Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/eNwfxbX1U6Xb6In6pSSK6qG7S4k.roa
File: eNwfxbX1U6Xb6In6pSSK6qG7S4k.roa (raw, json)
Hash identifier: +JQXPh+jh7lAzaPPXSqb8J/Q3KcbA8bnZ7g+iipMzbU=
Subject key identifier: 78:DC:1F:C5:B5:F5:53:A5:DB:E8:89:FA:A5:24:8A:EA:A1:BB:4B:89
Certificate issuer: /CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
Certificate serial: 01857246BC05805FD39E0D78436E2E783047
Authority key identifier: 25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/eNwfxbX1U6Xb6In6pSSK6qG7S4k.roa
Signing time: Mon 02 Jan 2023 11:38:36 +0000
ROA not before: Mon 02 Jan 2023 11:38:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 45.143.135.0/24 maxlen: 24
45.143.134.0/24 maxlen: 24
45.143.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Jan 2023 12:14:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:bc:05:80:5f:d3:9e:0d:78:43:6e:2e:78:30:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
Validity
Not Before: Jan 2 11:38:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78dc1fc5b5f553a5dbe889faa5248aeaa1bb4b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ea:aa:0d:0b:da:9c:be:25:f2:bb:aa:3d:58:
91:0f:a9:50:83:b0:37:24:07:a8:4e:5b:c4:a8:49:
1f:03:09:fb:de:2e:1c:93:91:3c:30:02:64:d9:4f:
c0:f6:17:4a:b6:6b:10:4e:ab:82:25:8a:88:7f:f6:
77:c1:16:cc:ef:5b:6a:eb:8c:3c:57:ba:79:be:f9:
d0:66:75:29:eb:c2:f7:2c:57:a9:20:c3:0d:b9:35:
2b:9a:ee:66:d2:f1:25:cb:dc:52:15:d6:34:9e:90:
9e:71:d6:72:5c:35:da:bd:96:13:92:a2:c5:f3:4c:
24:60:78:55:5f:35:64:98:19:a0:30:8c:4d:e5:06:
19:d0:d7:c3:ad:dc:2b:24:1b:a3:9d:cd:1f:87:77:
ba:45:f6:6e:05:0f:f0:8c:66:8b:97:1b:f9:f7:2a:
73:d5:d1:a0:5c:50:95:6d:4e:b6:9d:20:16:aa:87:
db:e7:b3:39:80:46:71:1e:79:52:0a:67:b4:59:39:
68:b3:bc:fd:72:77:63:16:63:ae:19:d8:9c:f5:1c:
ff:24:e6:34:82:73:7f:5b:61:d2:6e:2b:7c:6e:cc:
21:c5:0d:17:93:be:1d:8e:fe:ca:e4:9b:b8:a5:bd:
4a:ed:af:e5:c9:88:de:67:b7:a2:3e:fb:58:89:2e:
a2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DC:1F:C5:B5:F5:53:A5:DB:E8:89:FA:A5:24:8A:EA:A1:BB:4B:89
X509v3 Authority Key Identifier:
keyid:25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/eNwfxbX1U6Xb6In6pSSK6qG7S4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.133.0-45.143.135.255
Signature Algorithm: sha256WithRSAEncryption
26:5f:58:54:47:4a:4c:2a:29:1f:1e:34:92:cf:58:f3:f5:1e:
aa:c7:cf:91:b0:f5:36:ad:a7:00:d7:03:de:32:7d:8d:de:40:
6d:f5:aa:91:ef:92:15:ec:f6:6a:ab:54:fb:bb:55:22:69:2b:
5b:4c:8e:66:46:84:58:be:f2:52:3c:b9:08:d3:92:da:42:55:
aa:4a:ff:93:33:98:60:b6:b5:f2:fa:7c:19:d7:fe:8f:b9:9b:
d8:81:27:90:41:80:c9:10:82:65:9b:29:51:d8:84:2b:0c:2a:
6a:13:86:a7:30:09:8f:81:f1:8b:06:6c:a0:97:4f:94:bd:71:
d9:cb:46:22:d5:dd:34:2b:c2:34:28:87:1a:eb:fc:e4:02:3f:
8a:a2:eb:9e:7c:c9:3e:d6:ee:13:38:28:73:09:8f:d6:47:6c:
37:5d:76:95:e3:05:fa:b3:89:bd:86:be:4c:e1:98:74:19:64:
54:5d:38:d6:03:cf:4f:3c:18:62:e6:e0:bf:36:39:bb:5b:ce:
82:40:d9:44:06:3e:98:cd:cd:e1:35:f8:fe:30:5f:f7:b9:b1:
f6:1c:cb:c6:2f:7c:b0:92:ae:f1:0e:13:ca:7a:26:e1:d9:63:
99:11:61:17:06:55:02:a9:d1:38:95:b2:ca:c7:90:2c:c2:71:
25:d0:87:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:00 2024 by rpki-client on console-ams.rpki-client.org