Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/SHX4iwxFg2KljF6FvWM2fCBoq98.roa
File: SHX4iwxFg2KljF6FvWM2fCBoq98.roa (raw, json)
Hash identifier: 5SFpdAV8SHotuNGknY7Qmy0nDmtmmMVkOW4DuJRZ3Mo=
Subject key identifier: 48:75:F8:8B:0C:45:83:62:A5:8C:5E:85:BD:63:36:7C:20:68:AB:DF
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0191FE630A51BE5BC307F9848983FF4E39DA
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/SHX4iwxFg2KljF6FvWM2fCBoq98.roa
Signing time: Tue 17 Sep 2024 05:09:49 +0000
ROA not before: Tue 17 Sep 2024 05:09:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55410
IP address blocks: 45.156.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Sep 2024 12:41:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fe:63:0a:51:be:5b:c3:07:f9:84:89:83:ff:4e:39:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Sep 17 05:09:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4875f88b0c458362a58c5e85bd63367c2068abdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bc:ba:78:0b:54:c5:c7:35:80:6a:20:ba:71:
8d:fe:c0:40:be:54:a7:d8:32:6b:e9:23:29:c8:ed:
76:d7:2a:a2:76:e7:e8:cd:75:b8:07:f9:33:ec:83:
96:ea:d6:3f:96:5a:cb:37:b6:b1:51:71:f4:eb:c7:
51:81:e9:cc:69:ec:01:81:54:10:06:3b:b9:1f:67:
57:3e:68:98:e0:ff:ea:6a:8e:03:70:89:4f:f6:bf:
75:da:b4:60:61:5a:3d:24:55:7e:c1:9d:04:98:c9:
9d:69:ac:4a:d7:8b:b2:bb:2e:bc:26:97:bf:08:ab:
f1:50:bc:0b:65:7b:5d:bb:42:cb:c2:23:3f:16:45:
33:e8:2a:8f:12:35:0d:18:98:1e:2e:6d:d3:c7:c7:
9d:61:2b:f4:7e:ed:53:c4:4c:49:f9:1b:55:f4:9b:
7b:a7:a0:2f:a2:9c:9c:eb:4c:37:ae:6f:04:8d:f4:
59:a0:4d:be:c0:d0:da:2e:38:8f:5c:8c:6a:cf:52:
78:1a:99:00:a3:ba:1a:48:84:f3:fd:dc:b1:69:1e:
3b:06:07:51:32:e6:0f:ee:59:70:2a:dc:d1:a6:55:
00:e8:f8:10:44:17:30:93:e4:7f:b0:46:f1:3f:c0:
4d:91:ac:48:7c:a1:16:cc:66:e9:84:60:04:a4:35:
08:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:75:F8:8B:0C:45:83:62:A5:8C:5E:85:BD:63:36:7C:20:68:AB:DF
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/SHX4iwxFg2KljF6FvWM2fCBoq98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.159.0/24
Signature Algorithm: sha256WithRSAEncryption
74:57:2a:11:99:1a:91:c0:5d:b5:59:28:e9:f0:0c:db:a0:9f:
d1:40:4e:ca:e9:7c:29:36:66:7c:52:7b:2e:68:60:e8:f1:f1:
0d:69:ff:45:62:f6:4d:d8:d9:3e:5e:d3:13:c0:87:3a:1e:ef:
38:f3:9d:a1:91:33:48:f0:38:6b:05:47:69:b8:7e:d5:57:39:
ff:2a:be:86:93:f2:48:24:cd:13:41:89:b7:06:77:c9:e2:eb:
91:12:0a:9e:2e:50:89:b0:d1:b0:84:3c:1e:75:4c:b8:e0:39:
2b:49:71:62:e7:b2:09:08:26:48:c4:2f:ac:ed:ab:d1:8c:05:
45:66:28:d0:6f:81:6b:76:40:6b:7d:a4:7a:5c:f0:13:7a:04:
dc:01:7d:c3:ac:f8:ee:73:79:d8:8b:a5:2a:cf:05:0d:31:42:
cb:e4:01:f7:bb:62:0c:2f:83:eb:9c:23:82:c2:38:22:23:cc:
20:97:fb:5a:7f:54:12:f6:ee:99:0a:9d:31:a8:fc:06:4a:80:
f3:fd:16:e8:f1:99:39:0d:b1:8f:db:de:80:99:58:f9:61:12:
59:2e:48:6e:99:6f:27:a7:dd:b6:56:09:3a:43:97:a1:6a:d9:
13:91:d2:a8:bd:16:2e:58:5e:06:d8:60:d6:c2:b8:fe:54:c2:
35:f0:da:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 15:59:08 2024 by rpki-client on console-fra.rpki-client.org