Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/pXqvGMgMyOI4SttL_TrkQgbHuM8.roa
File: pXqvGMgMyOI4SttL_TrkQgbHuM8.roa (raw, json)
Hash identifier: 2qrdS4+eomz14VQTw18ZidYBj46sC4pfh9YMbqRb+nQ=
Subject key identifier: A5:7A:AF:18:C8:0C:C8:E2:38:4A:DB:4B:FD:3A:E4:42:06:C7:B8:CF
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018CC2DB68C08D755DD1D0BE424AD17C2FFD
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/pXqvGMgMyOI4SttL_TrkQgbHuM8.roa
Signing time: Mon 01 Jan 2024 02:30:08 +0000
ROA not before: Mon 01 Jan 2024 02:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209242
IP address blocks: 45.135.235.0/24 maxlen: 24
45.133.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Feb 2024 11:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:68:c0:8d:75:5d:d1:d0:be:42:4a:d1:7c:2f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 1 02:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a57aaf18c80cc8e2384adb4bfd3ae44206c7b8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:11:5d:bb:d8:78:38:1a:88:a7:74:05:e1:62:
d1:98:6f:0a:58:f5:5c:e1:09:20:eb:8f:2b:7b:80:
df:94:fe:e2:1f:e2:fe:be:e6:e0:a6:01:63:ba:08:
3e:c3:22:5d:26:af:7d:d1:13:b2:23:46:62:9f:0c:
78:4c:48:79:21:b2:57:29:65:92:03:b7:6b:45:48:
62:20:45:61:bc:65:e9:5b:a3:69:90:53:b4:ac:85:
09:19:2b:0e:bb:8c:c4:43:c8:ef:ed:33:f3:d7:1b:
46:e4:62:78:d9:10:28:f6:fd:7e:9e:53:46:fe:7b:
8a:8e:19:99:fc:82:1e:7c:3c:50:6a:d2:d2:cf:de:
a0:e1:4b:18:a3:5c:7a:55:3e:d5:d1:1b:c3:51:cf:
f9:46:93:e7:52:a8:a6:bd:e4:69:3a:83:8c:e3:3f:
ab:58:ed:d6:08:8c:9b:ff:79:72:43:83:8a:f0:33:
60:35:53:7c:c1:22:cf:09:8a:ec:c5:38:ae:8b:29:
1b:93:cd:ab:c3:1c:cc:74:9a:73:fd:df:07:dc:b9:
33:ed:a1:ab:46:4c:51:4b:45:b6:91:4b:1e:c9:9e:
e9:2a:80:b2:f1:82:d1:e8:58:01:bc:9c:7d:75:ab:
e5:48:f3:b4:a4:cc:98:8c:e4:70:c9:61:87:7b:8a:
59:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7A:AF:18:C8:0C:C8:E2:38:4A:DB:4B:FD:3A:E4:42:06:C7:B8:CF
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/pXqvGMgMyOI4SttL_TrkQgbHuM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.234.0/24
45.135.235.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:f0:17:fa:38:03:37:e6:82:fb:7d:03:e3:10:28:62:fd:e6:
f2:93:7a:46:dd:84:2b:86:48:3c:62:34:9e:55:70:20:d6:4d:
34:f5:72:dd:da:8d:6d:5d:cc:f4:17:5c:17:81:06:9e:7b:70:
f5:e8:08:a7:ba:ec:72:b6:53:34:61:53:4c:23:19:30:56:31:
89:bc:76:b4:39:c2:85:da:20:5e:86:fe:3b:ce:25:6f:a0:81:
65:b6:5e:64:1c:be:64:e5:da:7a:64:2c:f4:ab:cd:30:13:0a:
09:c0:0b:a0:d1:f3:5c:c0:ed:76:81:87:79:36:de:05:59:87:
1c:23:a0:b1:23:f3:7d:f3:33:91:7b:01:69:34:48:97:f9:8d:
3e:e3:e0:4c:27:f3:67:76:f8:7d:39:ab:3a:8f:2e:c9:ad:95:
23:1c:15:0a:59:15:c8:d2:bd:98:f2:05:db:c1:5c:57:39:49:
2b:8a:e6:b9:90:f8:81:c1:58:27:10:b1:0a:d5:08:39:28:b1:
c5:00:11:e9:c4:81:a5:c9:0f:80:d6:cc:4b:6b:78:67:3f:92:
f1:d8:0e:df:ee:2b:18:cd:b6:16:59:fa:df:9a:ca:50:90:87:
01:61:78:96:f2:76:0f:4e:65:5f:17:9e:27:4f:31:b5:06:01:
c7:9c:56:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 5 14:32:36 2024 by rpki-client on console-fra.rpki-client.org