Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/CT58GNCTYX9kKLEXF_MJb7E517o.roa
File: CT58GNCTYX9kKLEXF_MJb7E517o.roa (raw, json)
Hash identifier: ev6nmi6xH7Ywu27kqkqFGQ4ATMtU9ivqyknjXTBS19s=
Subject key identifier: 09:3E:7C:18:D0:93:61:7F:64:28:B1:17:17:F3:09:6F:B1:39:D7:BA
Certificate issuer: /CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
Certificate serial: 01856C1C839ED1AE51988FFF62DE1FF0CCBA
Authority key identifier: B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/CT58GNCTYX9kKLEXF_MJb7E517o.roa
Signing time: Sun 01 Jan 2023 06:54:45 +0000
ROA not before: Sun 01 Jan 2023 06:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15830
IP address blocks: 45.130.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:83:9e:d1:ae:51:98:8f:ff:62:de:1f:f0:cc:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
Validity
Not Before: Jan 1 06:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=093e7c18d093617f6428b11717f3096fb139d7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:57:fa:55:81:01:ab:1e:29:ef:90:02:06:db:
e9:5c:66:1a:fd:73:63:81:01:2c:ed:bf:bc:50:c9:
a1:92:66:87:b4:02:8d:f0:43:85:11:31:30:21:b9:
59:13:3a:2d:2a:88:75:14:44:3e:59:ef:c4:06:e7:
a5:d2:fe:d8:c0:77:05:1c:d2:82:2c:09:5d:55:20:
5e:77:f2:da:9c:66:c1:75:8c:a1:ac:4c:de:15:0b:
91:6b:64:7d:2c:48:32:e3:5b:f5:cc:09:76:eb:0a:
f0:36:f5:67:5e:63:a2:44:80:f6:09:8c:9f:9e:5b:
ca:1c:e1:7c:41:f1:b9:73:30:70:4e:92:42:7f:1f:
c4:9c:0e:72:19:61:f9:52:bf:6d:65:db:32:04:01:
2b:9e:2b:5f:e8:5e:c5:26:2d:8b:00:de:8b:05:31:
44:65:65:ae:70:c2:d1:06:00:93:a0:9a:f4:38:0f:
5f:ae:a0:d3:7f:ea:5a:27:ab:ce:3d:08:6c:60:d8:
eb:b0:75:57:18:ea:92:55:f7:d4:b6:46:61:58:d5:
cf:16:01:04:d7:21:be:4c:f8:d8:ce:90:d4:75:9c:
70:74:b5:d6:7a:a2:93:9a:a2:04:6f:40:eb:6a:09:
e8:38:9a:46:be:3e:cd:88:9a:d0:e5:bf:9e:03:9b:
96:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3E:7C:18:D0:93:61:7F:64:28:B1:17:17:F3:09:6F:B1:39:D7:BA
X509v3 Authority Key Identifier:
keyid:B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/CT58GNCTYX9kKLEXF_MJb7E517o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.12.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:95:03:6e:b0:46:56:67:e6:ba:54:3b:85:ef:9b:d9:e1:fa:
8b:5b:b3:47:3c:28:4d:6a:b7:9b:fd:44:a8:8c:de:a1:bf:cc:
53:0e:67:f3:ae:d7:6b:b8:b6:dd:2a:97:bc:e7:70:a4:ff:64:
62:c0:08:eb:64:3a:f1:21:fc:f5:0d:db:42:c4:14:e6:11:71:
aa:f7:5b:62:3f:bb:0d:e2:94:6e:e3:a0:bf:cc:0a:d0:bc:a4:
7c:d7:17:ec:41:ae:4d:f9:c7:f5:60:d2:d4:7a:bd:65:20:30:
50:f8:d5:ec:37:db:49:c3:fa:9a:14:31:19:d1:63:43:fc:d2:
fb:5d:ca:35:da:4e:14:a5:68:f3:dd:7f:15:28:c2:0b:9d:31:
4f:f5:f2:82:c0:d5:e2:d9:9e:cf:3a:3e:12:8c:5e:59:d0:f0:
b7:71:e8:c8:55:72:89:17:96:74:d9:71:89:5b:09:4a:0f:5f:
d2:c2:37:22:47:d3:f7:6b:65:17:5b:e7:78:58:bc:b3:d9:a3:
43:c8:5e:be:8f:8a:ce:18:2b:02:c4:16:74:a7:32:df:9a:14:
fc:79:ee:16:a6:5e:db:67:e0:3d:d6:c3:23:5b:44:fb:39:74:
d3:25:93:4e:15:3a:ec:9d:ff:6e:9b:65:ea:15:52:17:a8:7f:
f0:8e:83:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:54 2024 by rpki-client on console-ams.rpki-client.org