Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/RUsceQ5TlMPq6JeX5aDFjRFOx9g.roa
File: RUsceQ5TlMPq6JeX5aDFjRFOx9g.roa (raw, json)
Hash identifier: gAs2KFcEWe06+9yMKMFnPzTQ7wEIBdpNa+T2T6G8T+0=
Subject key identifier: 45:4B:1C:79:0E:53:94:C3:EA:E8:97:97:E5:A0:C5:8D:11:4E:C7:D8
Certificate issuer: /CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Certificate serial: 018AAED2E014A0075D486AAB863E2E9F65D4
Authority key identifier: 7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/RUsceQ5TlMPq6JeX5aDFjRFOx9g.roa
Signing time: Tue 19 Sep 2023 19:02:50 +0000
ROA not before: Tue 19 Sep 2023 19:02:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 45.158.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Sep 2023 07:34:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ae:d2:e0:14:a0:07:5d:48:6a:ab:86:3e:2e:9f:65:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Validity
Not Before: Sep 19 19:02:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=454b1c790e5394c3eae89797e5a0c58d114ec7d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ad:6f:ae:a3:32:2f:ff:32:30:fe:7d:71:5f:
3f:e4:4b:58:96:84:e1:09:c6:5e:1f:36:65:ce:de:
cc:c7:32:42:d5:5f:2f:7e:82:4c:2b:8b:b5:01:42:
26:b1:b1:4d:02:4b:3e:87:0c:12:bc:5f:60:79:0b:
c7:ec:91:cf:ce:8a:bc:20:fa:3a:c1:07:10:8b:8f:
5d:c1:dd:c0:79:c6:81:7b:45:c3:e1:4b:62:46:89:
b5:a0:0c:75:b3:06:8d:50:7a:e3:90:08:13:81:ae:
83:9c:80:fc:94:fd:26:aa:39:eb:27:3d:5e:51:b2:
d1:c2:e8:25:21:a3:d8:9f:b8:77:37:a3:aa:b2:f3:
cb:58:21:13:ae:bf:3d:32:11:3b:5c:89:e5:1a:22:
27:c8:66:2f:48:5c:84:59:75:2f:9d:d0:8e:8b:0e:
a9:21:72:5e:e5:b3:98:fe:d9:1f:3c:a2:ee:cf:96:
f4:08:ba:63:1b:7e:72:9c:6c:cc:89:c1:ba:85:7d:
7f:65:c5:40:36:c6:d5:4a:ce:6f:7f:7d:0d:fa:52:
fe:33:ed:76:72:b5:01:54:b7:a6:62:b6:b8:c8:df:
9c:a3:99:6d:8c:a6:12:3c:ca:1c:7a:32:e1:60:09:
0a:30:6f:59:7b:c0:6b:a2:5a:42:57:c8:19:53:94:
36:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4B:1C:79:0E:53:94:C3:EA:E8:97:97:E5:A0:C5:8D:11:4E:C7:D8
X509v3 Authority Key Identifier:
keyid:7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/RUsceQ5TlMPq6JeX5aDFjRFOx9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.127.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:9e:e8:c1:42:0f:59:de:c1:7c:5b:a8:60:29:95:3b:88:7c:
9b:e9:2d:c1:eb:db:8e:1d:81:80:33:87:00:6e:15:d4:a9:f9:
84:e3:45:02:e9:66:3f:02:45:31:45:ff:fc:67:00:05:12:8a:
79:76:bf:dc:dc:ab:a5:5d:85:8e:75:fc:83:48:65:9b:6c:58:
e9:1a:a5:39:18:68:8e:d6:4b:25:31:d7:aa:49:49:f8:cc:b0:
76:5e:32:59:5e:8e:8f:59:35:a2:d2:a1:cb:2f:8a:d6:df:0f:
d1:c3:0e:ce:0d:9b:3e:b4:4a:d6:3e:29:24:8e:ee:f6:c3:30:
e1:da:63:95:c4:19:6f:7f:73:d3:0d:d0:75:de:0f:79:9e:23:
82:44:c9:f1:a3:cc:00:f5:ca:e6:83:17:2f:93:ff:18:00:30:
93:26:9e:95:5c:ab:de:58:57:50:68:48:36:9c:4f:1b:79:89:
0e:7f:e9:da:bc:25:e4:1c:63:ff:9d:56:fc:56:cc:1e:2b:c2:
79:23:d0:e9:c7:ed:7c:e5:10:6a:43:7c:e8:4b:62:a8:a5:98:
ce:2c:ae:cd:85:93:45:ac:5c:c4:6d:bb:06:a8:d4:6b:db:9f:
04:3e:2f:c9:5e:78:80:14:b7:3b:b5:85:45:c7:50:54:b5:e7:
e2:01:8a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:45 2024 by rpki-client on console-fra.rpki-client.org