Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/trEyUwiwYjeh_Q69vtlYOdyvOVU.roa
File: trEyUwiwYjeh_Q69vtlYOdyvOVU.roa (raw, json)
Hash identifier: dE1otwDvkpmlSGbTPx44L5tqWH/gNdyJrI3kAD6v5JM=
Subject key identifier: B6:B1:32:53:08:B0:62:37:A1:FD:0E:BD:BE:D9:58:39:DC:AF:39:55
Certificate issuer: /CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Certificate serial: 0191C77422980BE021829925603D9565477C
Authority key identifier: 7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/trEyUwiwYjeh_Q69vtlYOdyvOVU.roa
Signing time: Fri 06 Sep 2024 13:09:22 +0000
ROA not before: Fri 06 Sep 2024 13:09:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.158.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Sep 2024 21:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c7:74:22:98:0b:e0:21:82:99:25:60:3d:95:65:47:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Validity
Not Before: Sep 6 13:09:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6b1325308b06237a1fd0ebdbed95839dcaf3955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3a:b6:d5:a5:a4:a8:d3:07:96:0c:31:f5:34:
e6:3c:16:34:40:b7:f9:34:85:57:25:11:8a:72:64:
99:94:6d:5d:e9:aa:5d:24:e7:80:6d:47:c4:bc:37:
0c:a0:df:8d:57:90:2e:46:e8:61:1e:e6:3e:2a:ff:
d9:64:68:63:93:ec:ed:e7:ae:d9:0a:50:ec:50:af:
cb:3d:34:21:15:c3:19:de:09:14:9b:cd:40:88:0b:
df:da:5e:b2:9c:30:a8:59:c4:14:5c:5e:01:5b:42:
a7:f6:46:0e:82:03:e9:d1:d9:5d:ce:40:f8:35:d0:
f8:1d:ef:c6:0b:e4:1a:29:18:5f:49:54:d7:c9:bb:
10:d6:97:a8:f6:c6:70:fd:db:82:58:a2:a8:83:76:
fc:45:0c:0c:f9:58:6a:c4:51:64:00:f0:f3:d3:bc:
49:42:71:bf:c9:23:ed:5f:58:d5:d2:c1:e3:d0:5e:
3f:8c:05:b7:7c:93:73:6c:78:a9:46:2a:eb:38:39:
8b:e0:f5:0a:24:5a:80:2c:2f:cb:a4:1a:3c:85:24:
0b:bd:1d:a0:a7:4b:2f:8a:89:6e:87:54:c6:05:fc:
9c:8e:51:b9:e4:b1:b7:8f:8e:1a:70:ee:7f:bd:54:
e2:70:9c:ea:fd:9e:88:39:c1:2c:75:f0:1f:aa:c0:
73:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B1:32:53:08:B0:62:37:A1:FD:0E:BD:BE:D9:58:39:DC:AF:39:55
X509v3 Authority Key Identifier:
keyid:7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/trEyUwiwYjeh_Q69vtlYOdyvOVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.125.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:6a:7f:5e:7f:32:49:ea:b7:c9:31:01:43:87:5b:0f:37:28:
17:0b:49:02:48:e3:9b:8e:aa:4b:72:4c:df:fe:1a:7b:43:45:
7f:d4:29:d5:be:38:a0:22:49:3f:82:59:73:22:67:85:4e:45:
d4:3e:64:3e:04:8d:fc:5e:c8:aa:4c:a9:cc:10:62:c6:b4:1c:
09:86:d8:61:6b:96:2f:3c:c7:b8:76:2d:33:8b:dc:17:34:85:
26:10:29:2b:c9:04:f3:0e:2f:09:80:9d:53:b5:96:b0:b0:47:
72:c2:53:e4:a2:0b:b7:e4:84:e6:00:ef:06:f8:05:ca:f2:97:
70:49:e6:e2:bf:32:26:3f:dd:0e:4b:2a:a1:0b:1e:4a:14:d2:
de:a8:48:54:84:68:43:e3:6b:1a:00:1c:8b:da:15:52:7d:33:
68:5a:eb:b3:9d:69:b6:39:8a:7e:90:f7:78:41:bb:05:c8:5d:
96:15:1b:be:91:1f:fe:f6:64:40:1f:0f:04:8e:a9:83:45:2a:
77:db:40:ef:14:81:d1:81:00:26:c2:fa:60:f0:a3:b0:17:62:
d5:fc:d0:f7:c2:f4:2f:42:b6:41:ac:43:93:09:30:8f:96:2b:
dc:c5:53:1f:d0:1a:35:86:e0:ff:a6:ac:5f:83:40:8d:6c:f2:
c4:1a:55:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 23:14:32 2024 by rpki-client on console-fra.rpki-client.org