Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/0ltuaJGwPKuY5Z_7Js6R39LKSOc.roa
File: 0ltuaJGwPKuY5Z_7Js6R39LKSOc.roa (raw, json)
Hash identifier: s6ilkmTaHuz8OezTwimy2OG3GmkF64qwf644dEaLPEM=
Subject key identifier: D2:5B:6E:68:91:B0:3C:AB:98:E5:9F:FB:26:CE:91:DF:D2:CA:48:E7
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01877B5CA3D211036AB1B1A0FC362561FD54
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/0ltuaJGwPKuY5Z_7Js6R39LKSOc.roa
Signing time: Thu 13 Apr 2023 16:04:41 +0000
ROA not before: Thu 13 Apr 2023 16:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62068
IP address blocks: 45.131.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 May 2023 10:40:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7b:5c:a3:d2:11:03:6a:b1:b1:a0:fc:36:25:61:fd:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 13 16:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d25b6e6891b03cab98e59ffb26ce91dfd2ca48e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d1:aa:3c:de:75:43:cb:37:d6:8a:dd:91:55:
57:d8:38:da:35:20:e9:04:43:1a:23:00:bd:58:9e:
5a:98:34:74:94:e2:08:03:aa:50:5d:6b:5b:9f:ff:
19:40:a5:c6:d8:7c:21:1e:b3:7d:45:d0:ba:65:1f:
bc:8f:1b:ec:99:12:04:9c:d2:70:a5:c3:e8:ee:1b:
78:a8:f8:c5:34:91:49:d4:95:fe:28:47:fc:89:29:
3e:c9:4e:fd:b0:b1:81:15:54:50:a4:9f:d3:d8:ac:
27:d9:b2:82:70:b6:0f:13:56:56:8b:e3:09:ed:7e:
78:a3:df:ff:d2:18:d6:40:de:98:0a:90:b6:ad:18:
fa:f8:ff:6e:dc:bf:98:5a:85:4d:00:c7:f8:fe:4d:
ef:59:59:59:8c:08:7d:4a:25:d2:d6:2d:33:a4:30:
d0:4b:0f:c3:b9:f8:1d:00:6c:f3:02:93:b5:42:9f:
3a:ae:06:b6:70:9a:e5:09:db:26:91:be:ca:dc:e4:
5d:01:2d:0f:5d:e5:34:5c:5a:38:48:4f:64:b4:3a:
a9:5c:9c:d7:8f:a6:1c:e2:6a:aa:2d:6d:89:ca:da:
c7:a8:50:0e:b0:20:16:6e:8e:f6:9f:33:bf:16:58:
a0:a3:f7:28:da:9a:2a:61:82:60:64:83:58:c3:79:
f2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5B:6E:68:91:B0:3C:AB:98:E5:9F:FB:26:CE:91:DF:D2:CA:48:E7
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/0ltuaJGwPKuY5Z_7Js6R39LKSOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.134.0/24
Signature Algorithm: sha256WithRSAEncryption
41:1f:58:9e:8b:3f:b4:a6:74:53:1d:ed:5b:d2:20:ba:19:56:
68:0c:77:bc:07:f2:e2:86:bc:26:e1:b4:94:3e:ba:7e:49:20:
eb:cd:0b:04:16:4f:56:ad:cc:e2:73:87:9a:f1:ce:74:89:85:
06:e6:f1:f4:c1:35:ae:60:cd:85:ca:82:95:e4:82:36:d8:78:
46:94:3e:14:a6:2c:b4:5a:87:9b:98:b6:24:09:d3:33:43:83:
8f:d5:63:2a:5e:2d:6a:53:96:dd:e4:2d:31:7f:b3:71:9e:1d:
8a:f0:84:42:60:c3:ca:46:e2:b9:e0:cf:0b:c2:d7:bc:b0:e3:
71:1a:54:e3:77:8f:e2:b8:7e:b5:c1:b2:b0:39:93:48:0d:ec:
3b:b9:38:91:b9:5d:0d:a0:0a:0f:29:2b:c8:eb:28:1e:c0:3b:
e1:8e:e5:82:30:32:da:46:bb:26:64:26:41:7e:56:f4:72:54:
20:df:9e:7d:0b:56:8e:06:61:ef:20:a2:9d:0c:21:f6:38:48:
5b:e1:75:67:f5:00:1a:fb:bb:07:b4:50:b0:45:32:93:35:a8:
65:33:9c:aa:0f:ec:3a:83:e2:23:b4:1c:75:e2:08:bf:87:fc:
ad:c3:8f:a2:0e:f3:d6:aa:96:08:c1:1b:1b:4c:c3:d4:69:68:
14:36:26:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:19 2024 by rpki-client on console-ams.rpki-client.org