Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/EJLK_Jmdkl1OjGQ9fPeBHx5kyKo.roa
File: EJLK_Jmdkl1OjGQ9fPeBHx5kyKo.roa (raw, json)
Hash identifier: tOkKvnDiFwQUFav0Z2chLRkhRytACJB5G5CnviI/aUI=
Subject key identifier: 10:92:CA:FC:99:9D:92:5D:4E:8C:64:3D:7C:F7:81:1F:1E:64:C8:AA
Certificate issuer: /CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Certificate serial: 0189CF589BDD7C92724AEE7DC5AA079C2CAA
Authority key identifier: A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/EJLK_Jmdkl1OjGQ9fPeBHx5kyKo.roa
Signing time: Mon 07 Aug 2023 09:33:58 +0000
ROA not before: Mon 07 Aug 2023 09:33:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142062
IP address blocks: 45.157.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cf:58:9b:dd:7c:92:72:4a:ee:7d:c5:aa:07:9c:2c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Validity
Not Before: Aug 7 09:33:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1092cafc999d925d4e8c643d7cf7811f1e64c8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8e:e0:c6:69:fa:56:63:8d:e6:45:c6:59:38:
1b:e5:69:ff:a8:05:aa:a7:a6:b5:70:b4:39:b2:e5:
5f:ab:8c:c3:d4:73:f8:e3:69:15:57:0d:19:98:a4:
ec:bd:91:20:58:1e:5f:0c:2e:c1:18:c3:ab:9a:a1:
4c:88:7d:77:11:5b:1b:13:d5:db:6a:32:e4:1f:6a:
b7:8a:91:48:cf:33:de:eb:f5:94:45:b8:93:e7:72:
37:06:f9:14:e3:23:b1:17:58:96:66:75:3f:c6:9c:
6d:de:b0:75:2e:dd:53:c0:15:51:0a:75:e5:28:21:
ac:d4:cd:f7:b3:f9:e1:98:8e:66:5a:e4:cd:c5:f1:
0d:7f:d5:c2:51:5e:77:fb:10:da:65:28:1b:eb:b2:
15:69:53:09:10:b3:75:89:df:ed:0f:4a:08:0a:df:
29:f4:8e:c2:69:2c:d4:e5:3a:ad:03:9f:cd:ba:95:
0e:e7:92:f9:88:cd:52:10:59:64:fb:69:1a:26:6a:
7e:99:99:50:19:59:08:04:24:c8:dd:ba:85:bd:06:
84:4f:0a:8f:1a:d6:45:70:36:a7:1e:7e:c3:92:26:
52:b5:a7:39:9a:f0:ed:a1:8e:fc:7d:cc:3c:82:7e:
c1:20:a9:a7:53:de:ea:3e:e0:82:17:0f:73:e8:cb:
e6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:92:CA:FC:99:9D:92:5D:4E:8C:64:3D:7C:F7:81:1F:1E:64:C8:AA
X509v3 Authority Key Identifier:
keyid:A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/EJLK_Jmdkl1OjGQ9fPeBHx5kyKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.69.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:e8:c1:de:50:f3:b6:40:a5:f0:62:dd:ae:83:ea:52:89:b6:
66:ef:a1:e8:4c:f9:1c:d4:a7:6c:99:75:b3:3f:a4:be:20:f9:
d8:f7:2b:fd:a8:d1:39:b4:39:32:71:d0:88:e5:7d:5d:0d:f0:
31:2d:ab:99:b5:ef:bf:85:7b:2e:b6:27:61:7d:ce:6b:38:e8:
13:dc:18:b9:7a:11:b5:8f:a5:31:0e:44:01:17:95:76:10:8f:
c4:21:3b:66:a6:0a:b6:76:a6:2e:64:75:c0:a6:30:3b:84:da:
69:22:2d:cc:8f:de:b8:55:ed:90:24:16:6f:78:c9:92:61:bb:
ef:49:31:ce:b1:f0:9a:b4:6d:bb:39:0c:b8:76:86:8a:d9:bf:
48:3d:c2:30:52:ae:5c:c6:2a:50:68:9b:32:d7:5f:fb:ac:7f:
e9:39:aa:26:f5:34:f4:db:7b:90:06:eb:f3:d6:d2:95:85:d6:
6a:46:39:f2:85:b3:dc:2b:c1:e2:29:71:d4:d2:e8:39:7d:58:
f4:26:0b:a8:eb:82:59:24:7e:04:3f:2d:e6:bb:68:3f:3d:0f:
77:3a:24:3d:31:a3:81:45:b8:80:a8:da:f3:43:7e:4f:fc:71:
ed:8f:ec:4b:79:c7:00:e3:8f:42:b1:06:42:3a:c0:47:0b:ba:
ec:8b:90:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:25 2024 by rpki-client on console-fra.rpki-client.org