Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/rhH50PbrbEl1w9vg8Qal4Tg-m28.roa
File: rhH50PbrbEl1w9vg8Qal4Tg-m28.roa (raw, json)
Hash identifier: U28up9bAiQ3gZZnYHAbQfzwmxObdd8AhyN3dBJkwH84=
Subject key identifier: AE:11:F9:D0:F6:EB:6C:49:75:C3:DB:E0:F1:06:A5:E1:38:3E:9B:6F
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185710C1E1EFFD88D2439AAA578F384D287
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/rhH50PbrbEl1w9vg8Qal4Tg-m28.roa
Signing time: Mon 02 Jan 2023 05:54:57 +0000
ROA not before: Mon 02 Jan 2023 05:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 45.132.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Nov 2023 16:59:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:1e:1e:ff:d8:8d:24:39:aa:a5:78:f3:84:d2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 05:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae11f9d0f6eb6c4975c3dbe0f106a5e1383e9b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:96:fd:6a:fc:90:55:de:1e:1a:30:e1:69:70:
96:61:2f:54:c1:53:8d:fa:02:3c:4c:14:07:04:c1:
63:05:29:57:bc:56:e4:a5:ef:92:a8:e6:c4:6e:54:
47:7b:49:56:c5:4f:c8:57:dd:9d:bd:a9:a9:be:46:
ba:59:df:28:b0:ee:8b:7e:c4:0e:42:db:ed:51:97:
94:2c:56:f3:4c:39:50:e4:1c:fb:aa:9b:f3:93:a9:
5b:a9:ca:fb:a9:0c:31:1b:09:af:0b:07:14:58:a3:
bd:c0:c5:54:25:4a:c5:a9:39:64:66:30:41:14:e0:
14:6a:1a:ef:ce:1b:c7:f6:2d:60:d5:ad:05:25:68:
f6:96:7e:5a:73:69:78:2a:f9:12:5e:98:02:dc:71:
a3:11:f4:96:2f:4f:02:75:b4:1c:cf:73:1b:02:5c:
5c:cd:b5:a0:99:b0:14:43:b3:09:4e:87:a4:8f:18:
a4:7b:85:42:bd:ff:7a:ac:a0:52:49:cf:fc:b8:47:
e1:d7:c8:80:20:1d:a9:4d:4d:18:76:fd:5f:70:21:
26:3e:cf:03:96:75:8c:2b:a0:6b:cf:59:f1:24:f0:
cf:8a:d8:af:16:01:7f:47:5e:21:9c:a4:69:94:97:
7c:b2:67:1b:99:5b:24:60:cf:ba:12:be:83:c9:8d:
7c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:11:F9:D0:F6:EB:6C:49:75:C3:DB:E0:F1:06:A5:E1:38:3E:9B:6F
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/rhH50PbrbEl1w9vg8Qal4Tg-m28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.255.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:d0:19:d7:32:37:87:fa:44:62:52:fa:b4:54:be:be:53:fb:
27:ba:ad:19:f5:f2:e9:77:3a:fc:63:20:2a:4a:1f:de:0b:7a:
ab:23:94:bc:c0:bd:86:35:a5:91:a2:f8:00:ef:1b:1e:2d:24:
dc:c3:8f:42:ec:0a:91:a8:7f:af:64:c5:7d:6b:89:f8:63:ae:
07:f2:1d:a7:af:00:3a:b7:18:20:ea:d0:4a:5a:a1:f7:f0:db:
8e:df:2e:f9:bf:5e:4c:f7:99:4f:60:af:a3:93:f3:70:e4:bd:
d7:ee:e7:55:1b:71:66:3a:43:ee:4f:fa:de:c6:21:d1:93:49:
d0:f8:d1:26:b7:f6:54:07:e1:5c:ec:0d:cb:08:a5:b9:78:30:
f9:cf:55:78:49:41:fb:92:8f:87:08:09:c3:75:64:b0:85:89:
32:d9:47:cd:2f:54:3b:b1:ec:53:4b:41:11:49:79:51:ec:9c:
43:05:9e:f7:09:4f:b6:d9:8c:ff:2b:f5:ad:dc:89:bb:8c:19:
b5:7b:21:1a:45:44:e5:03:22:e1:f4:9e:f8:b8:e8:a6:1b:3e:
eb:cf:b3:95:c7:45:bf:45:54:e7:89:43:d0:1b:12:09:b2:4d:
e7:17:f9:1a:07:e0:9b:4e:bd:55:b8:f7:15:76:fd:09:b7:95:
e1:41:57:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org