Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/1JKDeSaX8FtdUyjdEoD116Fbe5A.roa
File: 1JKDeSaX8FtdUyjdEoD116Fbe5A.roa (raw, json)
Hash identifier: ZeIgQ7JVuqaMm+ZL/xO2BLj3uAi9B2mXgnKAHC3luMU=
Subject key identifier: D4:92:83:79:26:97:F0:5B:5D:53:28:DD:12:80:F5:D7:A1:5B:7B:90
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018C05D9FF9A08F5793D4982274C429C6F63
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/1JKDeSaX8FtdUyjdEoD116Fbe5A.roa
Signing time: Sat 25 Nov 2023 09:40:21 +0000
ROA not before: Sat 25 Nov 2023 09:40:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200784
IP address blocks: 45.132.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:05:d9:ff:9a:08:f5:79:3d:49:82:27:4c:42:9c:6f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Nov 25 09:40:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d49283792697f05b5d5328dd1280f5d7a15b7b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e0:e9:83:e5:03:2b:e3:94:63:ee:f1:89:ed:
8b:e7:d4:a4:2e:42:1a:ee:f0:89:06:e9:5d:78:a6:
14:35:98:4f:1a:4b:55:2e:a7:60:26:e5:9e:e2:29:
f6:0a:77:32:69:00:14:82:e8:02:4f:63:ad:64:6a:
4f:9c:94:37:9c:97:f2:ce:d0:f5:70:83:0f:87:4d:
ca:a0:21:27:be:ab:5f:f6:eb:ae:89:f0:70:f7:7d:
02:00:f2:43:97:1e:2d:ad:aa:e2:27:95:19:1f:8d:
29:bd:1c:0c:bf:f8:49:fd:89:e1:b7:1c:e2:7b:c0:
ab:ea:bd:7e:a2:24:38:6f:e6:5a:3d:78:7c:36:d3:
cd:7f:2b:b2:9b:c0:a2:1e:cf:9f:10:95:42:02:5e:
b4:6a:0b:dc:93:d7:e9:d8:23:11:d1:71:f9:51:4e:
0b:9b:62:72:6f:67:1c:83:ff:8c:a9:1f:b3:03:93:
ae:b3:3e:ba:a3:2d:b3:15:5d:76:b5:81:a0:dc:b7:
a8:b1:51:79:d8:af:da:7f:68:1f:42:d3:c9:36:03:
50:98:67:42:92:30:03:24:f3:6d:6f:eb:88:61:ac:
e4:fa:36:14:78:b5:1c:8d:40:13:aa:c5:06:f7:67:
f4:5e:a7:4a:f2:7d:e6:69:29:2d:b3:fa:db:64:b4:
73:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:92:83:79:26:97:F0:5B:5D:53:28:DD:12:80:F5:D7:A1:5B:7B:90
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/1JKDeSaX8FtdUyjdEoD116Fbe5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.255.0/24
Signature Algorithm: sha256WithRSAEncryption
77:da:d5:92:3c:a2:81:6a:1d:06:66:8a:be:ef:12:07:95:d7:
07:85:2d:78:b3:72:e9:d3:53:9e:0f:da:22:2f:59:b9:b1:1c:
2e:a3:fb:67:3b:d9:5f:62:30:0b:02:09:e4:8b:52:77:b5:c6:
c0:27:7a:35:ce:4b:da:b4:28:65:83:6e:6f:92:af:74:ac:d1:
c7:b3:4d:6f:93:f4:d4:b1:76:0b:d8:59:a3:7d:53:2b:c3:ec:
55:16:d0:34:20:41:c8:e0:49:07:1c:d5:5f:ea:3d:0b:b1:9a:
e2:60:71:3f:75:68:a7:42:77:9c:7b:16:c2:76:50:94:15:b6:
82:ef:08:35:ec:73:8f:58:23:42:b3:b6:37:9c:e2:28:97:55:
d7:cd:66:ad:e4:8e:3f:54:93:61:e5:b3:48:07:f9:20:ee:00:
fb:23:26:37:d7:86:eb:cb:b2:ba:ad:e1:6e:24:c7:cf:85:1c:
fb:2a:9c:c2:48:f8:5d:a1:f5:14:26:ba:58:7a:3d:84:c7:05:
76:a2:b5:30:e8:57:45:1a:5f:d4:1e:e8:cd:3d:d8:19:5d:b5:
22:28:ea:51:b9:a8:8a:01:52:9f:be:f6:72:1d:e5:00:be:84:
d3:ef:e0:0b:95:c4:a1:22:9f:22:29:4a:bc:b1:6b:fd:6a:1a:
93:8d:ef:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:08 2024 by rpki-client on console-ams.rpki-client.org