Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/5KFrhAAgobcjPkDaKoBFAcT4dh0.roa
File: 5KFrhAAgobcjPkDaKoBFAcT4dh0.roa (raw, json)
Hash identifier: HavGIXiuOEQHLPcHjsRWVvogB1iGXJ660bAZp93APdk=
Subject key identifier: E4:A1:6B:84:00:20:A1:B7:23:3E:40:DA:2A:80:45:01:C4:F8:76:1D
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 018CC7933F8A646ED7F658672E8424ABDA64
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/5KFrhAAgobcjPkDaKoBFAcT4dh0.roa
Signing time: Tue 02 Jan 2024 00:29:25 +0000
ROA not before: Tue 02 Jan 2024 00:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56876
IP address blocks: 45.137.246.0/24 maxlen: 24
45.137.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jan 2024 14:17:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:3f:8a:64:6e:d7:f6:58:67:2e:84:24:ab:da:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Jan 2 00:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4a16b840020a1b7233e40da2a804501c4f8761d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a3:5f:10:8a:3b:50:92:59:ee:be:8d:ee:3b:
52:b2:50:db:36:78:7d:0b:a5:00:e8:3c:ee:61:4a:
34:4f:1c:55:0c:92:08:50:c3:29:1f:13:0a:92:52:
4d:eb:97:6b:1a:b2:91:3b:cc:31:a8:a7:de:7e:c7:
e4:56:e3:63:da:17:8a:de:21:87:08:e8:41:18:25:
57:21:45:2a:92:ae:c6:85:0c:79:a1:db:d5:05:c7:
27:ac:a0:03:c4:75:82:e8:5a:ee:40:5f:6a:4c:d7:
19:d6:29:32:d6:03:c6:9c:44:9b:10:ac:84:58:92:
1a:1b:13:5f:f3:1a:bf:4b:98:f8:b7:67:87:7d:af:
bf:09:89:9a:29:e9:57:80:f9:e1:ca:8a:a7:0a:db:
fb:d8:d0:af:d0:68:9d:f5:7e:f9:39:28:95:45:b7:
94:fb:70:d6:1c:88:61:b8:34:ea:fa:11:cf:3b:e4:
7d:e2:06:1d:a3:b9:5d:96:48:9c:8e:9e:da:8f:e6:
e4:4a:af:88:a9:48:36:ec:c2:b6:cf:76:26:6f:1f:
87:8d:ae:9e:31:f4:00:76:a1:43:da:3b:53:a2:ef:
22:33:b9:3b:f1:6d:fb:00:97:18:a4:90:dc:2e:19:
64:90:cc:97:4d:4d:16:b7:2f:84:73:bd:4c:5a:2e:
ac:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A1:6B:84:00:20:A1:B7:23:3E:40:DA:2A:80:45:01:C4:F8:76:1D
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/5KFrhAAgobcjPkDaKoBFAcT4dh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.246.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:c9:10:ed:5f:e4:f7:79:73:7f:d9:b5:c8:fe:5b:10:66:31:
1e:87:6e:eb:46:a2:f7:8d:d2:2b:df:6e:d0:e2:29:f1:84:4b:
06:d2:90:5d:95:c4:06:a3:dc:fd:5f:df:98:df:d3:e5:8f:1d:
ca:5e:b2:2d:e2:29:61:c4:aa:89:c4:52:c2:dc:ef:ee:da:53:
22:00:26:c4:b8:dd:ee:85:e6:64:1b:64:81:d2:1d:82:f9:7a:
c3:c7:e6:1c:6a:7c:b9:89:ef:41:1e:4f:78:4c:a6:b2:b0:19:
7a:77:76:fd:79:f1:2b:68:6f:44:a9:c0:41:4a:b5:ac:d0:43:
49:bb:af:79:14:7c:c3:ae:d5:38:82:5e:c7:72:b6:98:5a:05:
01:37:44:ef:ca:b9:6e:c3:a8:95:c0:e1:5c:28:b3:9d:ab:8b:
46:27:1a:e8:9e:31:80:b6:a0:e4:69:a7:f2:aa:9e:16:20:50:
2c:a1:f0:df:ba:8f:84:1d:b9:01:e9:93:bb:1a:ef:41:18:d0:
04:40:e5:98:6f:06:5c:6c:4d:b5:6c:18:19:1c:ef:20:d9:cb:
72:0f:4a:33:9a:0a:b7:18:f6:31:ec:78:c0:3e:0e:75:fa:27:
56:da:6f:4a:61:b1:dd:2d:43:e6:5e:6f:f5:bf:77:f5:1d:09:
9c:2b:1e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:48 2024 by rpki-client on console-fra.rpki-client.org