Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/s5EKXlhT_jeUZAX09ccdfvcNRbI.roa
File: s5EKXlhT_jeUZAX09ccdfvcNRbI.roa (raw, json)
Hash identifier: GzCJkXr7eQXIVS9JPsYDPWsfg5LosiaDtl6Z/jXmAIk=
Subject key identifier: B3:91:0A:5E:58:53:FE:37:94:64:05:F4:F5:C7:1D:7E:F7:0D:45:B2
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01882F7C4ADA7383C5D1F111374A56143CEE
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/s5EKXlhT_jeUZAX09ccdfvcNRbI.roa
Signing time: Thu 18 May 2023 15:30:54 +0000
ROA not before: Thu 18 May 2023 15:30:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 45.131.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Nov 2023 20:56:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2f:7c:4a:da:73:83:c5:d1:f1:11:37:4a:56:14:3c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: May 18 15:30:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3910a5e5853fe37946405f4f5c71d7ef70d45b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e3:6d:75:9d:3e:18:95:3c:5c:b7:f2:b4:9b:
99:e9:dd:a3:ab:47:c8:39:c4:94:c0:b1:99:96:33:
b2:56:3a:90:7c:e3:2c:b5:2e:66:ba:ad:bf:ae:74:
7b:e3:a9:ab:24:b3:87:d1:a8:c9:b6:88:0f:20:23:
66:89:7e:d7:36:1a:a3:f1:97:40:80:14:dd:b0:56:
5b:97:f9:39:4f:74:6f:d9:a6:8b:89:04:6f:f5:a0:
7f:48:e2:94:72:84:a5:02:87:f4:fc:01:a2:a6:e6:
f6:8c:97:9d:55:d0:46:dd:72:b8:4b:88:f3:8f:43:
fe:43:39:3d:77:e1:a2:76:d3:63:1a:ae:44:55:92:
a3:b3:d8:4b:06:d1:10:a4:50:85:80:f2:ed:00:13:
59:9e:e0:58:b0:2b:83:58:d4:50:0f:d8:54:d6:65:
7c:92:97:47:a6:3e:bf:15:e9:5b:fa:c2:db:e0:61:
7a:5c:97:13:64:3f:e1:82:36:e8:e8:5e:bc:19:87:
ed:af:09:1d:7d:2d:37:8c:9f:60:26:0e:23:c4:94:
37:72:24:0b:37:5a:9f:17:ff:d2:52:69:10:7c:22:
f2:47:f1:1a:c7:01:65:b1:66:74:67:08:2c:23:d4:
a2:5d:fa:83:ad:03:de:d7:04:8e:e9:6c:3b:a0:f5:
65:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:91:0A:5E:58:53:FE:37:94:64:05:F4:F5:C7:1D:7E:F7:0D:45:B2
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/s5EKXlhT_jeUZAX09ccdfvcNRbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.134.0/24
Signature Algorithm: sha256WithRSAEncryption
05:fa:ef:29:55:3b:06:8b:5e:d1:fa:f2:18:ed:c3:dc:50:3e:
e6:99:39:e6:75:a8:7e:9d:30:aa:73:f1:78:fe:d2:34:ac:71:
c8:66:50:40:86:5c:45:27:95:9b:25:fe:03:2e:fd:0d:cd:97:
c2:06:f0:a1:53:35:fe:93:f3:b2:5b:17:aa:ed:bd:81:32:51:
47:5e:ef:b9:0d:39:1b:6b:e1:d4:e7:53:79:2b:fe:bb:f7:37:
25:72:96:93:33:65:88:ef:20:28:13:46:ec:a9:b2:18:c6:b9:
8c:d4:f2:30:4e:69:dd:b5:ac:74:9c:e4:ca:5e:91:a6:6f:38:
83:95:ff:6b:71:d3:a1:f8:51:fa:e3:b2:d6:f0:25:6d:65:b7:
2e:c6:65:1c:14:81:1c:c8:65:61:01:d1:39:38:0b:bf:1b:33:
7c:24:27:25:86:80:14:ab:c4:da:e9:eb:2f:da:87:1f:f4:2e:
5e:e5:1a:34:7e:e2:a4:a8:bc:89:86:3e:33:23:00:76:bc:92:
b4:aa:93:94:24:ba:51:51:b2:42:a9:a4:17:77:74:b1:ca:a5:
9b:62:d0:e6:af:c5:85:31:b0:0d:84:ca:2b:9b:2b:9f:3a:c0:
a2:0f:c3:4a:d2:a7:f0:3f:3a:ee:0c:a0:e0:46:d9:f9:6b:a6:
6a:e9:1f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:29 2024 by rpki-client on console-ams.rpki-client.org