Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/4JGLZAjCCkrwmWo9VfkRa15DkhQ.roa
File: 4JGLZAjCCkrwmWo9VfkRa15DkhQ.roa (raw, json)
Hash identifier: nPIhz1VOfqWl9YSNDZ6YDzyp2VRSgiaX793l/5J/+wE=
Subject key identifier: E0:91:8B:64:08:C2:0A:4A:F0:99:6A:3D:55:F9:11:6B:5E:43:92:14
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 0185737AC182FD9802EFE81CABB6228D2885
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/4JGLZAjCCkrwmWo9VfkRa15DkhQ.roa
Signing time: Mon 02 Jan 2023 17:15:02 +0000
ROA not before: Mon 02 Jan 2023 17:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48020
IP address blocks: 45.67.184.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:7a:c1:82:fd:98:02:ef:e8:1c:ab:b6:22:8d:28:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 2 17:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0918b6408c20a4af0996a3d55f9116b5e439214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ed:54:a5:3a:a7:20:8f:c7:38:b2:fa:6c:95:
94:ec:96:6c:3e:59:0a:29:c1:33:36:a9:41:53:b6:
25:b0:ec:7b:61:9f:07:50:ef:e1:ab:fd:d0:73:93:
01:31:0e:b2:b3:a4:90:8c:12:9d:82:84:98:36:42:
b3:8c:db:2d:19:bc:fb:18:83:5c:7f:3f:e6:86:d9:
61:56:16:51:4c:f7:11:4a:2f:25:a4:b6:2b:cc:46:
fd:7f:26:07:f3:02:ef:46:1d:ed:e4:45:92:1f:65:
cd:ea:af:cc:15:51:29:a3:12:bb:1b:85:83:e2:e8:
14:b9:46:fe:e7:69:84:ca:a0:74:50:ec:ca:4a:aa:
b3:ea:b2:88:29:05:4c:6f:e3:63:7a:3e:7d:b9:53:
26:97:05:44:ef:d0:81:63:fa:54:e2:2e:ee:0e:2b:
2f:79:eb:1d:dd:b5:f6:f9:dd:4d:c8:23:f6:35:fb:
c9:75:29:12:ac:a2:c3:cb:2d:77:2a:49:c4:4f:25:
17:97:08:58:62:c4:3d:d1:dd:6e:a3:7b:b3:50:81:
48:ea:c6:4c:10:28:e3:b5:64:5c:94:22:a9:cb:a8:
29:23:9e:fe:47:a0:9c:06:fe:ea:df:d7:ed:95:f7:
d9:c5:df:02:4d:3d:01:f1:77:e7:64:7d:38:0c:e5:
2d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:91:8B:64:08:C2:0A:4A:F0:99:6A:3D:55:F9:11:6B:5E:43:92:14
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/4JGLZAjCCkrwmWo9VfkRa15DkhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.184.0/22
Signature Algorithm: sha256WithRSAEncryption
55:b8:3c:2a:c5:8e:5f:bd:07:17:32:53:5a:c2:7a:17:5e:0e:
b6:d6:f9:71:40:c1:b3:08:36:e1:ef:fd:67:ce:76:85:3e:76:
06:92:d9:19:a1:85:aa:e7:91:68:c6:df:c2:f5:c5:0e:43:ae:
ac:19:a7:38:a9:2a:99:00:9c:6c:84:60:86:01:ef:26:6e:80:
b7:26:eb:c5:7d:5c:4f:4e:61:34:11:ef:65:26:56:a7:53:1d:
75:f5:a6:da:dd:fe:a9:4d:21:8c:3d:fc:fe:a4:e3:54:5a:22:
94:9e:43:30:5e:cc:63:36:b9:64:17:8d:75:45:cc:43:db:54:
da:b9:23:91:91:58:a3:92:11:47:9c:81:21:87:18:9f:94:43:
2d:06:3e:bc:30:8b:be:b5:76:c2:05:21:df:ac:8f:be:53:df:
7c:94:38:00:cd:9e:be:5a:65:4f:8e:de:0c:9b:bf:c6:ea:d6:
6c:7a:c5:0e:84:69:57:31:a9:f7:c5:f1:61:4d:91:15:8d:26:
42:62:2e:fe:56:e6:29:fc:59:1a:8a:dc:74:b1:c5:30:70:c0:
c5:91:06:3d:8b:a6:5f:ea:46:2b:2f:d1:d3:72:cf:fe:65:ce:
29:e3:35:03:1f:0b:3a:74:c6:cc:3c:5e:77:af:d6:c3:76:25:
cd:2d:49:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:50 2024 by rpki-client on console-ams.rpki-client.org