Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/pDxBwtu35HCi9dsnW_MkympBF4U.roa
File: pDxBwtu35HCi9dsnW_MkympBF4U.roa (raw, json)
Hash identifier: LHw7a9bHC0bZoiOSma4UPrb777WpqrMyuowvt7VrF5c=
Subject key identifier: A4:3C:41:C2:DB:B7:E4:70:A2:F5:DB:27:5B:F3:24:CA:6A:41:17:85
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 018E2DAC388019B17248A80524CAA269374F
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/pDxBwtu35HCi9dsnW_MkympBF4U.roa
Signing time: Mon 11 Mar 2024 13:20:44 +0000
ROA not before: Mon 11 Mar 2024 13:20:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.155.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Mar 2024 09:11:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2d:ac:38:80:19:b1:72:48:a8:05:24:ca:a2:69:37:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Mar 11 13:20:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a43c41c2dbb7e470a2f5db275bf324ca6a411785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ac:7e:c3:be:32:60:1d:ef:e4:0d:09:e5:8f:
08:19:e2:3b:22:56:23:a0:8e:dc:18:ae:e4:c8:8f:
44:61:6d:7b:fe:48:d6:52:31:a0:08:62:22:71:dd:
50:0c:70:c3:54:c8:e6:d1:a6:8d:e6:c6:0e:d2:88:
37:cf:a4:3f:a3:11:ca:6b:7a:92:0e:99:a1:64:80:
f9:91:31:3b:ca:2c:cd:75:cd:61:13:5c:c3:3d:d0:
69:b2:19:fb:57:15:2f:16:4d:47:c3:6d:23:70:8d:
09:26:4a:aa:62:ab:30:02:31:28:ad:fd:3f:28:60:
4e:a6:d1:1b:29:4e:68:99:05:36:5e:0f:77:91:bc:
bc:26:09:b3:34:a2:9b:6d:a4:d7:89:4e:fa:b7:50:
aa:7e:9a:8e:92:b0:c2:f3:41:03:dd:97:ca:ae:3e:
76:de:37:b9:f6:9c:b9:fd:b9:ef:84:af:08:d2:f9:
38:65:9f:94:3d:e3:b9:db:58:d5:c9:91:64:50:79:
b3:0f:4d:8b:1d:04:d8:6b:5f:f2:3f:34:ca:a4:78:
c9:df:10:fe:e2:68:a7:48:66:c6:d1:22:2e:22:eb:
b0:76:42:b8:3e:bc:39:ff:83:b7:ca:ea:9b:37:43:
cd:03:33:39:cd:29:8e:73:ef:af:6a:5e:c8:c0:9a:
e5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:3C:41:C2:DB:B7:E4:70:A2:F5:DB:27:5B:F3:24:CA:6A:41:17:85
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/pDxBwtu35HCi9dsnW_MkympBF4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.122.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:15:88:37:f8:eb:f1:cb:c9:6b:61:7c:72:16:91:48:f5:62:
f0:2e:e8:87:03:a5:f4:dc:d6:ec:b9:59:92:46:51:f6:b8:b1:
19:7c:e1:d0:44:ce:94:11:2c:43:22:7e:43:d9:df:94:1b:8c:
94:8c:c3:6d:cf:5a:5d:4f:38:b9:a6:26:a5:c7:11:42:75:52:
e7:2b:a0:8c:b4:74:aa:50:b6:ab:14:c7:11:7a:2c:7d:32:2d:
9a:8d:e3:e1:00:54:8e:76:1e:3c:98:48:82:1e:a2:e8:8c:e1:
45:71:b3:3b:09:d7:7b:51:f0:25:00:39:37:b9:36:b0:5e:a9:
5f:f9:a5:e1:25:87:5c:af:b1:d8:12:21:40:52:1b:3a:a9:2a:
92:83:97:c2:5a:ec:9c:ca:c6:b4:d7:2b:c7:c7:d6:4e:d3:cf:
5f:ea:20:03:42:47:13:37:42:bf:f8:74:e1:7c:fc:ba:48:71:
68:f4:09:91:d0:88:97:78:12:b6:27:6b:b7:b8:40:7b:04:41:
43:0b:a4:38:d5:6e:aa:36:4d:e6:5d:72:a6:6e:64:96:6b:03:
f1:81:cb:25:2f:1f:7e:14:e3:a0:e3:a9:8b:cd:25:b2:ca:78:
b3:c4:7b:af:90:d7:69:b6:eb:7e:2f:71:a9:fa:35:dc:43:b7:
bc:67:65:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:36 2024 by rpki-client on console-ams.rpki-client.org