Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/h7zeUJkHlKTBh9y66dhaBKYng_k.roa
File: h7zeUJkHlKTBh9y66dhaBKYng_k.roa (raw, json)
Hash identifier: Bdz2F+VM920r1zIxfBfYse+P+bCMnoMybc8Yb5QfY4k=
Subject key identifier: 87:BC:DE:50:99:07:94:A4:C1:87:DC:BA:E9:D8:5A:04:A6:27:83:F9
Certificate issuer: /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Certificate serial: 018B8F1D7EBA943A0B2F2631B1F232902234
Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/h7zeUJkHlKTBh9y66dhaBKYng_k.roa
Signing time: Thu 02 Nov 2023 08:19:16 +0000
ROA not before: Thu 02 Nov 2023 08:19:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50304
IP address blocks: 45.15.19.0/24 maxlen: 24
2a0e:1c80:19::/48 maxlen: 48
2a0e:1c80:7::/48 maxlen: 48
2a0e:1c80:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8f:1d:7e:ba:94:3a:0b:2f:26:31:b1:f2:32:90:22:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Validity
Not Before: Nov 2 08:19:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87bcde50990794a4c187dcbae9d85a04a62783f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:79:72:47:fd:58:3e:b2:2e:04:b5:e9:e1:1c:
19:69:31:8e:e0:d4:03:00:63:00:4d:6c:5d:ad:3d:
85:7d:0c:fc:76:86:6c:0c:a8:2b:b8:f2:a7:9c:b7:
57:34:13:d8:24:2f:81:2f:15:40:b6:a3:2c:5e:17:
2a:0a:f6:ad:7c:03:2c:fa:f2:18:d2:49:5d:85:ca:
58:25:ef:d7:af:44:1a:2a:89:01:95:33:a5:26:49:
4b:0e:72:95:96:5a:c4:e1:5b:8f:09:b5:e4:62:85:
a7:b3:1c:4a:97:5c:79:16:9b:6d:ee:20:e0:21:2d:
af:9d:5d:b4:65:43:e9:7e:a8:3a:a9:ef:a4:04:60:
44:41:c5:7f:e6:62:ba:88:e1:07:9e:b1:96:3d:29:
ef:2e:9e:7b:9b:86:22:e7:b8:9e:18:b6:55:ef:03:
3e:4c:1e:b0:fc:8e:25:a6:e5:dd:11:1f:2e:e0:bf:
17:7f:5f:10:1d:32:30:f6:b1:dc:9f:81:b3:a8:66:
e3:04:8b:05:0b:54:5d:36:8d:fb:31:f7:ee:f7:fc:
71:6e:a0:68:df:c2:32:5f:52:ab:d0:59:e0:09:05:
20:e7:82:48:8d:74:ad:fc:42:f8:f8:58:72:b6:51:
dd:5a:2a:51:ab:40:bd:9f:fd:17:b7:19:3e:e5:60:
50:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:BC:DE:50:99:07:94:A4:C1:87:DC:BA:E9:D8:5A:04:A6:27:83:F9
X509v3 Authority Key Identifier:
keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/h7zeUJkHlKTBh9y66dhaBKYng_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.19.0/24
IPv6:
2a0e:1c80:2::/48
2a0e:1c80:7::/48
2a0e:1c80:19::/48
Signature Algorithm: sha256WithRSAEncryption
58:53:d3:da:29:3a:ee:0b:44:7f:68:30:c6:90:6a:f0:72:b9:
40:84:a4:ff:fd:80:20:2d:67:75:18:8c:29:47:14:15:45:2c:
dd:92:ad:5f:29:f4:18:5d:2b:7b:bd:fd:d4:7d:1c:df:30:28:
71:17:f5:4c:fe:8e:e6:32:c2:c7:26:34:d6:82:3d:86:74:de:
c2:34:52:be:53:d0:66:57:77:35:02:13:38:db:88:89:ac:d3:
2d:bd:c9:db:c7:c2:86:f2:2a:0c:2a:75:94:af:df:fc:38:00:
bb:90:1f:7e:d7:de:e3:a6:33:cd:c2:70:0b:ed:ac:a2:fc:15:
e9:2c:65:8b:f5:11:5a:86:5f:14:94:b7:0a:8b:bc:1c:7c:a0:
44:81:d5:7d:9d:79:1f:ee:e2:52:2a:15:95:bf:c9:6c:56:a0:
6b:e9:74:0c:fa:64:b6:46:76:33:f7:69:45:b9:6a:f0:9d:6d:
68:e0:09:99:b4:6f:91:84:60:e1:07:88:a3:37:1e:34:38:51:
87:19:ff:c2:7c:6a:a7:d7:bd:98:75:3c:d0:ca:d5:07:5b:27:
b1:2d:43:d9:d9:e3:28:58:7e:d5:62:e6:40:02:b4:7b:e2:fe:
5c:28:93:51:bd:78:10:ae:a6:e6:cd:b2:e9:a3:5b:56:f8:6f:
4f:ee:7d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:01 2024 by rpki-client on console-ams.rpki-client.org