:37:d5:
5c:a9:33:02:c3:3f:4f:53:ec:cc:81:7b:3d:6b:ae:
c7:4a:f4:b4:33:1a:18:7c:62:8c:cc:05:fb:6a:d1:
70:ed:5f:e7:aa:12:07:80:4f:0a:cf:62:6d:fd:a5:
b6:9e:69:36:51:6b:84:88:f7:c4:f5:ba:f4:8b:ab:
df:9e:f9:15:93:56:ee:02:9b:a6:ce:72:26:47:dd:
62:e0:f8:74:85:87:00:8f:95:9b:ac:e5:1d:70:ec:
ac:fe:95:02:e0:2d:96:2f:6b:ca:33:76:38:1e:4a:
aa:60:6f:02:21:22:10:8b:33:fc:4e:d8:af:d2:c0:
ef:07:31:ee:eb:61:ce:72:1c:06:54:bd:c6:e3:e5:
52:65:f1:5a:8b:b6:1e:a2:62:84:6f:07:41:03:94:
ec:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CE:1C:43:60:B9:6E:97:43:78:40:A3:0F:91:AF:96:3D:CB:4E:94
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/q84cQ2C5bpdDeECjD5Gvlj3LTpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.181.0/24
Signature Algorithm: sha256WithRSAEncryption
19:66:06:0b:8e:36:14:0e:46:7c:09:8e:09:dd:4f:a2:67:ee:
1b:9c:b5:22:bd:39:39:66:66:3e:b2:79:53:9e:6b:60:e1:a2:
23:fc:45:df:c9:28:0d:47:7e:d4:c6:72:30:fa:e5:40:15:c7:
17:f7:70:39:ac:37:26:42:50:c2:3b:36:9f:82:aa:e8:9b:95:
b3:35:aa:6d:09:d2:da:b9:40:ea:71:c8:31:b0:05:9b:fd:3d:
c0:27:f5:96:a9:89:bd:7d:d8:50:ef:31:2c:6a:51:22:0f:e6:
4d:97:f8:96:df:8b:f5:aa:9c:e6:4f:32:3c:0a:21:56:27:fa:
6b:20:3f:91:9f:0c:28:45:7c:54:b5:10:17:84:56:41:cf:a9:
56:3f:83:b0:fd:c4:0c:96:e3:fb:e6:ed:7e:c4:e3:b1:e1:63:
8d:c4:2e:c1:c0:76:6d:3e:eb:89:6b:02:88:63:47:ce:97:e0:
4d:ca:5a:39:9b:f2:25:8d:b4:d6:e9:30:06:ae:71:57:33:7c:
12:19:38:11:88:09:7c:fd:04:aa:6c:72:1a:19:86:e2:0a:2f:
2b:67:e3:ae:fc:f9:d9:68:2a:db:aa:34:b8:58:84:f3:e4:d3:
ce:f3:af:8c:7c:d5:94:c9:8e:92:86:f7:37:08:c8:e1:4f:0e:
40:3d:c8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:10 2024 by rpki-client on console-fra.rpki-client.org