Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/jt1zeGlFgyLopCzWt9VK07UzhrM.roa
File: jt1zeGlFgyLopCzWt9VK07UzhrM.roa (raw, json)
Hash identifier: ZvhdgPf/ysHsz/7/Js59DqLyxuVdRVzPTdha0XAp2QQ=
Subject key identifier: 8E:DD:73:78:69:45:83:22:E8:A4:2C:D6:B7:D5:4A:D3:B5:33:86:B3
Certificate issuer: /CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Certificate serial: 018CC56DFE80109308D8FEAEF51FA82CE8AE
Authority key identifier: E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/jt1zeGlFgyLopCzWt9VK07UzhrM.roa
Signing time: Mon 01 Jan 2024 14:29:29 +0000
ROA not before: Mon 01 Jan 2024 14:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 45.149.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 11:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:fe:80:10:93:08:d8:fe:ae:f5:1f:a8:2c:e8:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Validity
Not Before: Jan 1 14:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8edd737869458322e8a42cd6b7d54ad3b53386b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9b:5b:01:5c:c1:be:8b:2d:dc:c9:21:df:13:
74:b7:8c:d3:cd:74:4a:c3:0f:e4:5e:36:29:7b:0a:
13:7e:cb:71:e3:ce:95:0e:aa:ae:bf:d3:8f:1f:63:
fd:70:89:8b:fc:cf:b7:fd:a1:e3:27:2b:93:8b:2e:
c4:84:f1:6e:47:05:04:57:ed:1b:a2:0b:d3:c6:c6:
f9:3f:35:c9:48:25:17:e8:aa:b8:74:f4:72:53:58:
f7:05:03:ef:16:a4:14:9e:e9:45:1a:de:c9:47:4d:
2c:2c:c9:d6:e3:74:29:54:98:03:3d:e3:94:5a:b8:
23:59:11:48:86:ae:aa:97:30:53:af:4c:a3:20:bd:
38:29:5b:bd:5c:25:22:55:76:18:2c:f7:c0:c0:7f:
42:e9:01:11:60:30:60:8e:84:91:12:4e:51:19:f2:
4e:ce:10:40:b7:1a:ad:41:b1:40:5c:85:3b:e0:d2:
4a:ff:94:26:09:ca:13:93:99:ee:ab:47:2b:73:4b:
35:8a:ca:c8:c2:8b:c2:2c:31:e0:22:fe:cf:22:e2:
5f:3d:0d:b2:cb:e3:22:34:4c:af:d9:9f:24:3a:4c:
a0:ad:df:32:35:03:e2:42:c8:50:b9:3a:43:59:75:
c6:5a:6b:26:d1:c1:d4:95:2b:a9:c5:bf:d4:2e:8b:
e9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DD:73:78:69:45:83:22:E8:A4:2C:D6:B7:D5:4A:D3:B5:33:86:B3
X509v3 Authority Key Identifier:
keyid:E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/jt1zeGlFgyLopCzWt9VK07UzhrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.154.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:39:8d:74:fb:c7:5f:21:31:c3:60:73:9f:bd:e5:c3:4d:15:
11:be:41:e0:67:a7:1b:a6:40:8e:63:0c:44:21:e9:fb:6b:2a:
0d:74:31:2a:2d:e9:6f:a8:5d:71:7e:18:10:6b:42:e3:6d:d9:
57:42:30:43:64:bf:ae:96:c7:ce:f8:79:21:47:ac:a8:03:c2:
f6:d8:61:ce:ed:24:a7:f4:64:3c:ef:00:99:ea:61:33:64:34:
e6:1c:94:54:c1:cc:82:07:15:d5:4a:2d:30:17:ec:24:c6:91:
60:45:bf:d1:c1:ee:fc:e0:a2:7c:30:b6:23:f1:6a:b2:36:4c:
9d:5b:72:80:77:8a:3d:e9:8d:62:bc:c1:f6:ea:08:89:8b:37:
b6:79:eb:48:da:10:9d:27:a6:84:0c:99:bd:f1:76:23:eb:b8:
39:8f:cc:5b:3e:3b:5c:2c:51:9d:fb:5c:09:60:94:f3:ef:76:
dc:31:ae:e3:5f:f8:fe:a4:e1:4d:c1:28:2c:44:7b:5b:19:57:
ac:0e:25:d7:8a:c6:c6:72:7a:20:2a:ac:d5:06:bb:23:9a:75:
2e:47:16:01:65:75:8b:96:a5:cf:cd:91:7f:48:ed:75:12:ee:
8e:2a:13:6f:6e:a1:01:95:56:2f:07:f8:35:e5:4f:c8:df:56:
9e:64:70:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:53 2024 by rpki-client on console-fra.rpki-client.org