Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/5tPsMHLDcNVGNKH_jIuUxG2ojb4.roa
File: 5tPsMHLDcNVGNKH_jIuUxG2ojb4.roa (raw, json)
Hash identifier: ORHWqX2TxZS1elrSgf3tHBk8f17JerMe0+ncgpLxN+0=
Subject key identifier: E6:D3:EC:30:72:C3:70:D5:46:34:A1:FF:8C:8B:94:C4:6D:A8:8D:BE
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 01929E6F26141218F6181A402CF1E2536D57
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/5tPsMHLDcNVGNKH_jIuUxG2ojb4.roa
Signing time: Fri 18 Oct 2024 07:02:17 +0000
ROA not before: Fri 18 Oct 2024 07:02:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.146.202.0/23 maxlen: 24
45.146.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Oct 2024 06:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9e:6f:26:14:12:18:f6:18:1a:40:2c:f1:e2:53:6d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Oct 18 07:02:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6d3ec3072c370d54634a1ff8c8b94c46da88dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6a:95:71:a8:9c:28:ed:bd:9a:27:8b:8a:7e:
b6:20:61:23:79:54:a2:99:cc:f7:d9:a5:95:fe:9e:
ed:81:dd:4b:ad:2d:a4:f5:1f:52:3e:d1:92:90:ae:
2c:c6:eb:2a:f1:6b:dd:91:0e:02:b0:4f:80:7a:81:
34:26:4c:c6:26:c8:ae:93:e1:ce:10:59:d2:34:82:
39:1e:46:09:ca:e3:c7:a3:70:69:8a:50:20:2d:81:
4c:bd:9c:21:cb:93:a5:e4:02:63:8a:0d:58:9f:71:
39:1a:29:aa:70:c7:22:14:3b:95:13:09:bb:d4:7d:
83:5e:87:2d:1b:fe:4c:15:28:28:2c:75:01:1d:f7:
81:c8:74:b2:b7:ac:a7:fb:26:a4:f5:5e:a4:76:3b:
3f:37:a9:75:28:84:ea:8c:2c:0d:bb:63:f8:ea:a7:
9c:a4:6f:04:24:74:7c:fa:f6:27:6a:d4:9b:7c:79:
7f:ab:d0:d1:bb:50:20:47:35:6c:32:8d:b4:ad:f9:
db:8e:ce:38:cc:57:dd:49:c5:a0:a3:33:a4:d5:f5:
9d:a8:b3:fb:b6:36:36:e4:30:60:02:0b:92:43:99:
9e:d2:fd:c1:14:c2:b8:83:25:9e:c7:64:ae:a0:67:
f2:27:23:4b:7f:a5:21:e2:fd:80:f3:70:23:1e:05:
bb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D3:EC:30:72:C3:70:D5:46:34:A1:FF:8C:8B:94:C4:6D:A8:8D:BE
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/5tPsMHLDcNVGNKH_jIuUxG2ojb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.202.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:90:bf:67:a8:78:76:88:49:11:1e:56:c5:77:55:a6:9e:1b:
d6:2d:3b:24:de:4b:e1:22:0e:b1:c6:cd:68:8c:fd:ae:ae:b5:
87:cf:cb:7f:a5:4c:6a:62:68:a2:db:32:c6:c3:4e:b6:b3:dd:
19:6e:10:92:b9:3c:39:1a:f3:56:f0:f5:90:4e:42:bb:34:18:
8a:d7:f1:91:2b:1e:f6:08:6d:4d:a8:1e:f9:77:0e:89:b2:bb:
da:34:22:18:29:e5:1e:40:2f:0a:68:11:3e:6f:32:0a:54:f3:
fc:ea:cc:d0:12:e0:d5:79:4c:02:1d:7d:16:e5:2c:89:69:3d:
88:91:b5:a7:dd:c3:12:ae:71:2b:1d:1a:c6:99:3c:8c:13:12:
62:b3:d4:ac:ec:a3:35:ca:4f:45:3f:41:9e:e6:23:55:b4:f5:
16:03:cd:98:54:c0:2a:3b:b6:6a:bd:3f:a1:35:22:9f:bc:d4:
9a:ee:fa:94:e7:d0:20:4c:11:ad:66:a0:a9:fc:ed:3f:e5:e9:
6b:52:05:11:8d:ba:d5:42:11:ed:a1:2d:23:e3:5e:8c:6f:3e:
28:b5:00:ba:e6:67:cb:c1:24:76:e3:60:11:ca:5c:ea:17:3e:
69:76:09:72:54:1c:2e:0f:fe:47:cc:73:83:30:fd:05:da:29:
59:28:e2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 28 09:40:51 2024 by rpki-client on console-ams.rpki-client.org