Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/cJINq6JRry_hscakIf08uO3TDxc.roa
File: cJINq6JRry_hscakIf08uO3TDxc.roa (raw, json)
Hash identifier: 4OXJQvQ/fiI5j+H0+R5LZJrfv/ObQdw/WtS3bKZVn9s=
Subject key identifier: 70:92:0D:AB:A2:51:AF:2F:E1:B1:C6:A4:21:FD:3C:B8:ED:D3:0F:17
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 018A13F0D5BDD4819B8E7AE33C998AAD7DA6
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/cJINq6JRry_hscakIf08uO3TDxc.roa
Signing time: Sun 20 Aug 2023 17:14:24 +0000
ROA not before: Sun 20 Aug 2023 17:14:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197730
IP address blocks: 45.130.181.0/24 maxlen: 24
45.130.182.0/24 maxlen: 24
45.130.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Sep 2023 11:16:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:13:f0:d5:bd:d4:81:9b:8e:7a:e3:3c:99:8a:ad:7d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Aug 20 17:14:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70920daba251af2fe1b1c6a421fd3cb8edd30f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bc:20:92:ea:b0:aa:3f:29:8f:0c:15:fe:75:
14:bf:ad:dc:c1:b0:af:3d:78:4c:f8:6e:a0:85:cf:
c8:60:eb:49:d4:15:70:dc:49:0b:ef:22:3e:49:46:
82:03:93:51:54:40:21:f9:06:69:e1:4f:71:fb:ea:
77:c1:dd:d5:e8:6b:fc:09:c9:00:36:74:82:31:cc:
7c:56:fc:d6:63:4b:9d:2d:12:b5:f9:90:39:29:82:
f3:d4:93:ad:ac:2e:bd:c1:40:15:82:7a:06:87:5f:
cf:60:25:e9:a4:42:bb:32:cb:6b:d5:7e:7b:45:1a:
0f:06:04:ba:71:54:85:e3:64:bf:93:dd:86:fb:04:
a9:ad:b6:2f:f0:7e:18:91:88:43:7e:1e:9c:1b:22:
52:e9:0c:61:b3:ed:29:de:4a:da:bf:3a:2a:e1:37:
0b:f7:a6:c0:7d:02:9a:4c:1c:8c:55:a0:c7:d9:63:
8d:e6:52:25:30:8b:66:72:de:e6:a5:26:e3:d8:34:
c1:ea:d9:5c:5d:e3:75:03:86:22:2e:32:b5:3d:9b:
db:b1:65:c5:f0:7b:37:f1:60:ad:e5:bc:f6:37:c6:
3c:a4:07:16:69:15:22:16:57:ab:eb:af:aa:c7:8f:
ca:36:cb:e2:af:57:51:9e:27:73:f1:c1:a7:d4:3e:
86:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:92:0D:AB:A2:51:AF:2F:E1:B1:C6:A4:21:FD:3C:B8:ED:D3:0F:17
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/cJINq6JRry_hscakIf08uO3TDxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.180.0-45.130.182.255
Signature Algorithm: sha256WithRSAEncryption
8d:7f:2a:a4:6d:3a:17:aa:0c:c3:a6:15:bd:66:d7:8e:a3:02:
bf:91:30:bf:76:b2:11:ef:9c:82:f4:a8:d0:38:9a:49:c9:da:
c2:9e:bb:ae:1d:c0:ec:27:e4:94:67:d8:f3:59:d7:91:38:45:
be:1b:fd:a1:9d:58:38:39:94:00:18:29:f9:a4:72:54:9b:d1:
3f:86:5c:2a:fd:88:d7:de:ad:a7:45:12:04:fd:39:d1:09:cb:
07:ec:f7:dc:ba:26:fa:b3:ac:13:f9:34:1b:4d:c9:eb:fd:13:
62:90:c6:2e:66:ce:5e:b9:75:19:59:33:52:9e:c3:5c:65:81:
5c:6e:43:be:22:43:4e:d0:56:1e:12:5c:05:a9:dd:95:16:e0:
84:b6:e7:dd:72:47:d6:5a:9c:d0:80:a8:16:60:d5:8a:87:99:
63:54:09:cf:08:66:d6:0b:1e:f8:5f:a6:a5:ea:08:ab:ba:b0:
9e:66:4c:b8:b9:be:c8:8b:4c:9e:01:20:9c:1f:f6:fa:3c:0a:
f9:06:76:30:33:23:be:6a:16:be:b3:aa:cd:d4:8c:46:7b:5c:
a0:c6:19:d1:c9:ba:fe:28:6a:7f:ff:21:49:f3:e4:81:e5:0d:
84:b8:80:0e:3c:b3:35:ae:9c:63:ea:e7:b1:96:30:51:50:fd:
de:5a:b0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org