Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/4Z0UvdqGxfNKJXZA4Qt2McgSjno.roa
File: 4Z0UvdqGxfNKJXZA4Qt2McgSjno.roa (raw, json)
Hash identifier: HyAHIJqyT1Wx4FujribgMj0jKKOfoNDMzeTwU0zUGB8=
Subject key identifier: E1:9D:14:BD:DA:86:C5:F3:4A:25:76:40:E1:0B:76:31:C8:12:8E:7A
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 018E31EE9D7A371C7B6121E6A6B80BCE1F7E
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/4Z0UvdqGxfNKJXZA4Qt2McgSjno.roa
Signing time: Tue 12 Mar 2024 09:11:45 +0000
ROA not before: Tue 12 Mar 2024 09:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 45.155.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Apr 2024 05:20:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:31:ee:9d:7a:37:1c:7b:61:21:e6:a6:b8:0b:ce:1f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Mar 12 09:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e19d14bdda86c5f34a257640e10b7631c8128e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:60:37:09:84:cd:d5:8d:21:22:b6:cc:de:b8:
ad:c5:d6:16:f1:b1:a4:fe:42:62:4a:40:1b:c6:91:
05:c8:fa:3a:f7:97:69:b6:51:ec:fb:9d:15:4f:ca:
b1:af:b7:ff:94:a6:29:03:67:ce:64:16:6e:af:56:
62:41:38:5f:bc:52:63:51:b3:6a:b6:d9:12:0f:42:
65:83:13:76:ee:49:67:35:a3:1f:2e:8c:a0:07:7b:
93:fc:07:a2:20:1f:17:e9:df:12:ac:d6:54:67:54:
38:84:9d:c8:78:87:c9:0a:7e:78:7e:97:e2:6c:af:
d9:8a:58:6a:da:5d:b8:dd:be:39:e1:63:0d:40:6b:
70:b8:32:26:46:07:37:9b:59:61:04:81:5e:4f:16:
1a:f6:8e:18:a4:79:07:27:5c:9b:c3:d5:3f:96:57:
c7:8f:68:6c:b1:fa:05:12:cb:db:7e:86:f5:96:61:
27:6a:91:75:49:c8:ed:49:fe:69:88:78:7f:22:66:
c2:19:e8:6b:85:6e:ea:7e:a8:8a:0f:27:8d:04:e5:
22:a9:3b:fe:dc:9d:73:53:ef:21:9f:f5:81:35:60:
0a:c6:53:5e:61:23:a6:e1:04:9b:88:a5:44:77:06:
f5:f7:e4:f7:b7:5a:7b:5e:7a:7f:8e:60:8c:0e:33:
3f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9D:14:BD:DA:86:C5:F3:4A:25:76:40:E1:0B:76:31:C8:12:8E:7A
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/4Z0UvdqGxfNKJXZA4Qt2McgSjno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.122.0/24
Signature Algorithm: sha256WithRSAEncryption
30:39:b5:c1:d0:78:c0:54:87:bb:6b:41:d3:f0:73:7e:ff:57:
75:99:de:2f:56:63:86:45:b8:4e:8f:9a:4e:d8:b2:bd:f2:ae:
52:44:cb:36:6e:27:e9:73:4b:1e:86:10:9a:29:4e:d7:be:60:
52:a2:2a:43:cb:4a:ad:ce:00:29:d8:78:68:32:4a:59:74:a1:
18:9c:c7:a6:fc:42:2c:a0:0c:f0:62:6b:5a:51:9b:36:f0:3b:
be:c9:d9:d1:b4:c5:1b:f5:7c:1a:6a:56:52:a6:ef:88:dd:50:
eb:cb:50:9a:d7:16:1f:56:ab:3f:42:36:ed:be:ce:0a:1f:01:
27:e5:e9:fb:21:09:c3:0d:88:b4:82:f9:09:89:bb:b5:76:9f:
c6:5a:0e:bb:db:a0:fe:9e:75:af:5b:37:41:c1:ca:56:58:e6:
24:bc:c4:ee:fd:03:be:15:ae:cc:1e:ac:26:b1:f1:9d:d6:17:
22:2e:a8:1e:11:a8:fb:4f:08:46:b8:a5:75:91:97:9e:63:0e:
49:f0:22:c6:f1:aa:3c:4c:aa:4c:cc:1b:83:c4:47:1b:47:a2:
03:f0:b4:09:cd:27:ca:3b:f8:66:c1:9a:88:4d:56:b9:07:a4:
9b:ae:4b:6d:8d:47:d3:45:18:e0:9a:c9:bf:2d:68:9f:6d:58:
80:dd:47:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:25 2024 by rpki-client on console-fra.rpki-client.org