Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/ERzf5C77tuXWvAi0lfIUryI-5uw.roa
File: ERzf5C77tuXWvAi0lfIUryI-5uw.roa (raw, json)
Hash identifier: rfEiWeAv7dZV4xYfBCHgxDU1ihznezdBp9i0NKX3apQ=
Subject key identifier: 11:1C:DF:E4:2E:FB:B6:E5:D6:BC:08:B4:95:F2:14:AF:22:3E:E6:EC
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 019352C740E763F5C70D2631A0FE5971236A
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/ERzf5C77tuXWvAi0lfIUryI-5uw.roa
Signing time: Fri 22 Nov 2024 07:30:10 +0000
ROA not before: Fri 22 Nov 2024 07:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.146.202.0/23 maxlen: 24
45.146.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Nov 2024 11:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:c7:40:e7:63:f5:c7:0d:26:31:a0:fe:59:71:23:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Nov 22 07:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=111cdfe42efbb6e5d6bc08b495f214af223ee6ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e0:d7:41:e4:55:26:ea:eb:56:74:f0:a5:f1:
fc:fd:9b:0d:f8:c8:c6:56:15:b1:f8:bc:d8:7a:2b:
31:96:c2:63:ed:cb:ad:f2:35:74:c4:84:ee:bc:ba:
13:80:24:43:41:16:d5:50:bd:1e:b6:1a:6f:bf:99:
24:47:cb:1a:74:2d:4f:7e:9e:6f:ed:d6:a3:27:3c:
45:47:fe:8a:93:ed:f8:c2:20:24:c0:ab:a3:33:f7:
11:e6:51:65:02:d5:4c:65:45:5d:1c:45:06:fc:7a:
31:fc:38:da:f3:70:36:09:39:8c:d6:17:d7:59:c4:
38:84:ad:12:ab:52:19:9f:4a:5a:8f:87:a9:73:97:
44:05:7e:ec:60:ce:17:e3:08:b1:53:52:77:aa:46:
23:fc:9c:e0:af:36:ce:f6:3c:a9:0b:27:7b:13:7a:
df:05:62:6b:25:1e:ab:7a:48:4e:ea:86:d3:99:ad:
21:24:18:53:2f:0d:4b:5c:f5:9c:be:3f:59:f7:b8:
03:d0:86:dd:6e:dd:29:af:40:b1:92:7a:41:2c:73:
5a:58:68:65:e3:b2:2d:f7:e4:7a:c7:c7:26:5b:48:
2e:22:15:5e:34:57:b2:61:83:ab:67:d7:46:dd:d2:
f4:26:f2:8c:fd:2c:be:5f:16:d4:18:91:39:81:68:
a2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1C:DF:E4:2E:FB:B6:E5:D6:BC:08:B4:95:F2:14:AF:22:3E:E6:EC
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/ERzf5C77tuXWvAi0lfIUryI-5uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.202.0/23
Signature Algorithm: sha256WithRSAEncryption
45:b5:97:7e:ff:77:61:cd:c3:fe:ac:e6:a6:31:03:12:a0:9c:
6c:95:6f:9f:25:6d:ef:8c:f9:59:07:c7:6b:99:93:f4:3f:a4:
ff:cc:59:0a:78:3e:fe:dd:ea:28:f9:33:34:f2:2e:f7:a5:66:
7a:cb:e7:b6:fa:b8:f5:cf:d2:14:32:38:8b:19:36:e5:e8:80:
74:9d:e8:65:4a:a9:05:82:39:39:57:dc:ee:bb:66:52:9e:92:
07:fd:a7:b8:ab:0c:4c:a6:87:85:8b:9c:7d:b4:c8:17:74:a5:
99:63:11:35:f0:c6:e0:78:5c:1e:40:f3:33:c0:01:04:4b:86:
c1:38:23:42:3d:d3:d5:61:df:d5:8b:a1:9a:5c:b2:6a:70:75:
5f:86:bf:e3:7b:df:36:4f:be:c0:e8:7c:34:b9:ab:63:18:07:
58:06:f7:eb:f3:31:05:4a:0f:f2:30:80:bb:20:61:e8:b1:dc:
1e:23:61:c7:bb:62:8d:d9:4c:58:3c:69:a4:e8:a3:c3:18:4f:
f9:e0:87:91:85:12:f6:bd:bb:16:e7:49:7b:e1:7f:27:75:18:
45:40:58:4a:17:e9:02:f5:9d:a1:2c:c5:47:4f:08:44:b4:b2:
ab:92:a5:b5:1d:fb:35:36:04:b8:9b:b6:55:50:77:ed:e1:ff:
d7:39:b5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:13:29 2024 by rpki-client on console-fra.rpki-client.org