Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/13Yy6ioTwA26iR5417TFk_Fd6Ik.roa
File: 13Yy6ioTwA26iR5417TFk_Fd6Ik.roa (raw, json)
Hash identifier: 6SKVY7z2GI0prULxTw5Gx3uyqXQPoeYLyjPOAUCNtak=
Subject key identifier: D7:76:32:EA:2A:13:C0:0D:BA:89:1E:78:D7:B4:C5:93:F1:5D:E8:89
Certificate issuer: /CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Certificate serial: 018C1A7AE92C236536C0449F024BF332164D
Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/13Yy6ioTwA26iR5417TFk_Fd6Ik.roa
Signing time: Wed 29 Nov 2023 09:48:31 +0000
ROA not before: Wed 29 Nov 2023 09:48:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210538
IP address blocks: 45.155.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1a:7a:e9:2c:23:65:36:c0:44:9f:02:4b:f3:32:16:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Validity
Not Before: Nov 29 09:48:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d77632ea2a13c00dba891e78d7b4c593f15de889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e6:35:ff:9a:19:71:83:ba:3c:51:87:d0:86:
d0:39:e1:fa:55:70:f9:45:86:7f:30:bd:6a:51:6e:
db:83:f4:92:bd:37:ed:db:d2:38:13:db:3b:55:3c:
a0:68:a6:3b:12:7e:37:55:ac:48:24:d5:01:5c:a7:
10:63:1a:e4:26:91:2f:df:58:b1:39:d3:f7:33:36:
67:5c:17:d2:1e:73:ae:fa:c4:7b:e4:f4:8a:df:ad:
34:21:16:8c:41:e7:df:5e:eb:19:ca:2f:d9:05:72:
4e:09:f7:77:f1:7c:1f:c2:da:dc:64:8d:5b:7a:31:
4a:46:1d:a7:12:ad:09:d1:22:ce:cb:eb:80:42:e1:
4f:9e:17:0e:71:99:10:9d:cf:6a:6c:2d:94:5b:0a:
36:6c:70:15:08:96:cd:64:0f:8f:c3:ad:d8:ee:89:
86:62:ab:9d:7c:af:9a:d1:3e:ec:ed:a5:44:14:2a:
ff:dc:fe:fe:46:03:67:ec:58:22:eb:e1:ac:7c:39:
b3:9c:62:3f:59:bf:b5:d0:a8:bb:11:b0:dd:b3:2a:
4e:85:5a:d0:4a:29:8b:b9:d3:ac:8e:15:0c:ea:29:
09:fc:f3:0e:b7:13:a1:2c:2b:ea:a7:33:aa:1b:14:
45:ea:dc:b5:4a:a0:6d:19:10:40:da:ae:79:09:ce:
88:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:76:32:EA:2A:13:C0:0D:BA:89:1E:78:D7:B4:C5:93:F1:5D:E8:89
X509v3 Authority Key Identifier:
keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/13Yy6ioTwA26iR5417TFk_Fd6Ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.124.0/24
Signature Algorithm: sha256WithRSAEncryption
10:2e:0d:33:6c:42:60:80:f7:16:ae:7a:bc:f7:cc:da:23:0e:
fe:d0:de:58:e7:c5:a1:3d:44:96:b0:cf:a6:fa:1c:43:0f:25:
80:f4:28:2d:21:ea:e3:21:f4:fa:2c:d6:8b:79:57:5a:24:8e:
d9:1f:52:27:ce:73:59:83:f5:a5:0f:f9:1c:aa:33:20:53:10:
5b:92:c1:fc:d1:af:fa:c2:9c:85:4e:32:39:1b:f8:a8:41:b7:
7b:96:6d:ff:bd:b3:60:8f:c4:8d:6f:1e:b2:e3:c1:fc:7a:ac:
d1:b4:8f:c9:ef:35:88:68:2e:39:ab:e5:bb:de:75:e2:4d:aa:
30:70:1b:3f:60:7a:09:b8:ea:04:a1:95:7b:e3:00:be:a2:a7:
47:29:5f:19:7d:d9:80:3b:6e:30:3a:53:59:ca:7e:c9:33:04:
e1:20:51:7b:23:0e:35:a6:c3:17:e0:a7:c9:a6:49:6f:36:d7:
af:9e:d9:b1:22:07:fb:4d:4a:98:3b:ed:93:16:13:1b:83:26:
38:1e:c3:56:f3:47:6e:e3:7b:e7:e3:eb:14:52:5a:af:68:bd:
ac:1d:fd:96:bc:6c:13:d1:a3:ae:b8:ac:b4:6c:c8:0b:ee:c6:
4a:5a:d8:f7:97:7a:3c:a1:70:26:43:7f:4d:bf:51:cf:c0:e3:
36:07:70:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:46 2024 by rpki-client on console-ams.rpki-client.org