Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/EZxIp7cvOj9EpefWuSPfoLL6SGc.roa
File: EZxIp7cvOj9EpefWuSPfoLL6SGc.roa (raw, json)
Hash identifier: 2P0LCEdvTVUBjCGcF/APzoAqLFiWn5NtvLsyM7VvvxE=
Subject key identifier: 11:9C:48:A7:B7:2F:3A:3F:44:A5:E7:D6:B9:23:DF:A0:B2:FA:48:67
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 0190E07EB8905E06854E29D8FD50621B5116
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/EZxIp7cvOj9EpefWuSPfoLL6SGc.roa
Signing time: Tue 23 Jul 2024 16:48:39 +0000
ROA not before: Tue 23 Jul 2024 16:48:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215480
IP address blocks: 45.11.184.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 31 Jul 2024 03:55:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e0:7e:b8:90:5e:06:85:4e:29:d8:fd:50:62:1b:51:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Jul 23 16:48:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=119c48a7b72f3a3f44a5e7d6b923dfa0b2fa4867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ab:45:8b:33:11:ee:ca:15:ec:43:cb:0a:20:
e3:72:16:93:c9:e9:9e:da:4d:ba:ec:03:d8:d0:fe:
df:46:41:a0:eb:4b:21:8f:a3:0b:00:fc:8b:e1:e5:
60:0e:96:62:00:c9:b3:5f:d5:81:c3:f7:fb:25:a2:
7c:5c:3c:6a:90:c2:2c:bd:15:23:47:21:64:61:7f:
40:2b:25:0e:2c:3d:03:bd:77:9c:1d:2f:5d:46:72:
a0:e5:3f:4b:7a:2a:4a:d1:86:e1:d1:1d:27:3c:96:
78:b8:98:64:0d:9a:69:90:f1:43:8f:47:49:84:a6:
0f:bb:1b:ba:24:3d:4a:0f:e4:3a:d3:76:be:a7:ee:
d3:f7:3a:6a:93:6a:42:5b:8e:a5:82:05:39:dd:b6:
d1:6d:de:b7:53:d2:c9:85:70:21:2e:e2:ec:52:c7:
6f:00:b5:48:99:07:95:74:0d:c6:63:06:32:9a:0b:
d1:8b:37:6a:34:23:c3:e9:8f:13:03:71:94:cb:48:
a3:d4:6f:e0:01:9c:ce:7c:6b:e8:55:66:94:4d:6c:
59:4b:6b:c5:9f:28:f2:16:cb:24:9c:25:60:72:84:
8b:26:16:ea:7f:47:63:b6:73:05:30:13:6c:62:9e:
65:4c:87:ce:a4:1e:81:38:07:b5:17:58:dc:61:4f:
ec:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9C:48:A7:B7:2F:3A:3F:44:A5:E7:D6:B9:23:DF:A0:B2:FA:48:67
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/EZxIp7cvOj9EpefWuSPfoLL6SGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.184.0/22
Signature Algorithm: sha256WithRSAEncryption
41:74:dc:5b:ce:1a:77:ac:54:1d:e5:93:7a:4b:44:0e:ee:6d:
18:33:d9:ea:ae:ff:5f:61:b8:d5:84:d0:97:de:6a:fb:b1:92:
7e:f6:56:40:6e:64:02:76:42:7b:fa:be:89:7a:00:5f:55:08:
88:4a:82:2c:1c:c9:b0:1a:2d:60:d6:1c:a4:f7:d8:bd:7d:ca:
c5:06:a3:1a:6d:f7:3c:1a:a8:d7:15:8f:5a:70:d0:67:18:25:
b4:86:7d:97:2d:f2:35:56:2f:45:0c:38:f6:1b:96:36:c5:51:
b8:92:88:e4:ea:6d:6f:b2:50:39:2f:7f:4b:41:5c:ce:a2:d9:
b7:78:3f:88:b6:02:6f:92:fd:3d:a5:e4:56:e8:8a:7f:a4:6b:
46:f5:45:fb:db:a7:b0:04:a2:91:9d:af:40:64:0f:5a:40:51:
03:1c:16:93:f8:6c:b6:b6:92:04:5e:de:21:d9:b5:c2:60:0e:
f1:e0:f5:33:95:8e:11:02:0f:06:d5:cd:1e:55:6e:3b:e2:5d:
f0:37:f5:9f:c1:bd:d7:2c:06:21:f3:98:84:7c:3f:10:bf:b0:
79:dc:ee:61:37:c4:ed:6d:63:43:97:85:18:e7:e8:15:01:33:
b8:17:62:24:e5:57:54:8d:2b:08:e5:85:fc:d3:29:12:53:de:
77:af:42:b2
-----BEGIN CERTIFICATE-----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Generated at Wed Jul 31 05:52:33 2024 by rpki-client on console-fra.rpki-client.org