Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/99sbY1YG0RGZTc_s_tgR_YHLheY.roa
File: 99sbY1YG0RGZTc_s_tgR_YHLheY.roa (raw, json)
Hash identifier: lkpC66UgZ1SlNZw/0agaQglMN7KyH9+Y2070+KTyxXA=
Subject key identifier: F7:DB:1B:63:56:06:D1:11:99:4D:CF:EC:FE:D8:11:FD:81:CB:85:E6
Certificate issuer: /CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Certificate serial: 018CC5DC6ACED0A32293F44CD407B171EFB5
Authority key identifier: 55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/99sbY1YG0RGZTc_s_tgR_YHLheY.roa
Signing time: Mon 01 Jan 2024 16:30:05 +0000
ROA not before: Mon 01 Jan 2024 16:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 45.157.53.0/24 maxlen: 24
45.157.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Apr 2024 13:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:6a:ce:d0:a3:22:93:f4:4c:d4:07:b1:71:ef:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Validity
Not Before: Jan 1 16:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7db1b635606d111994dcfecfed811fd81cb85e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0e:aa:8f:ad:83:dc:1e:39:90:0e:60:db:4f:
19:1e:98:24:89:f8:bd:16:e5:4f:03:a0:1a:1d:ab:
f2:68:a4:a8:c6:0a:51:35:21:e2:eb:ae:5f:75:eb:
57:76:11:a2:6c:be:ff:f5:d4:eb:8c:92:ba:bc:5d:
98:22:f6:0e:27:10:19:11:fa:4d:bd:b4:fc:f5:e5:
a6:b6:59:87:e4:5c:91:36:e5:e1:62:c2:bc:4c:1c:
33:a8:28:bc:54:08:86:8c:0e:5b:9c:51:fb:96:6a:
fc:01:23:6b:bf:e2:eb:3b:8b:08:6c:cd:ba:3a:de:
0e:6a:b8:6c:41:ab:14:a8:8b:30:b9:63:4f:45:c0:
1f:ce:c4:cb:9d:09:1d:6e:3e:83:1b:22:24:81:3c:
eb:37:e6:c8:c2:78:a4:bc:30:4f:c8:d7:ca:e0:89:
35:f0:0e:4c:43:8c:58:b0:13:23:c8:7b:91:1f:bd:
fc:00:f2:06:0f:bb:35:66:f9:36:6a:d6:2c:fa:51:
db:08:53:3a:11:af:d1:20:08:42:8f:9c:29:28:22:
ca:79:93:e3:fc:43:47:75:51:76:40:97:69:c5:3b:
80:d6:ba:ba:f0:9f:6b:25:10:54:93:bc:95:3d:31:
02:a7:73:39:4e:fe:c9:83:7f:8c:7a:77:c5:9b:39:
cf:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DB:1B:63:56:06:D1:11:99:4D:CF:EC:FE:D8:11:FD:81:CB:85:E6
X509v3 Authority Key Identifier:
keyid:55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/99sbY1YG0RGZTc_s_tgR_YHLheY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.53.0/24
45.157.55.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:58:42:2e:97:ef:d4:57:8f:7f:f8:46:87:9b:ea:e5:92:fd:
bb:f5:89:b0:2e:c5:27:db:38:89:80:13:1d:b5:9b:67:23:74:
02:9f:36:db:08:ea:fc:71:8b:3d:97:b2:b9:8e:6e:bd:9e:5c:
a5:af:5b:03:6e:63:66:31:73:5f:e0:88:e2:f1:53:eb:95:9d:
e2:a3:d5:e2:6e:4d:93:af:9f:00:0c:06:53:d3:6e:4e:c9:fb:
c6:8f:b0:c3:a7:c0:46:c5:ff:47:8c:ba:8c:d0:14:23:18:fa:
e9:e4:22:07:95:6d:a6:3e:03:68:cb:0e:5f:c2:5b:f3:40:5f:
12:fb:96:ac:05:30:f3:b3:6d:09:9c:f8:f1:d2:9d:31:40:d9:
e7:69:79:42:2f:5b:c7:10:17:90:08:0c:5b:8e:47:b5:8a:e2:
2f:3f:59:ca:02:10:22:42:95:59:a4:15:2c:c5:7a:5b:a3:ba:
ba:dd:56:29:19:74:93:5a:d4:f4:37:88:2e:85:a3:0f:c8:c5:
12:bc:6d:d7:7a:c9:6f:e6:26:29:23:41:58:ca:de:59:64:ce:
bd:bb:e0:00:24:bf:57:ab:c2:3d:80:4c:89:14:4d:c3:5c:0d:
01:ad:79:9b:8a:8a:88:15:3f:4d:9a:13:b2:0f:0b:e8:e4:02:
8b:b4:fe:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:16 2024 by rpki-client on console-fra.rpki-client.org