Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/RwKMjodOScD2RMrj8ubSKGSbsYo.roa
File: RwKMjodOScD2RMrj8ubSKGSbsYo.roa (raw, json)
Hash identifier: 2E6scTnw/tAqzJV8M3DvJyVE0qjz2PmWLMwcuRJcGb0=
Subject key identifier: 47:02:8C:8E:87:4E:49:C0:F6:44:CA:E3:F2:E6:D2:28:64:9B:B1:8A
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 01856FB11D491FB2A1C73F01B7FEC2D67FC0
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/RwKMjodOScD2RMrj8ubSKGSbsYo.roa
Signing time: Sun 01 Jan 2023 23:35:56 +0000
ROA not before: Sun 01 Jan 2023 23:35:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56876
IP address blocks: 45.137.246.0/24 maxlen: 24
45.137.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b1:1d:49:1f:b2:a1:c7:3f:01:b7:fe:c2:d6:7f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Jan 1 23:35:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47028c8e874e49c0f644cae3f2e6d228649bb18a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:1f:4a:29:25:33:70:fc:92:ee:e0:dc:cf:7e:
a1:b3:a3:dd:3f:bb:c0:45:3f:e1:c8:8c:78:16:ec:
cc:97:db:19:a9:39:75:bd:b6:21:dd:3d:94:88:35:
cc:8b:c7:ac:fc:8c:32:d5:7d:f3:da:ed:da:28:81:
f8:e3:b2:da:11:ae:8d:25:aa:a1:43:49:22:7a:94:
39:b8:10:de:e8:0b:e3:af:ee:a6:78:05:80:fa:dd:
b4:f6:2a:ef:1b:a6:65:23:68:7d:4d:30:3e:fa:da:
09:37:64:0f:66:4b:0a:66:7d:98:8d:e9:26:1d:2c:
19:68:8b:de:08:0d:05:ab:21:58:b2:2e:41:91:e5:
17:d0:88:bf:25:c8:92:a9:39:6e:f5:cb:3d:74:4b:
39:de:0a:9b:6d:77:c0:c8:9a:86:85:5f:ad:45:62:
9c:bd:53:3c:70:94:64:fc:30:7a:e1:fd:60:f2:ff:
fd:f6:a3:5d:0f:c7:73:10:6b:18:13:ff:69:56:75:
a5:54:35:79:4b:da:8e:93:af:46:05:4e:0f:c4:7b:
d9:30:55:c1:f7:40:87:70:e6:60:a8:40:b4:76:5a:
7a:48:a1:59:57:8e:1e:1a:72:61:62:81:7a:3a:8b:
d7:50:f9:a0:05:66:d0:ca:f5:f3:63:b0:a4:3d:02:
dc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:02:8C:8E:87:4E:49:C0:F6:44:CA:E3:F2:E6:D2:28:64:9B:B1:8A
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/RwKMjodOScD2RMrj8ubSKGSbsYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.246.0/23
Signature Algorithm: sha256WithRSAEncryption
15:18:e2:23:de:6b:4f:b7:a4:ba:ab:d3:bb:c1:35:04:42:f0:
86:64:55:74:44:ab:12:a1:68:4e:9d:a0:e1:06:f7:f5:ed:bf:
d0:da:9a:36:8e:67:5b:88:63:1c:cf:4f:30:f8:86:7f:97:e7:
a0:ac:86:e2:f8:1b:54:0b:67:e4:cf:de:1c:95:8d:1c:36:a0:
1c:bb:cb:4d:c2:a6:88:11:88:a4:7b:20:cb:15:37:2f:a2:b6:
27:75:5f:64:55:c4:c8:ae:ce:28:93:9d:59:72:92:6f:11:c6:
b5:11:f6:a9:9c:62:10:94:2c:75:2e:8e:cc:bf:29:b0:31:5a:
cd:84:85:c6:f3:bf:b1:e4:3f:6e:f8:33:4d:58:7d:83:9d:d1:
1e:1b:6d:d3:d8:df:23:12:9c:4d:5c:c2:e2:03:bd:22:d1:e1:
95:7e:53:a0:5d:0b:c6:7a:2e:59:1b:8b:19:7c:09:90:44:3e:
ca:f5:07:1b:ea:7d:d0:20:a9:e9:1b:fa:78:a4:af:6c:e7:d3:
46:aa:87:71:7c:ab:19:7d:16:06:ab:94:b5:92:20:d2:87:6c:
7e:5e:33:f4:54:79:45:f1:7e:15:67:03:1a:4c:80:33:5a:77:
41:4f:0b:d3:4f:22:d1:9d:89:75:00:d1:a3:05:42:e5:45:68:
20:31:4b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:36 2024 by rpki-client on console-ams.rpki-client.org