Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/5Fwp7i7k-_56OKIa7nGk-uuRVew.roa
File: 5Fwp7i7k-_56OKIa7nGk-uuRVew.roa (raw, json)
Hash identifier: 5S03GildkuZ1YXxG+oqQqVhW0FRSvZ3/9XwiEi56wR0=
Subject key identifier: E4:5C:29:EE:2E:E4:FB:FE:7A:38:A2:1A:EE:71:A4:FA:EB:91:55:EC
Certificate issuer: /CN=48559018adff16eadf5551b2cb74d8f6860cd044
Certificate serial: 018877967FD19C7153A9D140584580CF2097
Authority key identifier: 48:55:90:18:AD:FF:16:EA:DF:55:51:B2:CB:74:D8:F6:86:0C:D0:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFWQGK3_FurfVVGyy3TY9oYM0EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/5Fwp7i7k-_56OKIa7nGk-uuRVew.roa
Signing time: Thu 01 Jun 2023 15:32:11 +0000
ROA not before: Thu 01 Jun 2023 15:32:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48146
IP address blocks: 45.141.64.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:77:96:7f:d1:9c:71:53:a9:d1:40:58:45:80:cf:20:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48559018adff16eadf5551b2cb74d8f6860cd044
Validity
Not Before: Jun 1 15:32:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e45c29ee2ee4fbfe7a38a21aee71a4faeb9155ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c7:69:10:d7:eb:87:cc:2e:16:29:be:84:f2:
d2:b3:fb:0c:1f:c0:98:e6:21:7b:03:d1:a6:cf:44:
eb:91:2f:e4:68:05:b3:5e:cd:d3:f2:5c:de:45:77:
e1:73:09:87:aa:c4:84:1d:c0:08:02:7b:cb:7d:7b:
23:0e:03:33:73:7e:c3:73:4f:ef:db:28:8c:a6:ae:
27:cf:ff:97:5a:c0:2d:bf:a5:c8:34:f5:1f:b2:cf:
22:49:eb:b5:f0:ba:9f:75:e9:ac:42:67:9a:db:76:
d9:dd:6d:3c:57:3d:04:c8:0d:db:eb:cf:12:d6:de:
20:a0:2b:46:5d:39:71:05:5b:83:cd:41:9b:90:d6:
21:b0:cb:03:a2:93:ab:e1:a4:1f:2d:51:ce:62:83:
0c:68:10:83:bf:9f:d1:a4:43:b2:33:c5:ff:aa:e8:
18:3d:f0:10:1b:d8:da:32:05:62:68:ff:1e:25:59:
27:b5:30:cd:db:7f:85:6c:69:93:91:3b:72:54:ce:
1f:fc:61:e4:ff:9a:f2:c4:8e:6a:19:66:82:70:2f:
fa:b6:11:26:27:40:44:7b:94:3f:1f:99:d2:21:f4:
31:f2:94:66:83:c8:c3:c1:d1:b2:c8:5a:9d:ba:af:
e3:70:de:e6:b8:d9:f5:fa:8e:7a:9a:ec:de:61:7f:
c0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5C:29:EE:2E:E4:FB:FE:7A:38:A2:1A:EE:71:A4:FA:EB:91:55:EC
X509v3 Authority Key Identifier:
keyid:48:55:90:18:AD:FF:16:EA:DF:55:51:B2:CB:74:D8:F6:86:0C:D0:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFWQGK3_FurfVVGyy3TY9oYM0EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/5Fwp7i7k-_56OKIa7nGk-uuRVew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.64.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:c1:1b:3a:31:f2:ea:a0:80:30:6d:4e:8f:95:35:11:8d:c9:
46:b8:74:0e:22:44:e9:e8:24:b4:d6:5c:1a:c3:fa:90:15:ab:
ac:6d:15:27:7f:82:f8:bd:0b:a8:ec:bc:62:09:99:e3:77:06:
aa:09:c7:72:eb:70:50:76:7e:c4:11:d5:86:0f:94:b3:db:82:
e8:68:a5:93:0c:b2:00:ab:82:8f:f0:ba:ea:e8:ff:64:37:ae:
ec:85:af:ae:f6:11:1f:c6:2f:01:dd:14:39:61:c4:7e:7f:fd:
1b:f8:87:86:74:96:3d:54:b5:20:5f:b7:e2:15:42:e2:9c:0b:
f3:28:df:3f:e9:5c:41:34:78:03:b2:98:21:7b:ba:df:37:ed:
a2:37:a7:f5:2b:b5:18:f0:6a:89:bc:46:d5:ce:79:9c:b5:9c:
49:8d:7e:ec:15:c5:48:9b:96:4f:ba:c4:75:a3:fa:04:c7:b9:
1f:b3:6c:fb:b7:ff:9f:3e:eb:02:3f:4c:ee:c9:e5:be:4f:47:
78:b4:41:25:0d:62:f9:12:7c:ac:42:2f:39:6f:78:0c:90:f4:
23:13:4a:d7:87:91:3a:5a:6c:16:07:2b:13:4d:84:7d:42:74:
dc:b8:49:62:2d:3a:c5:9d:53:9a:10:17:f8:73:88:53:a1:27:
f3:ab:1a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:14 2024 by rpki-client on console-ams.rpki-client.org