Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/6AAbZGoCnjnLSA7Qwul9EQjJyjs.roa
File: 6AAbZGoCnjnLSA7Qwul9EQjJyjs.roa (raw, json)
Hash identifier: tpYsTkcIL6hMcaymurnP+5XjGbPVDq/PIcSE6mb9tFs=
Subject key identifier: E8:00:1B:64:6A:02:9E:39:CB:48:0E:D0:C2:E9:7D:11:08:C9:CA:3B
Certificate issuer: /CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Certificate serial: 018CC5DC6CA0BAA94C5774A6357364569FBC
Authority key identifier: 55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/6AAbZGoCnjnLSA7Qwul9EQjJyjs.roa
Signing time: Mon 01 Jan 2024 16:30:06 +0000
ROA not before: Mon 01 Jan 2024 16:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210413
IP address blocks: 45.157.52.0/24 maxlen: 24
45.157.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Apr 2024 13:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:6c:a0:ba:a9:4c:57:74:a6:35:73:64:56:9f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Validity
Not Before: Jan 1 16:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8001b646a029e39cb480ed0c2e97d1108c9ca3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:79:11:78:19:a3:ab:4e:11:33:14:ae:41:bf:
c8:87:6e:b5:40:9f:26:01:ec:ad:c2:ef:21:f3:41:
18:31:f8:63:0e:b9:79:0f:d6:ee:3a:bd:63:c6:bb:
7d:3c:e7:d3:1b:0b:27:50:e5:be:23:b4:b0:d3:b0:
58:d8:fe:79:e6:67:86:f3:7d:2d:64:67:c3:ed:fa:
5a:b6:e0:ea:df:cb:f2:46:04:16:3e:9d:c9:8e:40:
50:fe:62:23:30:33:5b:45:29:20:bd:c0:de:8d:2f:
cf:08:61:64:92:70:d4:5f:a7:f1:91:e4:a5:5f:7c:
a2:07:9b:da:08:9c:7b:3f:a8:5c:f0:a2:4d:18:66:
6b:c6:07:31:a5:60:dc:ca:ab:2b:2c:8d:e5:76:a4:
63:d7:e6:70:ab:22:2c:d8:ba:26:a2:12:9d:3a:41:
8b:c1:cc:58:40:85:dd:b6:76:ea:89:a9:c7:a2:e0:
68:07:5f:22:64:8f:4b:10:c1:fa:29:b7:b0:ab:0e:
b1:06:de:e1:54:d5:7c:52:91:4f:0e:90:d5:ac:ca:
e2:e4:f7:76:06:cb:39:7f:0f:c7:03:e5:ee:84:97:
0d:32:fc:1c:7d:b9:52:e6:3f:8e:da:bb:7f:c1:3e:
30:69:ad:e4:68:09:4c:fa:a7:77:e0:15:4c:fd:c9:
c2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:00:1B:64:6A:02:9E:39:CB:48:0E:D0:C2:E9:7D:11:08:C9:CA:3B
X509v3 Authority Key Identifier:
keyid:55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/6AAbZGoCnjnLSA7Qwul9EQjJyjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.52.0/24
45.157.54.0/24
Signature Algorithm: sha256WithRSAEncryption
90:a4:a4:e7:9f:26:51:e4:69:93:08:48:e6:cd:4a:46:78:16:
b9:19:6d:cc:de:ff:5f:d8:87:2c:8b:b5:46:7d:00:f1:85:f0:
d6:ed:02:90:b9:10:45:2b:19:c5:43:05:e0:fa:00:1c:1e:57:
02:c5:39:7f:70:b8:e7:cd:67:85:8d:09:d7:29:70:e6:6d:bc:
80:84:97:b2:da:3b:66:6a:d8:03:84:9f:09:63:00:c2:2b:67:
ad:2b:21:a2:35:2c:bf:78:3e:4a:ff:3d:4c:7c:2b:6e:57:5a:
23:04:42:18:58:c0:8e:10:73:57:5f:6f:40:ce:6e:d2:2f:f2:
ab:ff:ce:23:42:7d:0b:00:19:3b:08:87:35:48:3d:1c:0f:2b:
5a:d3:49:bf:bb:7f:08:32:4f:dd:1f:e8:99:1e:52:3d:5f:28:
70:bb:88:07:20:d8:24:18:17:55:b4:d9:77:de:67:1e:aa:e0:
f3:0a:18:53:84:75:6e:cd:42:26:1a:7b:06:ac:5c:c4:f5:5e:
a8:a4:05:b7:b5:80:71:90:3e:9f:f4:62:1e:18:fe:69:7c:5a:
9b:95:93:7f:d6:a0:7c:96:af:4f:24:d6:bc:a0:a3:5f:97:bf:
47:2b:c9:4e:3f:d2:99:8e:b7:1c:5b:45:56:84:52:ca:b4:92:
87:84:35:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:16 2024 by rpki-client on console-fra.rpki-client.org