Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/r2_yJCAlm-R8nlrN4TbkdOT5oTo.roa
File: r2_yJCAlm-R8nlrN4TbkdOT5oTo.roa (raw, json)
Hash identifier: xprP8HgcvUXLiLbO1YmuFnsyPETx/IkKaccSHKKMWLE=
Subject key identifier: AF:6F:F2:24:20:25:9B:E4:7C:9E:5A:CD:E1:36:E4:74:E4:F9:A1:3A
Certificate issuer: /CN=507e582adc9369da8ae85dd935740123081c7eed
Certificate serial: 0187B8CD66553BD09327F13FD7E4D8069781
Authority key identifier: 50:7E:58:2A:DC:93:69:DA:8A:E8:5D:D9:35:74:01:23:08:1C:7E:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UH5YKtyTadqK6F3ZNXQBIwgcfu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/r2_yJCAlm-R8nlrN4TbkdOT5oTo.roa
Signing time: Tue 25 Apr 2023 14:24:41 +0000
ROA not before: Tue 25 Apr 2023 14:24:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 45.143.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b8:cd:66:55:3b:d0:93:27:f1:3f:d7:e4:d8:06:97:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=507e582adc9369da8ae85dd935740123081c7eed
Validity
Not Before: Apr 25 14:24:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af6ff22420259be47c9e5acde136e474e4f9a13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c1:ae:f6:11:ca:3d:38:18:c7:dc:99:b3:95:
2d:60:79:9c:8e:60:f0:5e:73:4a:b3:b8:7c:dd:b3:
ba:ac:19:ff:0b:31:39:54:ec:ab:9f:84:da:8e:40:
3b:f6:24:9e:86:20:27:43:77:dc:ca:c2:2d:e7:0e:
4d:3c:2a:b6:8f:c4:c9:eb:e7:13:b2:9d:2c:ed:e1:
8c:ed:7d:b6:b1:5d:7c:20:d1:08:f4:a3:db:8d:1c:
a8:04:bb:e0:6c:fc:52:e1:c1:68:e3:d4:0e:26:b6:
0b:1b:92:87:ea:d2:0a:49:d0:ae:08:6d:3e:20:6e:
02:79:69:20:31:26:8b:ac:81:22:db:b3:f3:31:25:
3c:b1:b7:3e:35:82:9d:c7:03:ff:24:2a:71:82:47:
3e:08:22:cd:be:16:9a:3d:d7:68:2c:54:fa:0e:f9:
c3:3c:71:db:0b:3d:a9:be:02:12:44:fd:47:ef:ba:
18:fb:ab:89:db:28:8a:83:39:24:e9:f7:f6:4d:d3:
e1:ec:bf:76:09:8b:e7:93:7b:31:49:9d:65:2b:18:
a5:c7:20:c7:2d:0c:c6:7a:d0:c7:98:18:f8:0d:ca:
32:15:53:7a:46:4b:9c:34:c8:f4:af:18:87:2c:fb:
41:8a:6d:5c:dc:3c:bf:b7:08:4f:06:94:53:dd:dc:
bd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6F:F2:24:20:25:9B:E4:7C:9E:5A:CD:E1:36:E4:74:E4:F9:A1:3A
X509v3 Authority Key Identifier:
keyid:50:7E:58:2A:DC:93:69:DA:8A:E8:5D:D9:35:74:01:23:08:1C:7E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UH5YKtyTadqK6F3ZNXQBIwgcfu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/r2_yJCAlm-R8nlrN4TbkdOT5oTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.156.0/24
Signature Algorithm: sha256WithRSAEncryption
77:83:8c:f9:62:09:7e:fd:d8:58:4c:12:fe:2a:2e:73:7d:6c:
05:ed:3f:fd:5f:06:13:cb:9f:19:ac:23:d9:7a:2b:4e:5d:8d:
ee:de:86:6f:fe:58:35:e3:22:cc:e3:c2:81:fb:1f:72:60:bf:
21:ed:60:d2:06:4e:a1:c5:3d:2b:81:d5:4e:04:90:45:0c:53:
9e:95:f4:1f:70:2f:e4:c1:27:a6:33:e0:b0:a9:05:68:ec:96:
e4:1e:ca:d9:62:98:73:af:db:16:a4:9e:f9:a9:88:f6:78:df:
06:c7:d1:8e:ff:6f:1c:19:60:21:85:8e:24:3d:63:94:30:86:
07:3e:b8:9d:7d:7c:62:e2:6d:37:4f:85:25:67:b0:50:92:1d:
55:ea:58:e6:15:f5:97:62:5e:23:81:09:72:42:a4:bd:fb:ee:
d0:74:de:c3:06:92:fd:c3:a8:14:56:70:d2:3b:cd:96:55:a1:
96:0c:75:9d:82:77:36:a4:a7:ff:1e:dc:e7:0e:ef:b8:47:74:
a4:9c:73:d4:65:10:7e:0a:c5:a2:d4:e0:7d:c9:07:55:51:96:
a7:e2:0b:68:0f:fe:d7:d6:c3:b3:14:27:1a:4b:0a:10:8c:9d:
92:45:c0:3a:80:50:40:90:a7:c0:73:b3:2e:6e:b6:08:00:09:
32:64:9e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:14 2024 by rpki-client on console-fra.rpki-client.org