Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/2UhZ_KDGXLrKKIUjBmVsmhL3eVw.roa
File: 2UhZ_KDGXLrKKIUjBmVsmhL3eVw.roa (raw, json)
Hash identifier: GWGBNVxaYsG7NTObsK7+iNyYp1HKLoIVeYu4px/axYo=
Subject key identifier: D9:48:59:FC:A0:C6:5C:BA:CA:28:85:23:06:65:6C:9A:12:F7:79:5C
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018A8492D6C347C91893F61A7D9359F487E2
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/2UhZ_KDGXLrKKIUjBmVsmhL3eVw.roa
Signing time: Mon 11 Sep 2023 14:08:50 +0000
ROA not before: Mon 11 Sep 2023 14:08:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216319
IP address blocks: 45.133.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:84:92:d6:c3:47:c9:18:93:f6:1a:7d:93:59:f4:87:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Sep 11 14:08:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d94859fca0c65cbaca28852306656c9a12f7795c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1a:8b:b2:48:ec:ec:0e:da:7f:e8:a6:8d:fd:
5b:62:a8:52:05:26:43:3c:fc:75:cd:10:16:98:44:
13:dd:fd:55:ea:c3:17:ae:aa:ec:3f:28:be:13:85:
95:16:62:5f:45:47:c2:e5:7c:66:9f:f4:7f:c3:3d:
d8:58:01:92:60:4a:15:f0:05:c1:71:24:cb:1e:ac:
93:df:aa:33:57:23:0d:6d:4f:c0:17:7f:31:39:c8:
29:34:bb:ad:5e:95:10:6c:75:1c:ef:b9:6d:98:b7:
00:3e:ef:72:c1:35:62:3f:1f:32:32:2e:86:74:c4:
4c:8f:8d:2c:5b:79:52:5f:86:41:04:62:5f:33:1a:
83:78:72:cb:d6:d6:ae:50:5f:4b:c7:ba:e0:19:1f:
89:10:db:a5:6a:6b:e9:e6:ac:45:f8:d3:66:de:a7:
a9:cf:3d:30:7b:29:b3:3f:74:f7:88:41:a7:51:8a:
58:ab:04:0c:ac:32:89:71:4c:1f:00:5f:7f:55:09:
b3:6b:91:27:58:70:d2:84:81:f9:4d:d6:76:3e:ec:
17:b0:32:71:ba:dd:8e:a0:0a:85:18:e8:ec:07:0d:
1c:5a:d8:2d:e6:ab:c4:af:d5:54:72:dd:03:57:04:
ef:73:83:cc:0d:75:dd:84:70:87:ec:58:76:22:d9:
5c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:48:59:FC:A0:C6:5C:BA:CA:28:85:23:06:65:6C:9A:12:F7:79:5C
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/2UhZ_KDGXLrKKIUjBmVsmhL3eVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.246.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:8d:c2:eb:e6:ba:e0:d2:75:4c:8a:b0:ec:8c:10:c5:92:7e:
a7:50:a2:ec:02:83:2c:d5:10:d6:1c:41:b6:82:d8:00:4f:c2:
51:56:cc:58:4a:f8:9c:78:e1:8f:23:18:3d:99:39:b6:5c:1a:
14:b2:64:2d:c7:2a:4f:6b:5e:64:3b:af:ea:78:ea:b9:c9:ba:
97:23:79:22:26:03:91:37:e2:a4:d6:b6:ee:05:86:26:65:b3:
64:76:b7:4f:15:15:ec:0c:96:e4:b7:6c:d0:38:d7:2b:f8:73:
03:51:fd:ce:c7:78:71:12:6a:99:7a:2c:4a:64:8b:84:48:31:
16:25:a5:4e:32:6b:65:fa:22:a7:88:69:25:c6:13:0a:26:e5:
d2:89:81:ea:82:98:1d:96:28:79:45:d5:97:13:95:92:46:b0:
e5:9a:96:a6:dd:8e:21:0c:ae:82:37:f8:c0:a8:10:aa:fd:01:
6e:24:4f:38:7e:94:3e:3f:70:ac:46:4c:8b:f5:93:d2:fd:fc:
67:5a:4c:b2:60:2a:1f:f1:75:4f:2b:af:b8:9b:2d:62:e4:ac:
a7:b9:79:2d:6b:81:35:1f:c7:16:fc:53:57:e0:2c:fd:b4:d1:
bd:12:9b:52:9b:85:69:5a:32:8c:ec:5f:ed:57:4c:37:54:24:
b5:db:08:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:08 2024 by rpki-client on console-ams.rpki-client.org