Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/SsjLj1H3xeGmcsUOHwpDNMQ3jXQ.roa
File: SsjLj1H3xeGmcsUOHwpDNMQ3jXQ.roa (raw, json)
Hash identifier: YO/zB4z3/EfQljdoBuLASEfRT0nLmMATnHOdCb9O6EE=
Subject key identifier: 4A:C8:CB:8F:51:F7:C5:E1:A6:72:C5:0E:1F:0A:43:34:C4:37:8D:74
Certificate issuer: /CN=a4c7bfe415604f6136ceaa216356495bf6d5cc41
Certificate serial: 018570306370B9F3271383ABE99BC49C6A03
Authority key identifier: A4:C7:BF:E4:15:60:4F:61:36:CE:AA:21:63:56:49:5B:F6:D5:CC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMe_5BVgT2E2zqohY1ZJW_bVzEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/SsjLj1H3xeGmcsUOHwpDNMQ3jXQ.roa
Signing time: Mon 02 Jan 2023 01:54:57 +0000
ROA not before: Mon 02 Jan 2023 01:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208230
IP address blocks: 45.152.111.0/24 maxlen: 24
45.152.110.0/24 maxlen: 24
45.152.109.0/24 maxlen: 24
45.152.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:63:70:b9:f3:27:13:83:ab:e9:9b:c4:9c:6a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4c7bfe415604f6136ceaa216356495bf6d5cc41
Validity
Not Before: Jan 2 01:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ac8cb8f51f7c5e1a672c50e1f0a4334c4378d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:43:bf:25:05:a5:e1:de:4c:0c:16:ef:b0:19:
50:46:95:da:70:b1:fe:5b:b3:9b:b0:bb:58:60:53:
3f:a2:86:de:5f:46:3f:e5:62:bd:ba:46:8e:0e:44:
65:2e:16:c8:e5:bc:a3:aa:7f:0a:db:af:42:2e:d8:
ef:ed:f9:35:87:53:92:d1:19:4d:a1:9d:da:a0:e5:
b4:2b:4b:62:86:8f:8e:47:3f:b7:f9:3d:3e:b7:2e:
7e:16:d7:55:e1:b1:cf:80:4b:04:b7:18:a5:fe:3b:
d2:56:86:b7:a7:0a:8a:24:94:9e:01:29:ce:97:56:
98:81:be:b0:51:15:2f:7a:e6:1c:56:e9:75:7d:85:
d5:0c:b6:8f:be:61:d5:88:a2:39:00:19:a7:a5:b6:
38:68:34:40:c5:32:e6:a8:46:08:0b:68:a7:90:35:
28:9d:c1:fe:72:48:d6:30:6a:e5:92:10:2f:11:d0:
cb:5f:a1:b9:b4:43:63:c5:12:49:81:66:a6:00:ad:
62:74:fa:87:16:2d:c6:4a:d6:01:29:f8:22:8d:c5:
b4:ed:93:0f:9d:20:07:7e:54:de:ef:53:da:9d:d9:
2a:7a:a7:1e:8f:49:f8:3d:c9:c5:ae:b7:3a:03:c7:
bd:dd:e7:b9:65:f3:65:09:ff:7d:7f:d2:ae:c9:ea:
fb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C8:CB:8F:51:F7:C5:E1:A6:72:C5:0E:1F:0A:43:34:C4:37:8D:74
X509v3 Authority Key Identifier:
keyid:A4:C7:BF:E4:15:60:4F:61:36:CE:AA:21:63:56:49:5B:F6:D5:CC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMe_5BVgT2E2zqohY1ZJW_bVzEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/SsjLj1H3xeGmcsUOHwpDNMQ3jXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.108.0/22
Signature Algorithm: sha256WithRSAEncryption
20:17:55:5b:96:92:48:11:76:1f:6e:2b:d2:fb:da:af:dc:5e:
4f:27:d7:b3:7b:a8:d3:a6:a9:c3:fa:b6:9a:5e:6d:9b:34:78:
67:1c:01:7b:c7:35:d3:b0:24:41:7b:47:f2:49:de:f3:7c:79:
de:c1:e1:c1:27:09:f3:4e:a8:fe:ba:5d:12:0a:da:33:c1:a2:
dc:1d:d0:31:e6:55:5a:bf:bd:98:bc:0b:4f:29:ba:70:fc:41:
03:b3:28:aa:71:6d:d4:81:37:66:01:67:75:43:b3:f6:95:00:
2e:84:06:ba:6d:c8:7f:2a:b1:4f:a1:55:ba:be:19:e2:5f:3e:
23:3c:22:21:d7:00:d0:fb:8d:a2:2d:45:12:f3:59:af:9c:a4:
b5:af:a3:b5:e0:8e:d8:c4:e2:8b:26:55:60:b6:5e:94:30:fd:
c7:b6:2f:60:a7:6a:f9:56:ac:2e:05:76:92:58:3c:a7:0c:c6:
5d:d9:83:89:16:b3:60:6a:9f:fa:50:a2:dc:53:68:b1:20:19:
17:70:cd:c3:09:4c:15:88:0b:6a:22:fb:f1:d2:5d:b3:f9:23:
c9:cb:ca:f6:84:27:df:98:05:41:f0:e3:0a:66:06:fe:92:00:
29:51:bd:dc:32:51:46:db:e0:38:ff:67:b1:cb:25:b4:fd:62:
5e:80:99:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:15 2024 by rpki-client on console-fra.rpki-client.org