Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/eXV2m_x-VJ05eto9y9LPJw2p6PQ.roa
File: eXV2m_x-VJ05eto9y9LPJw2p6PQ.roa (raw, json)
Hash identifier: G0JbyvuPMER6YILBs8tBVfo04wnNweyusJfHhQgTkYE=
Subject key identifier: 79:75:76:9B:FC:7E:54:9D:39:7A:DA:3D:CB:D2:CF:27:0D:A9:E8:F4
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018CC8DE956D1E450113A03D06EE7B416053
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/eXV2m_x-VJ05eto9y9LPJw2p6PQ.roa
Signing time: Tue 02 Jan 2024 06:31:19 +0000
ROA not before: Tue 02 Jan 2024 06:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216308
IP address blocks: 45.15.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Apr 2024 05:24:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:95:6d:1e:45:01:13:a0:3d:06:ee:7b:41:60:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 2 06:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7975769bfc7e549d397ada3dcbd2cf270da9e8f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:be:a2:2e:4d:6c:3f:5f:a2:6b:a0:c2:0f:b2:
e6:f0:8e:7a:c1:b8:60:b7:94:d9:fb:ce:1b:d8:33:
7f:72:63:c8:bf:75:c8:4e:b8:1b:ac:a0:bf:10:05:
8e:60:a8:55:63:32:e4:86:a1:aa:0d:be:a0:30:a1:
b3:37:54:fd:83:f0:00:48:46:69:2b:a9:e2:e5:57:
8b:27:62:c7:f4:f7:ee:8c:e9:86:24:54:4a:3b:0f:
6b:86:59:70:f7:dd:7a:77:67:cf:b4:bd:ea:db:de:
c4:7a:f3:e2:27:db:82:85:34:9a:c3:7d:55:40:30:
a4:ed:75:10:85:b2:98:80:a6:47:13:2c:2f:66:29:
c8:c0:5b:d6:b7:c9:4b:aa:c4:23:af:c1:3a:db:94:
e4:34:a5:40:91:0f:78:fa:98:8f:90:7f:3a:31:b7:
79:15:be:cd:44:34:d6:9a:87:fb:df:b7:55:58:ed:
80:49:d4:c6:63:2d:39:2d:17:3d:14:e1:51:8f:a2:
65:08:7a:66:5e:5c:30:e4:35:3b:60:e8:40:7c:ab:
66:97:75:e7:98:cd:a6:80:f3:4f:34:9c:b9:96:8f:
db:06:b5:d4:69:c0:38:51:4c:7e:d2:fd:bd:1f:6a:
4b:d5:e5:81:17:cb:00:af:e8:f8:70:1e:3e:51:23:
ce:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:75:76:9B:FC:7E:54:9D:39:7A:DA:3D:CB:D2:CF:27:0D:A9:E8:F4
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/eXV2m_x-VJ05eto9y9LPJw2p6PQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.177.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:66:cd:30:7a:b3:1a:b0:0a:2b:fe:42:3d:8f:59:c0:69:1f:
a5:3f:ed:70:da:ec:f8:6b:eb:39:73:4b:fa:c9:3e:c6:9b:d3:
c5:60:7b:43:cd:17:10:42:53:34:7d:ed:4a:ec:d6:ca:b0:6a:
fd:06:5e:ce:8d:6c:e7:f8:f7:9c:87:c4:10:ec:32:d1:f7:31:
5f:29:46:69:5e:d0:d1:f5:55:de:42:c8:47:a5:d3:f6:cc:d5:
d3:64:6d:dc:86:27:e7:88:bf:ab:9f:8c:4b:79:fd:57:fb:e6:
20:cf:6d:74:9c:22:a0:aa:af:15:06:a5:7c:08:73:68:0c:ba:
77:72:e4:bf:e9:0f:e8:14:93:12:bf:56:86:72:ac:64:9b:1f:
fe:26:48:e1:2e:83:17:32:45:5f:7e:86:55:90:68:26:fb:68:
7b:21:7f:24:5a:f2:61:95:d4:bd:83:ab:fc:9d:b0:33:1f:ab:
c0:d6:e8:a4:93:33:d0:93:b9:1b:22:0a:58:a1:19:6e:b9:aa:
7f:05:51:2f:1f:2a:db:c9:3b:47:6a:66:42:bf:b3:fe:57:64:
98:b8:3b:c3:73:fc:f6:48:0e:88:17:86:c0:82:04:78:a3:fa:
13:f0:7b:48:f8:00:75:b3:87:ad:8f:f5:fd:97:74:a0:a0:ab:
54:c9:24:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 11 06:01:24 2024 by rpki-client on console-ams.rpki-client.org