Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/xO36Z0kf_3x6sQLCWmIoVoWCmBo.roa
File: xO36Z0kf_3x6sQLCWmIoVoWCmBo.roa (raw, json)
Hash identifier: heFtYgrtqJdE+U9DY6s6k9YAo2Nyg29l2M67iC5M/9c=
Subject key identifier: C4:ED:FA:67:49:1F:FF:7C:7A:B1:02:C2:5A:62:28:56:85:82:98:1A
Certificate issuer: /CN=1eb99c120ec994f3b70dbfc5e019a2e8b187cd0c
Certificate serial: 01857295A8326E52DE1E56820ECC08F05A08
Authority key identifier: 1E:B9:9C:12:0E:C9:94:F3:B7:0D:BF:C5:E0:19:A2:E8:B1:87:CD:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/xO36Z0kf_3x6sQLCWmIoVoWCmBo.roa
Signing time: Mon 02 Jan 2023 13:04:48 +0000
ROA not before: Mon 02 Jan 2023 13:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50939
IP address blocks: 45.134.160.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 12 Jan 2023 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:95:a8:32:6e:52:de:1e:56:82:0e:cc:08:f0:5a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eb99c120ec994f3b70dbfc5e019a2e8b187cd0c
Validity
Not Before: Jan 2 13:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4edfa67491fff7c7ab102c25a6228568582981a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:08:78:64:15:35:f3:dd:00:9b:f1:96:2f:f6:
a5:32:44:41:fb:59:41:d9:59:45:70:d9:d7:19:52:
94:91:a8:96:37:84:1a:60:3d:a0:ce:19:35:4d:82:
2d:73:c2:82:0a:48:35:fa:ee:69:42:68:28:0f:68:
90:99:c9:44:62:2f:62:db:e8:a1:ae:ad:21:f1:af:
9a:2b:c9:d5:62:68:f5:a7:63:2f:f8:d2:09:52:36:
18:9d:b6:59:fd:93:15:87:13:39:c5:82:a1:2b:44:
a7:02:d7:19:28:15:c2:41:35:d1:0d:67:e0:da:45:
c8:88:2b:fa:67:b4:1f:d4:e5:63:4f:9c:33:5a:3c:
c1:12:6e:28:62:f0:ef:c2:63:8f:75:1c:c3:c5:f8:
0e:b2:a9:28:5e:7d:f2:e0:bd:00:c6:6c:cf:2a:46:
56:cf:4e:b3:60:a0:9a:eb:1c:6d:fb:8e:1c:0c:3e:
1e:77:1e:e3:41:7a:22:ab:77:43:96:42:7d:5d:61:
4c:a5:49:ee:b8:d7:d7:ef:ba:18:b5:ec:20:e4:a8:
ff:2f:73:81:39:f8:14:be:c4:c8:9d:17:8d:cb:b7:
e4:36:3a:f9:ee:7b:b2:86:92:a0:c2:1b:10:1e:f0:
1d:a5:45:02:30:9a:a8:55:8a:14:67:c8:8d:b3:05:
e5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:ED:FA:67:49:1F:FF:7C:7A:B1:02:C2:5A:62:28:56:85:82:98:1A
X509v3 Authority Key Identifier:
keyid:1E:B9:9C:12:0E:C9:94:F3:B7:0D:BF:C5:E0:19:A2:E8:B1:87:CD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/xO36Z0kf_3x6sQLCWmIoVoWCmBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.160.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:6d:50:64:cd:95:a3:14:ed:4d:84:46:da:3a:63:b9:b7:3e:
2d:e0:29:7e:e0:26:e0:b8:8e:99:04:06:46:b9:d0:57:a0:b4:
87:46:a7:e6:4a:bf:4d:c0:de:31:f4:f9:18:b4:28:16:09:58:
58:b6:2e:5a:58:0e:8e:93:49:aa:4e:38:ec:6b:73:01:c0:a4:
35:e4:73:1e:4c:00:23:c5:eb:f3:1e:00:3e:f4:96:66:75:e0:
8d:7a:3c:df:bd:66:a7:39:da:d1:9a:9a:24:81:41:6f:f7:19:
ac:da:bd:ad:a1:21:06:6e:7a:ac:ba:ee:99:9c:6e:f6:28:f7:
95:9a:6a:a2:51:1e:9e:2f:09:c5:18:4a:25:fa:2c:f4:74:e0:
b8:27:93:80:00:61:7c:95:e1:09:c5:11:64:82:40:b5:99:2b:
ae:2a:a2:22:dd:44:57:2c:46:6d:51:5a:af:0c:e0:a0:28:36:
48:60:fb:54:f1:5c:4d:f1:89:0f:8c:8c:02:6d:08:d3:98:28:
4e:8c:17:ee:14:32:e4:8d:43:0c:e0:86:1d:d9:9f:5b:0f:fa:
37:c9:68:4d:8c:68:bd:09:04:05:99:ca:91:d2:29:35:91:0b:
94:80:2a:81:d2:c9:04:c4:bd:72:22:30:a7:ab:7a:f0:c2:b9:
01:69:4b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:47 2024 by rpki-client on console-fra.rpki-client.org