Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/bOgEUeVKZFdpRHG8-Ec8Ui6KL9M.roa
File: bOgEUeVKZFdpRHG8-Ec8Ui6KL9M.roa (raw, json)
Hash identifier: ICogyHX50aAT0146GU3j+8BsZSwy6hWACS3Bny/Ahx8=
Subject key identifier: 6C:E8:04:51:E5:4A:64:57:69:44:71:BC:F8:47:3C:52:2E:8A:2F:D3
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 01856CAF3DEE3E16618DCF55252AF6FB90BC
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/bOgEUeVKZFdpRHG8-Ec8Ui6KL9M.roa
Signing time: Sun 01 Jan 2023 09:35:01 +0000
ROA not before: Sun 01 Jan 2023 09:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42549
IP address blocks: 45.82.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:3d:ee:3e:16:61:8d:cf:55:25:2a:f6:fb:90:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Jan 1 09:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ce80451e54a6457694471bcf8473c522e8a2fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:39:b8:c1:4e:be:64:e6:fe:16:69:2d:2b:0d:
7c:9a:33:ab:8c:ee:de:5d:e3:31:e3:6a:79:d8:6d:
c7:bd:a2:51:23:39:d0:b8:18:a9:35:aa:f1:b1:00:
cb:a4:cf:ef:a9:a8:84:49:48:32:1b:bb:12:ce:a6:
d3:73:4b:62:bd:a1:db:16:84:e8:fc:97:c8:e6:8f:
e2:14:b1:ae:4c:97:d9:49:51:43:04:01:81:95:2d:
3e:12:bf:d9:5f:ab:62:78:7c:af:1e:35:71:48:94:
d2:9d:43:db:49:85:b1:71:6d:c7:aa:3a:70:23:4f:
5f:de:28:68:9a:b4:94:74:b0:a2:5b:12:40:97:91:
4d:2e:e8:53:b2:cd:4b:1c:2f:08:40:a4:39:51:15:
df:8b:13:bf:5c:be:f8:18:1f:6b:dd:b0:67:e2:0f:
2a:c9:b3:1a:64:fa:e1:4c:c1:17:f1:15:e5:98:87:
d8:db:bf:c3:c1:e2:04:1e:4e:f8:9f:ff:e4:9f:77:
7c:82:4b:04:36:3b:90:ba:c7:82:4a:80:90:b8:03:
17:da:88:75:0f:63:8c:f8:48:85:b4:bc:47:3f:ae:
75:63:82:30:34:69:d3:31:62:26:7e:a5:ac:9d:13:
a8:6c:3e:2f:0e:ff:7f:f7:d7:76:c1:3f:eb:47:ec:
6e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E8:04:51:E5:4A:64:57:69:44:71:BC:F8:47:3C:52:2E:8A:2F:D3
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/bOgEUeVKZFdpRHG8-Ec8Ui6KL9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.34.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:b2:8c:3b:7b:72:af:98:5a:54:0d:6b:a8:98:04:10:98:98:
fe:f7:5a:e6:ed:9e:1a:e7:4e:c5:d2:8e:bc:e4:b8:cb:0f:49:
85:0f:51:3a:ab:82:14:a7:4d:db:de:52:4f:b0:3b:37:a4:66:
f5:5a:a5:74:0b:d5:10:bf:36:87:3c:39:fa:0e:90:3d:68:3f:
c5:c3:3b:13:78:48:98:2a:fd:62:b0:a2:e8:b2:2c:77:16:54:
94:b1:3b:b8:6a:ab:bd:c5:80:39:3e:48:ce:72:43:d1:6c:8a:
5d:ef:2b:0b:eb:45:ee:76:08:5c:ec:2d:b9:a7:2c:a2:8d:7b:
c7:6d:06:c8:7e:65:d7:d5:cb:8c:57:a3:e9:90:c9:8f:24:48:
90:98:0a:21:a2:2f:31:56:0e:23:b4:71:30:dd:7a:a1:62:65:
ba:7e:e8:07:08:07:ea:d9:d2:21:d2:ec:78:fb:68:a8:05:56:
f9:a6:ed:60:8d:62:4a:d5:e1:93:97:13:60:8c:2d:67:f1:34:
bd:a3:0e:35:12:67:2a:11:a0:d3:93:3b:c0:80:46:e3:20:87:
a6:be:87:ef:06:c9:c4:93:f9:08:29:33:4a:21:26:78:91:23:
30:43:4e:36:3a:6e:b0:84:af:fb:24:b2:ce:34:20:80:b1:36:
dc:af:70:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:49 2024 by rpki-client on console-ams.rpki-client.org