Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/sjNAJt2pUAGqPP-2Fu1SXDQ5M6o.roa
File: sjNAJt2pUAGqPP-2Fu1SXDQ5M6o.roa (raw, json)
Hash identifier: HKNQAM/838wyKwxy7Dwrri227bS38YzjkxYkcxuS9zY=
Subject key identifier: B2:33:40:26:DD:A9:50:01:AA:3C:FF:B6:16:ED:52:5C:34:39:33:AA
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 018CC727513526264F105843A9764C825C7D
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/sjNAJt2pUAGqPP-2Fu1SXDQ5M6o.roa
Signing time: Mon 01 Jan 2024 22:31:31 +0000
ROA not before: Mon 01 Jan 2024 22:31:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 45.81.151.0/24 maxlen: 24
45.92.28.0/24 maxlen: 24
45.92.28.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 04 Jan 2024 03:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:51:35:26:26:4f:10:58:43:a9:76:4c:82:5c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: Jan 1 22:31:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2334026dda95001aa3cffb616ed525c343933aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:84:76:c7:d1:b3:ca:90:1e:b6:6e:64:7d:5c:
80:48:67:fe:2d:e9:a9:83:6f:db:18:8d:f9:a6:84:
c7:4e:21:5e:48:d6:48:1e:44:b9:d8:53:33:b3:fe:
f2:f2:de:88:20:e7:8d:fc:54:f0:53:e2:7e:12:dd:
d5:b9:11:3f:21:fa:53:59:9a:36:9e:8d:d1:58:e9:
44:db:30:bb:ce:13:c6:a1:46:dc:d8:92:0b:b7:09:
d4:24:4d:d6:d1:69:0d:e2:59:f2:ef:30:d0:02:7a:
f1:1c:69:4e:a5:ee:e3:0e:9f:34:9b:8c:bf:df:4a:
e3:d4:fc:22:20:7f:d2:8b:1d:c7:32:ac:c3:82:4d:
06:4a:c7:4c:af:55:0a:58:01:28:94:6b:c5:1a:81:
25:44:f4:25:bd:b3:7d:72:9b:8d:de:2c:a1:8a:84:
c5:ed:bd:8b:5f:b4:2e:1b:7f:aa:73:b2:c9:8e:b6:
1e:05:84:4f:38:a5:e2:46:9b:24:3b:46:3d:37:e2:
ff:e6:33:2c:b4:75:18:9b:81:4a:ec:a3:87:06:17:
24:c2:a1:07:ba:d4:e8:60:20:cd:16:52:6b:d4:b0:
04:b2:87:1d:fc:e4:78:3c:1c:5a:f7:8f:a0:23:30:
e2:c7:18:dc:17:19:15:70:77:8c:67:0e:b0:04:92:
0f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:33:40:26:DD:A9:50:01:AA:3C:FF:B6:16:ED:52:5C:34:39:33:AA
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/sjNAJt2pUAGqPP-2Fu1SXDQ5M6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.151.0/24
45.92.28.0/23
Signature Algorithm: sha256WithRSAEncryption
24:51:f0:1c:c5:6e:ba:52:eb:bf:00:1c:08:64:bc:6f:58:30:
68:6d:3e:d5:a9:ac:64:6a:4d:bd:cd:de:f1:85:d8:0d:66:c8:
c3:6f:11:a0:07:1a:c0:c3:80:b2:07:41:f4:ed:f4:ef:c4:ca:
c6:26:0f:9e:76:8a:3d:a9:a3:96:a0:b1:f4:70:5c:65:f4:f2:
a6:77:5b:24:0f:2c:7e:c9:2f:06:ba:90:d9:e0:2e:0a:0d:91:
06:4f:f6:b6:70:3a:d2:51:a4:08:40:6b:14:ac:98:28:e7:2f:
35:7a:28:19:8a:7a:00:01:91:dc:1e:90:c2:25:36:8f:fe:7c:
67:c6:cf:66:91:84:3a:b1:c5:77:05:95:75:f1:90:bc:67:2d:
5e:a8:05:70:ce:b3:c1:c5:ef:74:4d:a0:fb:30:eb:e8:a8:95:
d4:0c:a4:72:75:be:85:7a:70:c0:81:93:89:5c:a8:0a:3f:e5:
ee:ec:14:6c:b4:00:2e:d7:2f:a7:9d:94:e6:15:b7:68:20:5e:
3d:63:d2:3e:da:bb:91:1e:68:e9:a0:41:85:52:c2:87:91:10:
c6:d1:b1:63:78:d9:be:27:f8:42:cb:19:7f:b3:40:2e:fe:de:
b3:3f:55:58:d4:65:6b:12:90:f2:de:2e:61:11:a6:f2:4c:4b:
d4:3b:59:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-fra.rpki-client.org