Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/58IbYwTdL-zS3YUdYVvY3dth4LU.roa
File: 58IbYwTdL-zS3YUdYVvY3dth4LU.roa (raw, json)
Hash identifier: jJFCpOUvallH0TzFFKoqoj/8WhFIh3NsrS1Ie/1eiqI=
Subject key identifier: E7:C2:1B:63:04:DD:2F:EC:D2:DD:85:1D:61:5B:D8:DD:DB:61:E0:B5
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0185710317BA187EBB47DF7DE0B0E57AF3DE
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/58IbYwTdL-zS3YUdYVvY3dth4LU.roa
Signing time: Mon 02 Jan 2023 05:45:06 +0000
ROA not before: Mon 02 Jan 2023 05:45:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206150
IP address blocks: 45.130.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Sep 2023 09:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:03:17:ba:18:7e:bb:47:df:7d:e0:b0:e5:7a:f3:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 2 05:45:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7c21b6304dd2fecd2dd851d615bd8dddb61e0b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:13:e1:10:cb:a0:54:b7:e7:d6:ad:8c:7e:65:
4a:76:e5:1c:bf:e7:c3:2f:68:fe:85:d0:8f:ce:21:
4b:cd:2a:cc:7d:c4:1c:4c:c6:48:83:d1:7a:eb:41:
e1:c8:f6:cf:f5:a4:38:75:c4:25:a1:b9:1e:c4:ef:
d6:b9:48:56:d4:e0:6d:91:5c:76:95:48:3f:20:93:
72:26:da:4d:5c:a3:aa:49:b7:5b:42:7d:54:08:0a:
85:ce:64:26:a9:d8:3f:68:0f:f1:18:20:1e:14:a1:
c3:9b:eb:82:4c:87:cd:46:76:08:25:7b:7f:c5:41:
47:5a:88:4d:40:73:bf:2d:44:e3:5c:e2:0c:c7:fc:
7d:55:b3:1e:6e:7f:33:70:fb:40:dd:bf:3a:29:d1:
2c:0e:01:5f:84:8f:5a:35:39:ec:76:81:23:7e:2f:
d2:ce:76:d4:b5:c9:36:ab:a4:2a:bf:70:d7:42:4e:
69:d7:63:0e:cf:76:79:fe:a2:a8:e2:7b:c4:84:ec:
f3:28:8e:22:e9:36:0e:57:5b:e3:c0:70:25:ee:6d:
44:3c:32:0f:6c:68:95:9e:2f:26:d9:28:9e:d9:42:
fe:56:20:9c:a8:9f:ba:42:43:93:19:73:a1:4a:f5:
f5:f4:1d:f5:e9:99:3b:d4:f0:9f:32:38:a7:95:7f:
3a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C2:1B:63:04:DD:2F:EC:D2:DD:85:1D:61:5B:D8:DD:DB:61:E0:B5
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/58IbYwTdL-zS3YUdYVvY3dth4LU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.82.0/24
Signature Algorithm: sha256WithRSAEncryption
49:96:a5:7f:a1:ba:a9:ea:68:6b:3a:57:6f:79:22:63:8a:9c:
83:7e:b1:82:75:eb:3b:ef:a5:d4:d5:92:b9:6c:f0:9e:b6:b2:
80:cc:fc:9c:4d:5f:b1:0a:8e:29:a7:3f:3d:5f:5d:1f:7f:5b:
21:01:aa:ab:b9:d1:a3:9d:dc:95:14:2f:da:1c:2b:cb:c7:39:
0f:cd:0f:f9:3e:19:2b:97:da:11:c4:ac:ed:7e:cb:3f:ec:e6:
05:5c:8c:ce:db:02:f6:8c:c2:fc:16:db:e7:1d:c9:8c:e2:dd:
71:96:0d:dd:1a:4d:3b:9a:2e:82:84:38:56:c4:3b:30:4e:23:
22:48:d5:7d:5e:17:4a:f6:9b:f4:8f:b7:ca:64:6c:51:54:6e:
79:f5:1c:fe:10:fb:0d:3c:16:db:ef:73:7a:cd:3a:69:3d:24:
c0:7a:a9:64:7b:a7:7b:d5:57:56:ee:39:a0:9c:f8:25:7d:46:
a8:ac:65:db:66:81:4c:b5:24:5e:00:7f:31:cd:47:31:71:25:
1d:3b:74:31:fa:03:3e:42:39:c3:86:0d:7b:bc:33:8e:2d:3a:
97:a6:dc:8b:f4:f9:23:1f:2f:92:de:86:dd:61:bf:f7:2d:44:
8f:41:19:79:1f:87:24:3e:cc:61:15:fa:5e:a7:a3:15:ca:4b:
c2:70:a8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:08 2024 by rpki-client on console-ams.rpki-client.org