Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/8xGBEd8KnAuxoCt-1lM2IDzOpgE.roa
File: 8xGBEd8KnAuxoCt-1lM2IDzOpgE.roa (raw, json)
Hash identifier: PeMS1NUua+/TtO7xXYhuu/8htKU3am+++I0zc11gbpo=
Subject key identifier: F3:11:81:11:DF:0A:9C:0B:B1:A0:2B:7E:D6:53:36:20:3C:CE:A6:01
Certificate issuer: /CN=304e59a223f4bcb823492fb1096c3a82310c03da
Certificate serial: 018572B40F7C7194ECB0A2B11824046E3FBD
Authority key identifier: 30:4E:59:A2:23:F4:BC:B8:23:49:2F:B1:09:6C:3A:82:31:0C:03:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/8xGBEd8KnAuxoCt-1lM2IDzOpgE.roa
Signing time: Mon 02 Jan 2023 13:38:01 +0000
ROA not before: Mon 02 Jan 2023 13:38:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59808
IP address blocks: 45.151.212.0/24 maxlen: 24
2a0e:b580::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:0f:7c:71:94:ec:b0:a2:b1:18:24:04:6e:3f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=304e59a223f4bcb823492fb1096c3a82310c03da
Validity
Not Before: Jan 2 13:38:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3118111df0a9c0bb1a02b7ed65336203ccea601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c1:d8:c7:a1:56:0f:8f:ef:57:f6:39:5f:a9:
d3:14:b6:04:e0:63:5b:7c:d5:87:63:a9:56:51:79:
8a:47:db:21:07:81:5c:06:aa:f4:0a:b9:20:ee:9a:
8f:83:76:2d:b9:4d:6e:d2:05:b5:6e:0e:08:88:fe:
0a:63:c2:df:48:8c:a0:2d:ad:ad:b7:55:98:a0:e3:
12:21:05:7f:e8:e3:a6:b9:dd:21:40:36:9b:e5:1c:
a2:32:6b:8e:8a:6e:a8:ec:75:c6:7c:51:25:55:5f:
25:ff:74:bc:83:7c:88:ee:6f:f4:b3:16:18:5f:ed:
4d:1d:6c:60:28:6c:2f:e1:f5:22:a9:f9:70:57:f9:
4c:0b:e0:fa:3a:cc:65:6e:95:e7:e8:50:6f:54:95:
1f:75:2c:d2:f7:1f:a2:b5:53:80:48:a6:65:16:ed:
3d:bb:f3:86:75:37:f8:a2:33:04:74:0b:91:3f:d7:
65:4f:33:07:ac:ac:0e:dd:43:73:95:f2:be:47:32:
07:4a:59:21:94:be:ea:5a:86:17:7b:11:9b:8f:f5:
4c:8e:43:91:2d:84:1d:40:0b:1f:c6:b2:e6:60:e3:
49:63:0e:a5:68:3e:fc:75:80:8f:61:da:a1:1b:4f:
dd:14:9f:9a:77:ec:ad:e6:90:96:cd:12:9e:e0:a1:
eb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:11:81:11:DF:0A:9C:0B:B1:A0:2B:7E:D6:53:36:20:3C:CE:A6:01
X509v3 Authority Key Identifier:
keyid:30:4E:59:A2:23:F4:BC:B8:23:49:2F:B1:09:6C:3A:82:31:0C:03:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/8xGBEd8KnAuxoCt-1lM2IDzOpgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.212.0/24
IPv6:
2a0e:b580::/29
Signature Algorithm: sha256WithRSAEncryption
53:12:d0:db:e5:72:4a:9f:2c:28:75:8c:1e:ab:91:f3:49:49:
e6:5f:15:4a:30:8f:a8:31:c3:c6:18:47:23:e4:02:06:9e:9c:
25:cc:ae:5a:97:1b:ca:1e:29:37:9f:ab:35:2a:6c:69:8e:a6:
fc:61:de:90:cd:f2:7a:f9:d5:cd:85:71:74:19:9d:5a:77:df:
9f:57:97:23:db:60:5a:20:cd:6d:c3:6f:c6:78:27:52:28:40:
79:24:09:47:ca:b3:7b:9b:c3:4c:52:2b:91:41:98:70:d8:35:
54:fd:c1:b5:aa:f5:c9:d0:99:f9:da:5c:3b:65:3d:79:35:85:
dc:f0:2d:a2:b5:74:b0:58:20:77:d2:05:bd:2b:d3:47:46:91:
84:c3:f6:31:74:ba:ec:00:b1:28:4e:18:0e:8e:4c:c0:e7:02:
50:9e:70:20:84:ef:87:60:b4:7d:f6:d5:5f:ca:9f:2a:d3:b4:
6d:c0:9f:95:47:9f:fe:7d:86:3d:d9:5e:58:89:59:35:89:ca:
64:be:82:38:5b:31:10:cd:32:d9:36:ef:f8:d7:52:37:20:bf:
a7:48:25:80:39:a0:56:fa:96:d2:60:51:1d:f3:29:54:3d:cf:
d5:fb:6b:cd:cf:e5:76:6a:43:c6:f8:87:e4:87:49:38:72:5b:
d6:87:32:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:43 2024 by rpki-client on console-fra.rpki-client.org