Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/kg5FJWTKAQL-Tej5EwWFer5uy2Q.roa
File: kg5FJWTKAQL-Tej5EwWFer5uy2Q.roa (raw, json)
Hash identifier: oWg3DbLNGplj2jJiA/jcxTMbskDVf9Sfv9ZdnelpWdI=
Subject key identifier: 92:0E:45:25:64:CA:01:02:FE:4D:E8:F9:13:05:85:7A:BE:6E:CB:64
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC501279375031A4EDB4744891F8714EC
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/kg5FJWTKAQL-Tej5EwWFer5uy2Q.roa
Signing time: Mon 01 Jan 2024 12:30:36 +0000
ROA not before: Mon 01 Jan 2024 12:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206286
IP address blocks: 45.141.24.0/24 maxlen: 24
45.144.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Apr 2024 19:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:27:93:75:03:1a:4e:db:47:44:89:1f:87:14:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=920e452564ca0102fe4de8f91305857abe6ecb64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:88:34:99:a0:1e:a6:fb:0b:a1:d2:e0:a9:ba:
e2:4a:e8:a1:1a:5f:bf:1e:4e:7f:58:ba:50:ad:08:
30:e9:c7:63:b2:6c:ee:3d:a2:4e:90:96:0c:3d:b8:
92:33:9b:f3:56:a1:5b:73:e6:89:a3:ab:42:31:ea:
eb:18:d8:a9:e4:61:53:14:11:f4:46:3c:87:4b:6a:
d9:b0:d5:88:ad:de:39:0d:8a:6b:d2:57:25:eb:2f:
22:16:94:dd:82:0e:55:9d:d5:cb:53:b1:b1:a9:9d:
b6:34:58:f7:96:35:95:1e:15:a4:bd:2d:d6:ae:48:
7c:70:d9:55:90:1f:3e:55:07:b2:f0:c4:ba:81:a5:
00:d0:2f:64:40:ed:14:e9:94:9d:47:4f:2e:d1:ee:
58:13:e9:7a:d9:ec:32:44:59:d7:5d:8b:34:4c:e0:
1c:17:b0:8d:9f:47:72:bd:04:9e:fd:f5:d2:0e:22:
34:aa:2b:b3:d7:4e:42:fd:0e:bc:68:01:6c:0e:cb:
88:d7:5b:7c:ed:1c:69:bd:45:26:56:f5:b6:c8:7a:
a3:6e:75:73:04:7a:b6:59:d8:ac:35:3c:9a:cf:ea:
e0:76:53:4c:2c:2e:a9:44:a8:ff:d0:be:98:cc:f5:
64:0b:d4:41:d4:8a:aa:40:10:28:cf:7f:98:07:b9:
70:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0E:45:25:64:CA:01:02:FE:4D:E8:F9:13:05:85:7A:BE:6E:CB:64
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/kg5FJWTKAQL-Tej5EwWFer5uy2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.24.0/24
45.144.225.0/24
Signature Algorithm: sha256WithRSAEncryption
08:d2:72:9f:cb:a6:e4:bd:63:c1:8d:10:bd:58:ef:84:aa:7f:
92:7e:84:42:81:bf:b8:50:c4:34:2c:82:55:3f:6c:cb:e2:6f:
41:13:d5:f6:61:53:47:45:b2:d2:ec:a3:12:a5:8b:af:ba:52:
12:f4:89:12:f8:b3:d0:04:e4:09:fa:11:51:f5:58:53:68:6e:
58:22:b5:4c:c4:b4:66:f0:46:87:95:54:f5:81:90:63:4a:1d:
ee:18:e1:39:38:07:d1:aa:80:05:0d:41:55:6a:20:2e:44:9d:
bb:26:25:d7:cb:9b:f2:c0:c5:67:29:71:76:9d:59:0f:55:45:
32:b4:bd:35:6e:4e:eb:d6:7d:eb:07:ca:fd:21:69:31:35:7b:
6a:39:21:b2:c4:c6:e9:8d:a4:92:8b:6f:e8:c1:c1:dd:51:4a:
ac:22:c7:b9:e3:c4:e8:18:4b:8d:29:aa:b7:e8:d0:d0:09:ac:
a7:2a:3b:d9:3e:42:d2:c5:4e:de:f9:1f:4d:76:da:bf:87:a4:
e8:1c:4d:18:73:5e:e5:20:2d:5b:14:a2:d4:3a:ce:6c:66:ee:
29:f8:60:13:07:c5:96:11:ad:5a:fe:dd:6c:65:4d:e7:f6:f8:
78:b6:28:87:7d:66:ca:71:e7:31:61:ff:44:66:2f:e2:d8:2c:
26:de:e5:f6
-----BEGIN CERTIFICATE-----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Generated at Mon Apr 1 21:13:49 2024 by rpki-client on console-ams.rpki-client.org