Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/xSZhguyhzw5N8LCuuYU87QDUwbs.roa
File: xSZhguyhzw5N8LCuuYU87QDUwbs.roa (raw, json)
Hash identifier: F2QSUeOekiURlVnGid3fK319AZCkynPgJtjC9xolWjs=
Subject key identifier: C5:26:61:82:EC:A1:CF:0E:4D:F0:B0:AE:B9:85:3C:ED:00:D4:C1:BB
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01882F798B722D859011724328E3557E1941
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/xSZhguyhzw5N8LCuuYU87QDUwbs.roa
Signing time: Thu 18 May 2023 15:27:54 +0000
ROA not before: Thu 18 May 2023 15:27:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 45.147.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Jun 2023 11:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2f:79:8b:72:2d:85:90:11:72:43:28:e3:55:7e:19:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: May 18 15:27:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5266182eca1cf0e4df0b0aeb9853ced00d4c1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f3:23:8e:13:bc:ee:0d:a3:62:02:9a:c3:a2:
2f:f5:48:9e:5e:0c:90:74:8b:7b:9a:58:24:4d:42:
a8:3f:8f:4e:40:df:35:0b:9e:9c:8c:7f:63:c1:4f:
8f:e0:72:27:f8:db:28:d5:83:8e:80:35:43:1a:f1:
0a:15:8e:1c:82:76:a6:c1:07:a8:00:32:ea:48:d3:
50:4e:c1:5b:8d:51:3e:93:6b:a8:ea:1f:f1:b5:aa:
d7:de:74:fd:68:33:e0:2e:f6:23:d5:c2:3f:e2:98:
00:e5:97:69:c3:65:ce:a2:46:8d:35:3a:df:35:b9:
b5:f2:35:15:c1:68:61:bb:69:f7:fa:aa:10:57:13:
b7:3b:c9:ea:4f:f4:88:6e:47:1f:8d:4d:09:c5:0c:
93:dc:4d:8e:fb:ae:a4:40:bd:4a:7c:8e:b3:f1:da:
83:46:3b:02:7c:d5:89:fc:c5:1d:d2:cc:fa:b7:98:
c9:84:d9:9e:b1:77:3f:ac:78:e8:15:68:45:c1:47:
66:81:09:f3:94:d2:10:92:36:08:08:cf:1f:d2:ad:
d8:67:c5:de:2a:17:b1:b3:dd:ba:dd:1c:e1:79:d3:
3c:9b:d1:5d:97:f9:4f:26:ef:df:5f:0d:41:32:b1:
18:09:40:0e:e3:0e:1d:2b:f2:ad:3a:69:2b:3e:5c:
ac:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:26:61:82:EC:A1:CF:0E:4D:F0:B0:AE:B9:85:3C:ED:00:D4:C1:BB
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/xSZhguyhzw5N8LCuuYU87QDUwbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.226.0/24
Signature Algorithm: sha256WithRSAEncryption
40:5b:9c:4c:19:e5:c2:fb:67:9f:d7:5c:c7:44:04:1b:02:59:
07:20:6f:8d:f5:e4:c2:b8:ff:cc:e2:90:5d:37:ce:fb:40:8a:
6f:14:bd:a7:85:c7:e6:06:13:09:5f:12:9c:c1:f4:a0:54:05:
fc:fa:0c:c7:ff:a5:35:7f:7c:e4:a4:27:67:02:b1:f3:ab:63:
52:28:d3:a2:64:ed:33:02:62:36:d8:03:c9:88:14:b4:f4:8e:
18:ba:bc:da:4f:94:73:c4:f4:20:f2:3a:eb:a3:8a:02:26:4f:
80:83:9b:b8:6c:f6:91:28:e1:0e:33:39:09:02:f1:32:bc:80:
74:c2:46:c7:09:00:cd:08:b2:cc:6a:61:1a:a7:5a:b7:2d:d4:
25:30:8b:54:0f:0f:56:15:73:01:53:fb:14:8c:6f:d1:d2:18:
2a:5e:ba:c8:54:92:e1:db:b5:18:5e:3c:38:d2:22:a2:09:b5:
2e:23:34:c5:be:a7:5a:9e:61:16:dc:bc:bf:85:19:55:67:2d:
a5:b0:5f:94:44:79:12:59:10:92:60:3d:2e:02:5d:d2:9d:69:
de:c7:bb:4f:37:9b:93:c2:55:b5:77:88:29:cc:5b:4f:c8:55:
17:3e:c3:e5:dc:ca:01:f3:43:05:67:1e:eb:38:40:fd:93:89:
bf:9c:40:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:44 2024 by rpki-client on console-fra.rpki-client.org