Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/NhIhzOWuHBInnYN1f81FTBdJBi0.roa
File: NhIhzOWuHBInnYN1f81FTBdJBi0.roa (raw, json)
Hash identifier: cXJbPYTetFsI1jxEE0OTm/r+28EssAS7Ay5qKDDnvcE=
Subject key identifier: 36:12:21:CC:E5:AE:1C:12:27:9D:83:75:7F:CD:45:4C:17:49:06:2D
Certificate issuer: /CN=e51f3efed57f85c0717ba586386bcd92ddc5c7b5
Certificate serial: 018570DE32043247682E09DF6C1316306673
Authority key identifier: E5:1F:3E:FE:D5:7F:85:C0:71:7B:A5:86:38:6B:CD:92:DD:C5:C7:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/NhIhzOWuHBInnYN1f81FTBdJBi0.roa
Signing time: Mon 02 Jan 2023 05:04:48 +0000
ROA not before: Mon 02 Jan 2023 05:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51548
IP address blocks: 45.13.96.0/22 maxlen: 22
2a0e:e300::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:de:32:04:32:47:68:2e:09:df:6c:13:16:30:66:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e51f3efed57f85c0717ba586386bcd92ddc5c7b5
Validity
Not Before: Jan 2 05:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=361221cce5ae1c12279d83757fcd454c1749062d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4e:bb:9c:58:10:b9:d5:c3:3b:5d:96:58:b8:
1e:7b:9d:4f:6f:68:44:40:96:69:99:ed:9f:9b:4d:
a2:a9:01:05:f2:5f:b9:e9:8c:a3:ea:57:de:90:52:
76:f0:45:9c:d9:43:f3:a8:fd:e7:23:3c:89:ec:86:
42:9a:2a:f7:7b:67:29:65:cc:b4:e7:db:07:e0:44:
f8:f1:05:ba:a8:8b:72:4b:45:de:4a:93:b9:9c:3e:
05:5d:a9:be:fd:e1:46:8b:6f:65:c2:08:72:9f:c5:
0a:0c:c7:0e:14:29:8e:07:66:ba:e7:0e:6e:5b:f8:
05:a8:e3:e1:1d:d0:10:a1:9c:7a:62:0c:22:62:ca:
5a:1d:6a:13:ad:d3:cf:67:50:51:e1:5f:ad:f4:f0:
87:cb:81:28:56:99:aa:db:08:c4:40:bc:bc:25:75:
03:78:d1:5d:bf:92:5f:b2:08:e2:b6:bf:ad:6d:d9:
2f:87:f8:5d:a0:e3:c3:24:b9:76:40:bf:56:87:54:
d2:42:44:bd:70:89:b2:ce:89:3c:74:ea:77:73:87:
38:ee:18:19:4d:25:cf:df:71:fa:2f:b9:bb:55:dd:
0c:75:5f:ec:7f:da:9b:3c:09:8d:9a:a2:9a:e4:0b:
de:ba:31:71:da:15:1d:0e:5c:c7:a7:ca:0b:52:2a:
b2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:12:21:CC:E5:AE:1C:12:27:9D:83:75:7F:CD:45:4C:17:49:06:2D
X509v3 Authority Key Identifier:
keyid:E5:1F:3E:FE:D5:7F:85:C0:71:7B:A5:86:38:6B:CD:92:DD:C5:C7:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/NhIhzOWuHBInnYN1f81FTBdJBi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.96.0/22
IPv6:
2a0e:e300::/29
Signature Algorithm: sha256WithRSAEncryption
9c:27:c5:d1:0f:c7:db:4e:c0:76:1b:f8:89:4c:bf:b6:2a:f6:
42:ee:84:fb:29:d2:87:d1:3d:dd:f8:6b:80:43:7a:0b:12:4c:
d5:7a:7a:96:1f:89:ef:ce:4f:02:0b:7d:8d:6e:a4:bb:f2:61:
d9:8e:60:ae:be:ff:27:22:84:9e:4b:5d:a0:ec:62:af:94:7f:
2d:90:21:2e:9f:f4:f1:ea:82:d0:29:df:0b:a1:fc:f7:66:18:
f5:b5:02:ef:e9:bc:c7:20:86:b3:18:73:ea:51:26:85:8a:16:
fc:9e:1e:4e:33:b5:ea:80:6c:f7:f2:d9:eb:d4:6d:d1:ce:23:
d9:f2:bc:a5:f0:5a:2c:be:1a:03:20:5d:cc:b0:e0:ed:62:e4:
be:aa:88:cf:6e:fc:6d:51:d0:8d:b0:82:82:07:43:e8:88:ce:
73:46:ca:db:cf:89:d9:22:d5:11:06:4e:ba:77:9a:26:db:fe:
3a:3a:a4:be:72:f2:22:a2:d5:dd:c3:21:93:7b:72:b0:5e:3d:
a2:09:89:d1:6a:5a:23:5f:c8:48:e8:3d:dc:ce:a7:4f:c8:af:
db:22:03:59:54:ea:c7:f3:43:60:08:ab:a6:2c:04:21:bf:3e:
64:a8:26:d0:09:e6:ce:df:4c:bd:53:95:dc:37:37:8a:61:36:
d9:10:e2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:16 2024 by rpki-client on console-ams.rpki-client.org