Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/xc1T-BNneFJamhtxHEKbZvCOvn4.roa
File: xc1T-BNneFJamhtxHEKbZvCOvn4.roa (raw, json)
Hash identifier: 7cNQGsToNDje97DYeXynniSjy5GTx1ZXLeaZxiDAfUY=
Subject key identifier: C5:CD:53:F8:13:67:78:52:5A:9A:1B:71:1C:42:9B:66:F0:8E:BE:7E
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0186CC021856826E2B8401E2E2ADDF1B71C7
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/xc1T-BNneFJamhtxHEKbZvCOvn4.roa
Signing time: Fri 10 Mar 2023 14:52:14 +0000
ROA not before: Fri 10 Mar 2023 14:52:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34642
IP address blocks: 45.136.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cc:02:18:56:82:6e:2b:84:01:e2:e2:ad:df:1b:71:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Mar 10 14:52:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5cd53f8136778525a9a1b711c429b66f08ebe7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f5:f5:90:54:3f:d1:43:e7:58:8e:fb:25:44:
65:8d:2e:72:2a:ba:34:f9:45:c6:17:fa:19:63:5e:
41:27:9e:a8:cf:5d:85:f6:5f:23:43:62:be:a5:16:
e9:48:c9:e9:cd:c9:35:f3:90:1c:0d:96:e0:b6:dc:
11:0d:e1:16:70:3a:7f:88:85:87:5b:40:59:f5:0b:
74:8b:8f:f3:3e:c4:da:fe:13:fb:c1:91:17:84:2a:
25:fc:31:e9:4f:a2:97:90:f2:7d:2f:7d:09:84:3e:
79:86:f7:27:da:4c:e1:51:87:1e:6c:26:59:72:0d:
70:89:a3:87:d9:7e:14:80:fd:3e:66:f6:25:a9:92:
e9:04:fe:73:22:63:c4:50:39:06:75:70:e5:f2:6b:
de:83:d5:cc:16:6e:4b:98:d7:49:4d:df:7a:d5:f1:
c5:68:1e:03:e9:75:a1:1b:e7:03:08:7e:23:3a:21:
2c:38:62:a9:81:28:99:8e:59:e5:ae:da:85:12:05:
c8:df:89:ce:f4:af:15:d8:02:ee:6d:70:cc:c7:5e:
01:a6:e6:37:2b:cf:0d:95:15:86:a9:bd:1a:d6:70:
e6:50:79:b2:91:34:3a:68:f7:00:60:c9:47:ef:9e:
a9:35:cf:aa:d0:8c:d6:68:e9:b0:03:fe:84:89:ca:
6a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CD:53:F8:13:67:78:52:5A:9A:1B:71:1C:42:9B:66:F0:8E:BE:7E
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/xc1T-BNneFJamhtxHEKbZvCOvn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.249.0/24
Signature Algorithm: sha256WithRSAEncryption
40:1e:7c:c3:1a:dd:dd:94:fd:76:b0:6b:ee:e7:21:f0:93:3c:
1d:41:44:b9:54:cf:d5:99:84:63:de:cb:29:7f:4e:52:03:df:
b8:ba:37:11:6a:2d:46:30:8e:b4:7d:31:a0:ac:91:81:d7:ac:
d9:f3:5a:ba:d9:0d:4f:84:94:1d:28:8e:b9:0c:9c:f4:bb:e7:
3c:e8:eb:a0:fb:f6:ec:c0:76:d5:f4:d4:72:c1:38:a1:bd:10:
49:a7:10:ca:10:ee:59:4e:f2:f4:8e:0e:fe:9a:a8:ba:ad:27:
8d:56:42:ef:81:f4:e0:5f:75:eb:2f:b2:cd:32:3d:08:5e:80:
7f:62:7d:ad:47:95:4e:7f:fe:9f:7e:f6:8c:02:58:63:2a:5e:
51:ba:ee:60:e5:b6:b8:be:80:c4:33:01:6d:7b:7b:22:b4:cb:
16:b7:15:e4:ea:74:47:b4:ac:0f:02:90:f4:39:cb:5f:e5:02:
44:54:2b:ff:6e:f5:81:09:ef:15:49:95:8b:10:78:06:7f:5b:
25:6c:98:b1:1f:7c:c7:0e:a1:01:ab:fa:be:a9:76:78:17:21:
9b:e0:c3:70:6c:b8:a5:87:d1:32:60:69:ad:ee:19:60:2d:ca:
9a:3c:84:86:66:74:a5:9b:f2:87:33:40:4e:fe:75:ac:b2:a2:
9f:34:b6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:39 2024 by rpki-client on console-ams.rpki-client.org