Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Ec9pVecmyhe_5XTtWAztLgcIlZY.roa
File: Ec9pVecmyhe_5XTtWAztLgcIlZY.roa (raw, json)
Hash identifier: VLoIt6CuuD5XbpHcoyMjCY1NS68JBvlhkxc6Shb0+ro=
Subject key identifier: 11:CF:69:55:E7:26:CA:17:BF:E5:74:ED:58:0C:ED:2E:07:08:95:96
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 0190EA7130FC017938D86EF85DA1A0AFCD9A
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Ec9pVecmyhe_5XTtWAztLgcIlZY.roa
Signing time: Thu 25 Jul 2024 15:10:04 +0000
ROA not before: Thu 25 Jul 2024 15:10:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 45.132.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Aug 2024 08:52:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ea:71:30:fc:01:79:38:d8:6e:f8:5d:a1:a0:af:cd:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Jul 25 15:10:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11cf6955e726ca17bfe574ed580ced2e07089596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:36:c0:27:a3:44:02:34:96:9f:e1:41:6d:3d:
af:21:8f:cc:74:89:02:ee:40:ce:10:16:14:71:3f:
88:9b:62:7e:24:2b:94:aa:7d:40:7d:74:09:66:31:
a6:92:fd:57:7e:85:9c:d1:17:f0:bc:a9:6d:b6:23:
dd:26:eb:0a:99:c1:58:56:62:ee:34:62:45:8f:01:
52:ca:cd:7f:88:a4:a3:f0:8a:06:db:59:8f:93:db:
b5:80:b9:bd:a5:f0:2b:2c:31:8f:ce:83:36:53:bd:
3e:13:ca:ab:32:b2:b8:fe:99:3b:09:b6:17:ea:d8:
ef:2e:4d:d5:5c:ff:df:3c:3d:06:d8:a0:1f:e6:68:
1a:01:11:53:d5:78:f1:95:3e:bc:80:98:a7:e9:7f:
47:32:7e:82:a9:46:18:ae:4b:ee:f4:71:92:24:65:
15:49:5d:ec:46:1c:09:2d:6c:a4:e3:fe:35:a4:ae:
03:a7:e0:74:48:79:c3:38:a2:df:3c:8d:98:07:1c:
a7:5e:07:1e:40:69:3b:a1:1e:11:fc:67:6d:80:e2:
35:6e:1d:27:51:d0:7c:0a:d7:3a:fd:72:1d:8c:27:
9d:2a:7e:5b:f0:6f:de:c4:9a:e8:b2:09:b9:1f:e4:
92:22:bd:ce:d0:56:8f:87:63:ea:4d:2c:66:ad:19:
b6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CF:69:55:E7:26:CA:17:BF:E5:74:ED:58:0C:ED:2E:07:08:95:96
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Ec9pVecmyhe_5XTtWAztLgcIlZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.27.0/24
Signature Algorithm: sha256WithRSAEncryption
42:ae:d5:06:42:95:0a:99:60:2f:57:89:78:00:d4:49:00:56:
bc:0a:6a:a9:c5:b8:2c:64:90:86:72:f9:71:de:a9:13:b6:99:
44:a5:4a:47:9e:b4:62:22:42:ce:8a:c2:a3:fb:4e:04:16:ab:
ff:49:70:aa:2d:fc:1e:29:07:28:41:00:25:22:4c:3e:5a:2d:
de:e6:ea:58:99:48:f4:ef:db:e6:17:39:92:ca:a1:69:03:e0:
07:88:37:7c:09:94:92:55:4b:fe:ef:24:4e:91:aa:97:fe:5f:
3a:04:64:1c:c5:71:b8:74:cf:df:71:78:53:4f:88:81:eb:8e:
94:e0:54:20:2c:0d:bd:4e:1b:ad:c3:c8:f2:6f:22:bf:2e:99:
05:d6:39:be:a5:19:50:47:f3:f5:d6:ea:c9:0e:81:84:02:01:
72:2c:ba:3f:ac:2c:51:25:8c:fe:49:52:1d:c2:f0:89:d1:75:
70:83:3e:d4:f9:80:9b:69:ac:40:f5:f5:12:4c:58:bf:5b:87:
2a:4f:76:4c:5e:c9:00:d6:55:68:17:69:f5:55:ed:15:37:7a:
05:20:a1:0b:2f:ee:1e:b3:52:6c:ac:eb:3e:2b:7d:ec:7e:c9:
e4:3c:5c:7f:4f:73:4c:e2:2c:3e:4b:5c:ed:e7:d4:1d:8c:1f:
6b:bf:eb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 11:00:26 2024 by rpki-client on console-fra.rpki-client.org