Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/1VlQc69I9CzRd90zkRVddYlWtXQ.roa
File: 1VlQc69I9CzRd90zkRVddYlWtXQ.roa (raw, json)
Hash identifier: ZIb4BgDTzE/cetzmkmJN1zkI2TpEKJh/1Bbcm6W7dUM=
Subject key identifier: D5:59:50:73:AF:48:F4:2C:D1:77:DD:33:91:15:5D:75:89:56:B5:74
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185710C1F87FBA145BC8BD3533C755A719B
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/1VlQc69I9CzRd90zkRVddYlWtXQ.roa
Signing time: Mon 02 Jan 2023 05:54:57 +0000
ROA not before: Mon 02 Jan 2023 05:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48891
IP address blocks: 45.133.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Jun 2023 10:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:1f:87:fb:a1:45:bc:8b:d3:53:3c:75:5a:71:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 05:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5595073af48f42cd177dd3391155d758956b574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3f:25:8f:ba:cb:36:a9:81:5f:1a:b3:fa:bc:
0e:ac:24:8a:26:7e:30:e5:9d:1e:f5:8b:00:5e:da:
45:14:7c:04:26:04:f3:e3:46:11:9a:1c:60:b4:7c:
17:c8:50:87:b9:b5:3c:b7:52:a5:05:d0:6f:69:c5:
82:23:b8:7b:c3:74:27:cb:a7:52:cd:c8:23:34:dc:
30:33:e2:17:09:c0:39:a9:3b:40:2a:c9:75:15:ff:
9c:db:9d:03:f3:a6:c1:9c:a7:d1:4d:7f:61:46:db:
c9:53:54:46:15:8a:85:51:8f:df:da:59:0d:00:ae:
8e:99:2e:2a:ec:a2:a3:75:2d:84:af:27:57:18:5d:
5b:c8:db:db:59:df:f1:24:17:90:4b:7d:f2:f3:1e:
73:33:de:7f:98:3a:d8:ed:2c:2c:f9:af:6a:c1:03:
5b:e0:24:36:e3:79:bb:c2:de:30:d4:dc:f9:1d:e9:
f6:e8:be:99:37:be:5f:f7:7d:53:52:7c:e2:da:a1:
c6:d3:56:4a:d1:03:5c:3c:14:f9:ff:dd:91:ea:97:
76:8c:32:da:cd:a2:d0:20:3e:8c:e1:5a:54:63:7e:
90:76:24:e8:4d:b1:2d:91:fa:01:6d:04:fa:51:9a:
d1:b8:1a:0e:bd:c6:3e:99:80:8e:fa:5b:e2:f5:0c:
22:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:59:50:73:AF:48:F4:2C:D1:77:DD:33:91:15:5D:75:89:56:B5:74
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/1VlQc69I9CzRd90zkRVddYlWtXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.244.0/24
Signature Algorithm: sha256WithRSAEncryption
69:29:fa:85:70:7d:4a:05:26:6c:e8:85:c3:17:1d:97:17:85:
eb:56:d8:40:05:52:0d:0d:93:df:35:93:5f:e4:83:f6:00:79:
b7:04:cc:11:0c:71:05:86:84:95:f5:90:3d:f3:54:dc:90:51:
a4:fc:0b:5a:bf:d3:f3:bf:f3:16:6e:d1:00:aa:9c:49:26:39:
bc:96:17:e9:f1:9b:0d:20:4c:f6:81:b6:e3:2e:7a:db:8a:a5:
e5:cf:64:c3:d8:e5:53:44:6c:4b:97:1b:44:70:27:76:26:1f:
94:13:e4:46:ef:69:19:70:17:e1:7d:db:88:36:4a:b8:81:e8:
84:c6:4c:42:ac:67:5f:55:cf:9a:d3:ab:cc:1f:89:f8:70:95:
72:04:b7:9b:b1:e1:ad:09:15:11:c8:e7:43:b1:8f:b3:52:a0:
7c:8e:27:37:e5:8e:8b:46:b9:16:ba:3d:20:45:6f:df:7b:8c:
cd:8c:0d:3a:82:4a:95:08:07:b0:22:43:18:fc:30:52:ad:0d:
e9:3b:93:79:30:d2:86:19:2e:45:63:a3:53:8f:35:2d:0c:b3:
38:70:71:a9:d9:0e:11:d5:03:f5:75:22:00:b7:a2:0b:11:6a:
63:7a:e8:85:de:4d:99:ab:2b:72:ce:c5:dd:45:a8:a7:ae:c1:
34:5d:37:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:07 2024 by rpki-client on console-fra.rpki-client.org