Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/dLH3836EsRLIZpZaaQ0fCXyQFxc.roa
File: dLH3836EsRLIZpZaaQ0fCXyQFxc.roa (raw, json)
Hash identifier: Tb2QVzY4I0xAJgipHcfV/FEX23amoKlxPtSitsF9FHs=
Subject key identifier: 74:B1:F7:F3:7E:84:B1:12:C8:66:96:5A:69:0D:1F:09:7C:90:17:17
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0186C509B4D6F9F195BF1F1AB5AB2ACB8D7B
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/dLH3836EsRLIZpZaaQ0fCXyQFxc.roa
Signing time: Thu 09 Mar 2023 06:23:13 +0000
ROA not before: Thu 09 Mar 2023 06:23:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49569
IP address blocks: 45.138.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c5:09:b4:d6:f9:f1:95:bf:1f:1a:b5:ab:2a:cb:8d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Mar 9 06:23:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74b1f7f37e84b112c866965a690d1f097c901717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:95:ca:a8:c4:97:d6:98:ea:6f:96:3e:2d:77:
54:a7:77:77:44:ce:f7:d7:68:93:de:2d:a6:47:6d:
c4:2b:a7:e3:2c:f1:8c:30:73:26:78:fc:44:4f:ef:
f9:bc:68:85:51:6c:69:d1:0b:aa:db:22:47:40:49:
05:c3:ac:d0:9f:a8:d7:82:df:89:a4:d8:27:b4:f9:
16:95:1d:53:b2:cd:eb:54:cf:09:5e:9b:1e:c5:3d:
74:cd:dc:38:b6:33:4c:fd:bd:27:e4:45:de:7a:23:
7e:c6:51:a5:7d:85:2e:9a:b2:55:c4:d1:59:13:af:
2a:3a:6c:f8:3e:9b:4f:d9:b1:1f:19:59:a0:b8:f5:
dd:83:bc:4a:b3:ef:b5:b5:c3:5f:90:49:36:e8:a3:
15:a0:3f:34:c4:91:74:6f:b7:29:99:db:9c:51:bf:
6b:70:f7:9f:2f:93:34:51:36:9e:db:d8:70:5e:97:
8a:db:a8:ca:de:92:0b:73:64:58:82:f6:62:fa:43:
ff:a6:42:f4:26:91:a2:f3:e5:91:5e:ea:44:06:f6:
8c:c4:00:ca:0d:bf:28:7d:78:ca:e4:fa:81:ce:2f:
fe:1f:95:f8:6e:27:b3:a0:01:a8:88:5b:ef:ef:1a:
72:fb:65:6a:69:78:8a:86:49:ca:78:50:de:de:58:
b5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B1:F7:F3:7E:84:B1:12:C8:66:96:5A:69:0D:1F:09:7C:90:17:17
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/dLH3836EsRLIZpZaaQ0fCXyQFxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.146.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:c1:41:2c:a7:37:3e:6c:b2:e9:1b:4d:a7:7e:25:d6:0e:df:
d0:07:e4:7a:e1:25:d8:2e:61:e0:9f:94:6d:b0:f4:8e:8a:cb:
55:ef:57:9e:dc:30:8a:d8:01:b2:d8:fc:5c:d4:05:3a:62:60:
62:8c:a0:ca:03:e2:30:a5:62:a9:01:09:3a:1f:e8:60:38:13:
f0:1d:84:8f:5f:fe:81:45:54:21:c6:38:0b:e1:c6:b0:06:41:
38:03:2e:95:5a:c1:f8:04:a6:e7:80:9a:70:1f:1e:8c:2a:94:
8e:7a:eb:11:21:65:4e:f6:cf:6d:00:f2:01:21:46:f1:be:2c:
a4:36:0f:87:03:0e:e6:4a:7d:d6:52:7d:f3:a3:e0:a2:6b:f2:
54:a3:e8:04:2b:9b:0a:d0:4a:9c:ec:d0:e0:36:94:af:73:0a:
4d:66:54:6f:4a:67:98:70:f9:26:ce:37:df:fd:0f:15:8e:0a:
d5:48:c0:f2:05:c7:4d:8e:14:2f:c5:e0:4e:24:f2:f5:b7:67:
dc:85:5b:fd:4a:fe:10:c9:50:fd:00:0a:1e:a1:4e:a0:a5:61:
8b:d3:d8:9a:ff:aa:03:06:3e:c6:72:cc:79:29:10:24:dc:dc:
a4:9b:e2:d7:41:56:b5:47:bc:07:50:e1:32:dd:48:54:31:43:
35:35:2c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:38 2024 by rpki-client on console-ams.rpki-client.org