Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/eeFy5il156z2v4LyaDHimLY1_m8.roa
File: eeFy5il156z2v4LyaDHimLY1_m8.roa (raw, json)
Hash identifier: OO0u7m6Ugo8CJ3ITwlrMre42bnBvUj1iqfJB/J6/pAo=
Subject key identifier: 79:E1:72:E6:29:75:E7:AC:F6:BF:82:F2:68:31:E2:98:B6:35:FE:6F
Certificate issuer: /CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Certificate serial: 0191B1A540000C60B5DDEB1C0C4662CB0858
Authority key identifier: A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/eeFy5il156z2v4LyaDHimLY1_m8.roa
Signing time: Mon 02 Sep 2024 07:31:22 +0000
ROA not before: Mon 02 Sep 2024 07:31:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 32558
IP address blocks: 45.157.70.0/24 maxlen: 24
45.157.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Sep 2024 15:58:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b1:a5:40:00:0c:60:b5:dd:eb:1c:0c:46:62:cb:08:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Validity
Not Before: Sep 2 07:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79e172e62975e7acf6bf82f26831e298b635fe6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:83:1f:28:04:d0:fb:89:40:9b:e3:b4:5d:29:
2c:33:9a:4a:27:0f:97:f6:f6:94:90:98:55:8d:ee:
36:73:d9:09:82:53:2a:8c:c5:6b:ab:e7:0f:ea:c6:
d2:83:5f:96:ef:2e:37:dc:0d:fc:1b:4b:52:50:91:
90:24:6e:88:e7:20:d8:e8:1e:43:19:13:2e:f4:28:
61:fe:05:22:37:b6:31:06:f6:8b:4c:84:9d:6f:72:
74:e5:10:d5:49:5c:8d:77:68:af:2a:fc:7b:e2:c2:
95:5a:15:72:aa:bd:2e:31:9e:b7:96:81:d8:04:ec:
11:9d:f1:2e:2a:51:9a:87:92:1f:7d:39:ac:e3:09:
62:cd:91:a5:90:44:8e:69:53:4f:f9:55:65:e6:17:
75:b6:0b:6d:95:74:ca:eb:a9:c8:f4:93:b7:52:6f:
93:9f:69:02:ce:d6:be:ef:e2:84:6e:a7:30:7e:99:
f8:12:86:d7:84:b9:7a:fe:af:c1:ea:be:b4:48:48:
11:cc:91:7a:54:59:a5:50:95:ca:04:95:da:cd:7a:
8c:33:c8:95:de:7e:84:66:c3:75:18:92:75:58:5d:
36:90:32:35:a3:f3:5d:81:94:a0:f0:a9:bb:f0:4e:
18:fb:8d:4a:5a:ed:0a:38:a7:6f:91:b8:82:c0:6d:
24:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E1:72:E6:29:75:E7:AC:F6:BF:82:F2:68:31:E2:98:B6:35:FE:6F
X509v3 Authority Key Identifier:
keyid:A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/eeFy5il156z2v4LyaDHimLY1_m8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.70.0/23
Signature Algorithm: sha256WithRSAEncryption
80:ed:6a:49:2b:5a:67:c5:2a:38:94:a5:44:82:57:a2:bc:1f:
3b:68:cb:60:d0:43:b1:b2:88:cf:29:a2:96:cc:3e:8f:83:d6:
92:0f:56:9e:53:bd:e2:0a:ec:3a:ce:08:ee:b9:e4:3b:e3:b9:
82:df:f5:ed:06:31:6f:b8:cd:3a:11:e6:7b:91:b2:d1:96:2f:
a4:95:32:a2:92:c1:a6:4a:ab:60:b1:6a:07:a8:d9:4c:17:84:
90:f3:53:39:29:25:bb:de:ae:7c:d1:d8:02:9c:3e:35:0c:d7:
69:e8:bb:62:53:dd:38:cc:7c:61:49:a4:2c:28:9d:04:8a:a1:
ce:0c:1f:b5:d7:6b:86:82:da:07:be:0b:08:78:96:5a:5d:50:
1a:85:f8:57:e4:56:2f:c4:ae:91:b1:2d:5a:e0:c6:ed:e1:cb:
74:46:d1:50:f8:bf:c2:01:b1:c7:af:1d:18:d4:8a:49:20:14:
a7:22:42:19:9a:85:5c:55:d8:1d:07:77:c9:03:99:9c:ee:fe:
15:00:a7:e9:74:ae:4c:9a:82:06:00:93:33:a2:b7:f7:c0:ae:
13:44:f3:a3:35:92:34:94:38:d5:50:4d:ab:2b:6e:7a:9b:ad:
16:cf:58:32:40:8d:e2:93:64:95:e6:5e:cc:eb:80:1a:c0:5f:
ed:cd:7e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 2 18:31:11 2024 by rpki-client on console-ams.rpki-client.org