Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/VB7u1pgWXL193h1Y63wQS71OhP8.roa
File: VB7u1pgWXL193h1Y63wQS71OhP8.roa (raw, json)
Hash identifier: 0GmkDtEQT7iwc/U6Xnw2CdbPf/H5hrjg+hSkzbAd+UA=
Subject key identifier: 54:1E:EE:D6:98:16:5C:BD:7D:DE:1D:58:EB:7C:10:4B:BD:4E:84:FF
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 018D3698AC03BA912EAE1E08DAB68AD49646
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/VB7u1pgWXL193h1Y63wQS71OhP8.roa
Signing time: Tue 23 Jan 2024 13:53:11 +0000
ROA not before: Tue 23 Jan 2024 13:53:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61135
IP address blocks: 45.146.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 11:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:36:98:ac:03:ba:91:2e:ae:1e:08:da:b6:8a:d4:96:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Jan 23 13:53:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=541eeed698165cbd7dde1d58eb7c104bbd4e84ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fe:5c:3f:c0:8d:5c:a0:9e:cb:29:d8:92:42:
8b:de:1d:c7:a1:6e:e4:24:e4:8e:c5:42:b6:64:72:
f3:a8:02:95:8f:c1:9f:9f:a2:59:ee:14:2a:09:cb:
bb:df:b7:33:96:03:fe:b0:6e:b5:13:a2:9b:5e:ba:
4d:bd:f3:e8:74:1b:5b:ed:98:0a:f6:af:f5:22:a2:
d7:74:9d:7d:6c:ca:fc:a9:7a:7b:b1:99:b0:c8:fe:
93:ba:f1:b5:35:e1:b9:51:e7:06:4b:bc:45:8e:2a:
79:be:d2:4a:31:b7:bb:3d:a3:90:4a:c7:a9:4d:ab:
a6:8d:ea:bd:70:d7:59:f3:d9:14:e6:10:46:fb:39:
ef:45:24:8c:d7:ed:b4:f0:b4:04:fd:93:e1:25:5a:
47:fe:cc:75:6b:13:f6:17:6c:90:7d:bc:0e:58:fb:
35:5a:01:ec:8b:07:13:ad:99:82:3f:cc:6e:69:71:
15:70:60:2f:9b:43:30:a8:91:d8:df:7d:04:19:5f:
6e:da:cd:c1:7a:08:bb:a7:2c:bf:ef:e8:1d:c4:c3:
1d:d7:b9:81:2c:88:67:92:5b:a7:9f:62:f2:31:6b:
35:c9:13:28:aa:32:ba:20:08:b7:06:21:7a:45:b7:
47:70:85:a4:f1:2e:d7:8c:8a:4e:c7:27:c0:c8:53:
a6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1E:EE:D6:98:16:5C:BD:7D:DE:1D:58:EB:7C:10:4B:BD:4E:84:FF
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/VB7u1pgWXL193h1Y63wQS71OhP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.203.0/24
Signature Algorithm: sha256WithRSAEncryption
be:b3:a1:57:0e:aa:80:3a:66:ab:6f:20:3e:a0:cb:4d:cf:b0:
6d:c7:04:2f:14:b3:d5:0e:1b:00:11:a8:e4:2a:d6:70:87:bf:
15:ed:68:84:14:c2:6f:22:c1:92:bc:24:ff:d1:9f:83:34:74:
fe:7e:1d:7e:7e:7f:1c:93:9e:7f:3d:78:2b:98:8c:85:a3:1d:
d3:1a:e6:cc:fd:39:bd:a4:c1:e2:40:9e:04:8d:74:7a:d9:36:
dc:e2:ec:2f:f7:88:7d:cb:14:8d:de:8d:f6:8f:82:87:3e:37:
31:25:01:85:1c:a4:51:67:ff:a7:a0:cd:4d:76:f3:5b:25:36:
4c:ef:c3:81:3f:43:f8:15:00:3e:10:58:90:5d:aa:f4:16:7d:
a0:46:4d:29:c7:12:34:f6:06:5f:e9:a9:ea:b8:07:45:74:0d:
ae:00:06:6b:dd:d6:3e:2f:8f:18:cc:f6:bf:0d:61:80:b8:a0:
9e:e9:e6:3e:cc:96:45:c9:a1:96:9f:36:69:87:cc:93:30:21:
3e:75:d6:eb:06:11:a1:ee:44:9b:96:c0:57:21:80:ef:d2:21:
dc:aa:ac:e1:c3:dd:d3:c9:8d:c2:2b:09:3c:c4:34:2c:3b:40:
a6:61:fe:26:58:8e:cd:19:e7:07:90:23:c5:4b:9a:33:05:b4:
fb:44:16:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 22 15:04:25 2024 by rpki-client on console-fra.rpki-client.org