Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/_6pPLaE9wOBzGjrLG46O8gjOTeo.roa
File: _6pPLaE9wOBzGjrLG46O8gjOTeo.roa (raw, json)
Hash identifier: OY/f6ccFTFBgePrPMopYP9HQUY2OyQDmw3tAnRZ/YO4=
Subject key identifier: FF:AA:4F:2D:A1:3D:C0:E0:73:1A:3A:CB:1B:8E:8E:F2:08:CE:4D:EA
Certificate issuer: /CN=1eb99c120ec994f3b70dbfc5e019a2e8b187cd0c
Certificate serial: 0185A655461C5D6D074494E1A5931D31256C
Authority key identifier: 1E:B9:9C:12:0E:C9:94:F3:B7:0D:BF:C5:E0:19:A2:E8:B1:87:CD:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/_6pPLaE9wOBzGjrLG46O8gjOTeo.roa
Signing time: Thu 12 Jan 2023 14:14:44 +0000
ROA not before: Thu 12 Jan 2023 14:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50939
IP address blocks: 45.134.160.0/22 maxlen: 22
2a0f:4480::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a6:55:46:1c:5d:6d:07:44:94:e1:a5:93:1d:31:25:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eb99c120ec994f3b70dbfc5e019a2e8b187cd0c
Validity
Not Before: Jan 12 14:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ffaa4f2da13dc0e0731a3acb1b8e8ef208ce4dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:09:0c:29:90:a1:a2:8b:5c:55:1b:b7:bc:dc:
c9:d3:8d:88:e2:bd:3b:20:90:fb:7c:7f:da:e5:3e:
e6:2d:fc:5b:ef:c9:83:02:77:8f:44:20:d5:48:7f:
64:bc:7d:77:11:25:21:48:cc:4a:a4:1a:58:25:85:
94:d8:b0:bc:a3:2a:3b:e0:fb:8f:cc:ee:47:e0:88:
99:b1:e9:6e:68:00:63:ed:a2:1c:7b:8b:3b:99:c0:
46:62:66:e2:c9:f9:ab:46:ac:7d:1f:40:e2:7c:80:
d2:d9:74:3c:ad:0c:17:cd:2d:28:c5:a3:b4:61:36:
b3:03:ba:49:19:d9:a6:52:52:bf:e6:9f:56:e7:d6:
8d:67:58:56:2b:64:ac:d9:bb:5d:57:6e:4f:9c:cb:
ee:d4:84:e6:d6:11:b0:66:3c:e9:cd:65:36:a4:d7:
dc:b6:28:22:a1:a9:9f:83:12:42:b9:a0:06:c7:3f:
9c:56:d6:08:5b:fe:c9:37:33:14:e0:55:a9:06:b9:
b9:64:8e:e2:66:02:3f:d7:5b:1c:45:f3:22:f4:83:
1b:0d:6b:df:ad:66:74:e1:a5:ca:72:74:c3:56:44:
90:0b:2b:33:c2:9f:bd:d4:f8:d9:19:2c:0d:54:97:
1e:25:0e:77:3a:bd:7b:90:7b:66:f7:fd:e3:0c:4d:
5e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AA:4F:2D:A1:3D:C0:E0:73:1A:3A:CB:1B:8E:8E:F2:08:CE:4D:EA
X509v3 Authority Key Identifier:
keyid:1E:B9:9C:12:0E:C9:94:F3:B7:0D:BF:C5:E0:19:A2:E8:B1:87:CD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/_6pPLaE9wOBzGjrLG46O8gjOTeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.160.0/22
IPv6:
2a0f:4480::/48
Signature Algorithm: sha256WithRSAEncryption
59:41:4c:dd:58:68:73:b5:f6:6b:cd:5a:a6:87:7f:1c:52:32:
6b:bd:47:6d:96:df:0b:57:4b:29:6f:db:0a:bd:8e:8f:5c:32:
35:af:8e:38:bf:af:b4:ee:b4:ef:58:f2:32:6f:df:45:8e:45:
5f:77:48:ce:68:f8:b9:ee:f8:cd:56:75:7c:71:20:26:83:37:
01:0d:af:24:ad:9f:46:ec:93:38:ca:2c:03:86:e2:4f:a5:8a:
f3:fa:e7:cc:7d:55:c5:c9:b4:2c:43:27:fb:6c:e8:8d:27:5b:
e7:ad:68:85:e0:85:2c:c0:a9:a0:51:10:78:12:7b:a3:af:2a:
be:0e:c5:c0:97:a4:44:c7:8d:e6:fe:66:d1:bb:70:c6:4c:f4:
39:fb:5a:08:70:9a:e2:4f:9e:d0:b3:d6:2c:55:62:dc:68:68:
7e:56:7e:d3:cb:ba:28:ee:d8:9d:b2:d1:17:f7:f6:fa:bd:51:
51:7c:74:38:d1:a0:ba:33:4c:90:e2:11:84:70:6a:69:d7:69:
36:bc:a4:c8:90:50:c3:1e:a7:dc:5e:96:9c:83:53:6c:4e:8a:
0b:41:58:9f:22:49:03:4d:bf:21:c1:04:4e:e5:ab:40:11:af:
60:57:2e:eb:92:d0:c3:0a:8c:38:0a:4b:1b:0f:19:eb:eb:28:
31:96:db:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:46 2024 by rpki-client on console-ams.rpki-client.org