Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/JLA6ubcWqNwTIN9IcyMSrIU2cQw.roa
File: JLA6ubcWqNwTIN9IcyMSrIU2cQw.roa (raw, json)
Hash identifier: JFj3LJT2/XcaN2hkfBIi1SmeQIwbbUrfApznrqlZ/DU=
Subject key identifier: 24:B0:3A:B9:B7:16:A8:DC:13:20:DF:48:73:23:12:AC:85:36:71:0C
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 018CC26D57A8E3D489906042678656D397E3
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/JLA6ubcWqNwTIN9IcyMSrIU2cQw.roa
Signing time: Mon 01 Jan 2024 00:29:54 +0000
ROA not before: Mon 01 Jan 2024 00:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212093
IP address blocks: 45.151.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Feb 2024 05:29:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:57:a8:e3:d4:89:90:60:42:67:86:56:d3:97:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jan 1 00:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24b03ab9b716a8dc1320df48732312ac8536710c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:16:bd:de:70:40:83:5e:ee:29:1c:07:d0:36:
69:36:33:af:cf:b9:2d:f6:e2:60:f5:98:a9:18:b3:
ef:64:5f:71:bb:66:f0:4f:72:fd:d2:01:88:18:04:
6a:51:23:39:da:84:22:cd:f6:b6:22:0a:ee:32:8e:
51:48:e6:5a:e7:42:3d:28:34:0e:40:60:5e:34:c7:
16:7e:06:88:84:79:b1:7b:a0:fc:ad:69:ca:73:87:
90:63:00:95:c6:d1:62:0f:75:79:2e:56:26:7c:4a:
f2:8f:98:ef:0b:59:13:0a:37:9d:c4:e1:9d:17:52:
6a:ea:76:ac:4f:29:4c:3d:0b:8b:17:33:43:86:38:
2c:e2:3e:05:31:d3:f7:ef:aa:41:a3:6c:4c:8f:09:
75:b7:08:5f:28:43:2e:77:ac:b3:bd:b4:f0:ea:81:
d1:b0:30:10:d6:f5:36:54:d6:5c:18:5d:66:0c:90:
00:66:ed:9b:0a:95:cd:54:22:90:85:83:09:3c:eb:
f1:5f:19:77:bd:74:af:66:cf:42:a3:bd:f1:65:e4:
41:50:74:d2:01:1a:2b:cb:36:4f:28:d2:5e:67:e1:
91:0b:d0:89:7f:45:6f:67:4c:58:c9:6c:d3:65:09:
49:cd:43:e5:4e:94:d4:14:3e:f8:e1:76:c9:70:74:
71:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B0:3A:B9:B7:16:A8:DC:13:20:DF:48:73:23:12:AC:85:36:71:0C
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/JLA6ubcWqNwTIN9IcyMSrIU2cQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.138.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:44:0a:ad:cd:a6:67:a3:a8:c9:b8:21:ee:18:8b:13:8b:d5:
00:c8:0b:fe:ff:cf:bb:1e:ed:4d:87:61:99:d7:5e:0b:eb:c2:
c3:c7:f9:8c:87:84:17:28:9f:3b:25:a3:47:4f:7a:cf:ea:f2:
a2:31:4e:08:d1:66:22:70:d0:f7:6d:4b:ac:ec:5a:c5:75:85:
c4:90:25:ec:09:19:a3:da:66:14:59:1f:ca:ce:ed:a1:69:30:
0a:04:95:8c:66:e8:19:11:7d:1b:a7:39:5b:cd:68:6a:ec:0f:
53:c7:38:63:9f:94:07:11:27:2e:cb:a8:b6:a8:3f:ec:d8:c1:
98:8a:c7:e1:1f:2c:af:29:b5:c2:b0:67:53:a7:9f:a5:00:9b:
ac:3c:bc:bb:7b:59:3e:6d:6e:58:a2:7f:a8:98:42:f2:35:3b:
57:1e:21:31:39:29:05:01:78:ba:93:0e:fb:d1:84:14:66:e5:
fb:0a:b2:96:a0:ae:7d:41:83:50:ef:46:fc:9b:0c:6b:ef:3d:
2f:30:03:28:4e:6d:e9:cf:e1:a4:a5:4c:50:bc:33:53:63:ce:
24:5c:81:78:84:ee:f7:ff:84:f7:08:c9:d8:26:77:8f:2c:93:
5c:7f:29:3b:93:2c:aa:6f:a9:72:db:f3:36:d4:75:11:89:e4:
67:7a:9a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 12 06:20:00 2024 by rpki-client on console-ams.rpki-client.org