Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/HHsW5I-vrAWyBC7eq4eo1kPuSKY.roa
File: HHsW5I-vrAWyBC7eq4eo1kPuSKY.roa (raw, json)
Hash identifier: Od1BcQdBqtQUBECZdh9ziefba3JVvLQOYScMkjHRhD8=
Subject key identifier: 1C:7B:16:E4:8F:AF:AC:05:B2:04:2E:DE:AB:87:A8:D6:43:EE:48:A6
Certificate issuer: /CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Certificate serial: 018CC5DC6BE02BFEB8D528562211F3051EEF
Authority key identifier: 55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/HHsW5I-vrAWyBC7eq4eo1kPuSKY.roa
Signing time: Mon 01 Jan 2024 16:30:06 +0000
ROA not before: Mon 01 Jan 2024 16:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208115
IP address blocks: 45.157.55.0/24 maxlen: 24
45.157.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Apr 2024 13:42:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:6b:e0:2b:fe:b8:d5:28:56:22:11:f3:05:1e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Validity
Not Before: Jan 1 16:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c7b16e48fafac05b2042edeab87a8d643ee48a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:92:a4:b3:31:df:c9:30:e9:e9:a2:8d:9d:ec:
24:2b:e3:a6:79:04:52:6a:81:f5:bc:91:d0:58:3e:
9d:95:2c:f9:b3:a4:57:33:bd:a6:cf:ce:29:aa:6e:
18:e9:1a:d7:48:1d:67:47:81:20:cb:a4:a1:fc:b0:
93:32:ff:b1:c3:02:1a:ee:9e:5f:e3:5a:11:83:e2:
65:8c:b2:4f:dc:ea:9b:0c:8c:53:f9:ec:cd:cc:2b:
59:b4:1e:fd:19:48:89:13:80:e5:97:8b:02:8f:c9:
a7:87:17:e2:a2:dc:6b:7f:08:a3:64:df:26:5e:67:
02:c0:51:c6:b4:d5:13:0a:db:52:d3:11:99:6b:0b:
b2:73:f9:79:40:90:57:95:ce:c6:3f:e3:c4:10:22:
61:c5:2a:be:ef:ed:f0:fb:8f:62:a4:0d:38:51:9a:
c4:56:32:31:45:6f:cc:10:e6:65:df:1d:4e:24:31:
c4:b4:48:1f:7f:fe:a8:1d:5e:5e:d3:d1:82:a5:5f:
3a:1a:d9:1b:71:6f:43:96:97:5f:e9:49:61:ff:31:
a8:f7:79:66:51:bf:84:9a:ba:55:81:aa:99:a7:50:
0f:96:76:00:20:f7:7e:fd:b4:1c:79:c8:9a:44:b3:
ff:94:70:3e:28:b8:c5:d2:a5:bf:01:da:6b:71:9d:
99:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:7B:16:E4:8F:AF:AC:05:B2:04:2E:DE:AB:87:A8:D6:43:EE:48:A6
X509v3 Authority Key Identifier:
keyid:55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/HHsW5I-vrAWyBC7eq4eo1kPuSKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.53.0/24
45.157.55.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:17:75:22:ea:ab:9c:7e:08:95:2f:df:e5:05:cd:9e:75:a9:
47:b6:59:73:38:94:93:1d:59:74:46:6c:ed:f0:60:55:55:6e:
9d:4e:97:39:00:13:a7:b2:1a:88:53:03:24:ea:08:6a:dc:b3:
44:02:26:46:d5:a8:90:5e:b2:bc:0c:1a:75:70:07:7b:38:51:
53:0f:d6:d4:6f:69:12:17:f7:4c:23:93:32:48:6c:ca:3a:f0:
7a:1b:23:a6:7c:31:0c:69:9f:a7:fd:e4:7b:41:9c:ae:ff:56:
b0:56:59:11:ab:e8:a0:66:ee:a4:73:4d:a7:5b:9d:5a:98:fa:
5d:27:e7:8c:e1:d9:06:b7:db:2b:89:9a:55:76:e8:49:14:11:
f8:42:18:28:61:81:7a:d7:75:40:4a:d6:76:f0:5e:e3:9a:2e:
0c:fd:f9:aa:41:c0:40:be:c1:2a:f9:83:be:cc:e7:5d:4b:b8:
fd:ff:e2:f0:ca:7d:f7:df:e4:21:07:2b:7d:4c:15:53:c0:1e:
86:59:cd:f5:47:5f:b1:4f:29:8a:fe:b0:bc:42:e7:24:db:71:
ac:4a:de:dc:58:eb:ff:c6:a1:0d:31:1a:eb:10:39:29:a4:6a:
5d:9c:7c:e9:55:f8:16:6b:5a:dc:4f:12:6d:6f:b2:40:01:37:
c3:73:c7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:16 2024 by rpki-client on console-fra.rpki-client.org