Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/SIEiSegs8K4UWM2qln18zbyOtwc.roa
File: SIEiSegs8K4UWM2qln18zbyOtwc.roa (raw, json)
Hash identifier: hnEVM77cP94ToRAR/bZlpaJTQFOeadpU5dNvBLsKCZ4=
Subject key identifier: 48:81:22:49:E8:2C:F0:AE:14:58:CD:AA:96:7D:7C:CD:BC:8E:B7:07
Certificate issuer: /CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Certificate serial: 018DC0A9AE2C2B9E21887FF45D10090DB188
Authority key identifier: E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/SIEiSegs8K4UWM2qln18zbyOtwc.roa
Signing time: Mon 19 Feb 2024 09:19:21 +0000
ROA not before: Mon 19 Feb 2024 09:19:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136787
IP address blocks: 45.157.124.0/22 maxlen: 32
Validation: Failed, certificate revoked on Tue 20 Feb 2024 08:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c0:a9:ae:2c:2b:9e:21:88:7f:f4:5d:10:09:0d:b1:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Validity
Not Before: Feb 19 09:19:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48812249e82cf0ae1458cdaa967d7ccdbc8eb707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b7:1f:9d:03:a0:51:f2:23:dd:16:4c:eb:f9:
b7:17:4f:77:62:fa:3d:67:cb:61:fd:e9:cd:a9:d0:
f5:d1:5c:92:17:31:46:52:fe:06:ef:61:49:88:97:
a1:06:28:f9:c2:aa:3e:21:8f:36:24:cd:24:d9:c1:
07:fb:65:27:05:9d:ec:11:97:da:b1:7a:7c:2d:e2:
ad:19:6d:29:c7:92:ba:a3:39:7e:33:12:2d:4e:6b:
0b:4e:f2:e0:67:f6:33:0c:b8:85:2e:66:64:82:5b:
e1:b3:b3:75:18:b8:03:49:f4:1b:73:de:42:d3:89:
55:7e:d6:1e:78:cb:8c:90:01:4e:02:73:16:65:9a:
1d:a6:6a:8f:e3:03:e5:d4:93:0e:1b:e0:b8:7c:4b:
d9:79:64:0b:57:61:d8:ec:69:69:fb:29:ce:c9:de:
aa:00:80:16:52:20:2f:6c:7b:f7:0f:9c:7f:ac:5e:
82:7e:86:7e:38:79:9d:40:b8:13:ce:c1:b5:ab:f8:
a1:b0:6a:6f:dd:19:71:3d:82:50:2e:18:5a:67:e2:
c2:ee:5a:d0:3a:aa:57:83:51:77:65:17:b7:0e:ea:
7d:22:90:c9:ea:ac:77:3d:7e:a2:d5:9f:be:25:a9:
f8:ff:08:c7:0b:1f:f1:7f:a8:cc:e1:e0:3b:47:66:
2e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:81:22:49:E8:2C:F0:AE:14:58:CD:AA:96:7D:7C:CD:BC:8E:B7:07
X509v3 Authority Key Identifier:
keyid:E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/SIEiSegs8K4UWM2qln18zbyOtwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.124.0/22
Signature Algorithm: sha256WithRSAEncryption
37:c5:3b:66:65:e6:d3:9f:8c:25:f0:e7:cc:c3:9d:c7:89:8f:
76:45:1a:c8:31:a0:4d:d5:f0:cb:6d:b3:ff:e0:73:b2:f5:61:
d1:3d:e2:f3:fe:68:fb:45:c5:18:6a:a6:1d:0b:ad:6b:f3:94:
36:e9:32:b9:94:5f:60:b0:d5:04:9f:a9:84:47:d1:41:70:c6:
c5:f3:89:60:e2:40:41:cf:b3:a8:ae:42:2f:79:b4:d5:7e:5e:
3c:05:eb:80:e9:ac:b9:05:88:a7:27:28:67:1a:f5:43:ae:6c:
64:3e:83:f7:39:df:27:15:93:be:7b:a1:78:79:8a:8c:3d:e9:
15:d9:86:e7:e4:65:e9:aa:9f:2a:f2:34:3e:11:15:eb:44:dc:
86:11:4b:21:0e:cd:a9:65:38:a9:38:37:7a:97:c2:79:13:1d:
9c:ba:aa:9e:0a:0c:ed:4d:c7:d8:59:ea:06:01:8a:4d:2d:29:
dc:0c:ee:b9:c3:a3:47:f3:7d:05:01:bc:eb:e8:45:01:cf:00:
d8:8f:ba:87:0e:64:50:5f:6f:33:13:51:2e:04:14:a6:ec:54:
8d:b6:fd:0e:db:59:f1:6a:36:16:99:5d:2a:40:25:40:df:06:
39:75:0a:2e:0f:38:20:e7:90:a5:54:b7:a8:bd:8d:3f:e7:7c:
9b:a6:61:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 20 12:20:08 2024 by rpki-client on console-ams.rpki-client.org