Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/e4CKUiWtWEDDfWM_sXcYq1VPYjE.roa
File: e4CKUiWtWEDDfWM_sXcYq1VPYjE.roa (raw, json)
Hash identifier: jlXPYXswlC3sxJD/4kR1U9tmXIVL42ItVfuxvgK/D2o=
Subject key identifier: 7B:80:8A:52:25:AD:58:40:C3:7D:63:3F:B1:77:18:AB:55:4F:62:31
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 018570F0B04A33507FBB09BBF19E3ED5F526
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/e4CKUiWtWEDDfWM_sXcYq1VPYjE.roa
Signing time: Mon 02 Jan 2023 05:25:00 +0000
ROA not before: Mon 02 Jan 2023 05:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211237
IP address blocks: 45.67.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 22 Jan 2023 16:12:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:b0:4a:33:50:7f:bb:09:bb:f1:9e:3e:d5:f5:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Jan 2 05:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b808a5225ad5840c37d633fb17718ab554f6231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bd:b9:a8:80:ce:37:24:04:80:4f:f9:b0:e5:
35:aa:67:76:34:f0:97:bf:ce:d3:29:b0:64:2f:ee:
c6:cc:d9:c1:82:94:95:b5:2d:16:1f:19:2c:73:cf:
1e:e2:2e:0e:66:9e:32:99:7a:0b:de:5a:c9:fb:91:
99:c3:e6:0f:86:e6:4b:67:31:df:7f:cb:de:86:09:
ee:60:0c:da:6a:a6:7a:28:4e:53:60:9d:d8:b2:7a:
d9:c1:ba:a6:43:a1:eb:ba:fe:c0:82:41:f6:cd:e6:
7c:30:c0:e4:d2:24:d2:20:06:9f:c6:87:16:89:15:
a9:57:ee:b8:e9:e8:35:ac:b0:25:92:f5:04:63:10:
99:1f:4d:a0:0b:cf:a9:0a:2a:b9:db:c6:22:06:8d:
cd:e1:22:ab:2a:ac:94:40:30:8b:88:39:83:f9:e9:
31:76:be:d7:51:a8:54:e8:27:0c:5d:a4:a5:4f:f9:
35:59:90:b1:bb:dc:0c:7b:4c:17:2c:47:9d:c2:c2:
41:f5:09:a0:f7:65:f5:63:75:6e:ca:06:28:a2:46:
f8:a6:f1:74:52:b8:42:c4:0f:3a:4a:17:47:07:9b:
89:14:af:ea:74:89:6c:bd:df:3a:5a:e4:15:df:2c:
b0:d8:b0:db:ce:32:93:6a:0c:a2:6b:1b:56:6a:a2:
5a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:80:8A:52:25:AD:58:40:C3:7D:63:3F:B1:77:18:AB:55:4F:62:31
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/e4CKUiWtWEDDfWM_sXcYq1VPYjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.202.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:36:a0:f3:bf:01:60:65:e3:ca:cb:1f:82:29:98:61:50:19:
c3:a1:64:05:99:b2:0c:49:41:a2:50:7f:10:e5:98:a5:96:96:
48:9c:7e:74:85:c3:79:25:8f:f1:8e:51:9c:d9:7a:fb:dc:7d:
e8:f4:f7:c1:54:22:5e:31:ab:85:9a:5a:9a:69:50:4e:7a:97:
ac:df:5e:a0:54:d8:1d:fe:79:0b:7f:42:54:a5:37:d3:8d:14:
9c:ee:5a:e3:d3:ee:51:80:d9:30:00:ee:ae:9c:ee:93:0e:22:
88:59:bf:47:3e:65:c2:a7:6b:f3:8c:ac:6f:79:ca:94:f9:41:
c2:4d:e2:19:05:d6:83:fc:69:f4:bb:60:f6:7d:92:f9:16:dc:
27:61:19:88:dc:76:dc:dc:23:32:35:7a:4e:ae:66:df:fd:9e:
22:92:85:7f:06:b8:37:f4:87:d7:64:5a:9c:5e:ae:cf:ee:5f:
00:d2:e5:82:e5:85:75:30:f3:57:be:c1:78:c1:19:bc:28:45:
6c:c9:ac:db:75:ab:cb:ed:db:0c:97:02:22:2d:1d:8f:21:bc:
84:b4:f5:2a:c2:94:1d:20:5d:e2:43:b1:68:2c:e5:55:b5:5c:
79:4c:24:6e:8e:af:6e:72:a8:21:94:61:b1:28:7b:cc:4f:c6:
c6:de:86:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:48 2024 by rpki-client on console-ams.rpki-client.org