Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/yKrZrjoWC3bi3F_3wxExwX22iKk.roa
File: yKrZrjoWC3bi3F_3wxExwX22iKk.roa (raw, json)
Hash identifier: MNzdpr+ORipks9aDXFA3lxSzydZ4/h8lXQ3kuoHQf28=
Subject key identifier: C8:AA:D9:AE:3A:16:0B:76:E2:DC:5F:F7:C3:11:31:C1:7D:B6:88:A9
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 018572BA757744DAD9C0F13C47A74FE30C55
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/yKrZrjoWC3bi3F_3wxExwX22iKk.roa
Signing time: Mon 02 Jan 2023 13:45:00 +0000
ROA not before: Mon 02 Jan 2023 13:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205591
IP address blocks: 45.152.126.0/24 maxlen: 24
45.152.127.0/24 maxlen: 24
2a0f:5700::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:75:77:44:da:d9:c0:f1:3c:47:a7:4f:e3:0c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 2 13:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8aad9ae3a160b76e2dc5ff7c31131c17db688a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3e:ff:d5:7d:4a:df:37:48:a6:f8:5e:5f:70:
3e:5b:3b:37:b1:d8:e3:ec:1b:98:f7:f0:5b:d9:97:
df:be:b6:98:5f:3e:b3:67:6b:9c:9d:a3:5d:c0:aa:
63:f8:83:a9:bc:53:fd:4d:d0:3c:1a:3f:8e:25:26:
73:96:2f:53:88:f5:8a:f8:55:8b:71:e0:d8:c0:3f:
30:a9:c8:9f:1a:bb:e8:d9:60:43:74:75:46:eb:0a:
15:bf:dc:23:f2:f3:08:77:95:7f:ae:d0:cc:a4:5f:
d3:41:66:01:bf:a0:5a:ad:3d:c0:5e:e5:23:02:65:
85:32:bd:fd:34:65:a2:38:7a:3c:81:60:e0:b4:6b:
0c:18:fb:98:d4:f2:0b:53:4b:15:26:74:3f:35:59:
16:ab:59:1c:1f:93:2d:a1:7d:46:ae:d7:c3:e7:96:
e5:c3:63:c2:f8:c1:db:5e:2b:76:31:18:7f:d6:2a:
6f:b5:af:d6:5a:ef:df:1a:2d:78:d3:40:be:da:e9:
57:ea:45:a9:7d:11:fb:81:77:e7:10:b0:62:c2:f4:
4a:4f:ca:b5:fd:8f:23:71:cf:44:ae:93:bf:3e:8d:
2a:6a:6c:4d:a8:ce:fb:ed:5a:74:c0:50:2f:12:ce:
86:51:f9:35:58:8c:d3:99:a9:07:39:95:2a:db:82:
a0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AA:D9:AE:3A:16:0B:76:E2:DC:5F:F7:C3:11:31:C1:7D:B6:88:A9
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/yKrZrjoWC3bi3F_3wxExwX22iKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.126.0/23
IPv6:
2a0f:5700::/32
Signature Algorithm: sha256WithRSAEncryption
1d:ca:92:92:ca:76:42:50:ce:d5:88:80:07:1f:b4:87:ac:2f:
cf:60:0c:07:28:61:45:2d:a0:95:5f:96:c9:ec:d4:01:7b:14:
b9:f1:c6:bf:c8:5a:4f:30:d0:7b:c6:b0:39:8a:31:ee:ce:ae:
64:00:07:c1:5b:2d:e2:d4:1a:e4:31:9f:2c:f8:1c:8e:d6:f2:
c2:aa:b2:1a:66:77:e9:75:f4:c0:09:40:a2:09:e0:33:90:58:
2e:3c:9d:74:92:15:56:f4:62:75:85:5b:78:1f:22:a9:16:1e:
b0:ee:b9:5d:fd:5f:90:87:56:c4:37:02:11:c8:05:1b:da:a2:
90:67:f9:74:e8:87:b5:4f:db:e0:9c:3d:84:ac:21:29:e3:ad:
04:8c:b6:5e:5e:10:3f:ba:21:dd:ba:21:6e:26:6b:ae:7e:e7:
50:1b:90:a1:3e:83:33:16:53:e6:e1:1a:f4:88:8b:8e:f3:b2:
69:a8:f8:19:2e:0b:11:bd:be:2b:fd:06:e0:c1:bb:b9:8f:64:
9f:c7:25:83:28:c3:1b:3e:fa:1f:b9:d0:2c:41:fa:10:02:75:
f1:95:c4:9c:b7:46:41:8d:48:d7:dd:1e:3e:fc:42:bb:20:ee:
75:f3:e5:17:ef:d6:ad:d3:5f:14:ad:f5:79:4a:71:b3:40:fd:
b4:fc:a3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:22 2024 by rpki-client on console-ams.rpki-client.org