Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/RAXJjQHjG4qjr9CU-YTOFfM7dq8.roa
File: RAXJjQHjG4qjr9CU-YTOFfM7dq8.roa (raw, json)
Hash identifier: s2xy90bKKsTnvFk6uPLYPjVh5qPdKx7MzjypxcsM4Ho=
Subject key identifier: 44:05:C9:8D:01:E3:1B:8A:A3:AF:D0:94:F9:84:CE:15:F3:3B:76:AF
Certificate issuer: /CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
Certificate serial: 01856C1C84DC03F8476BA133FCAE2005BA89
Authority key identifier: B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/RAXJjQHjG4qjr9CU-YTOFfM7dq8.roa
Signing time: Sun 01 Jan 2023 06:54:46 +0000
ROA not before: Sun 01 Jan 2023 06:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47952
IP address blocks: 45.130.14.0/24 maxlen: 24
45.130.13.0/24 maxlen: 24
45.130.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:84:dc:03:f8:47:6b:a1:33:fc:ae:20:05:ba:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
Validity
Not Before: Jan 1 06:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4405c98d01e31b8aa3afd094f984ce15f33b76af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:99:29:d3:9e:b9:19:2f:71:e8:ec:1a:0a:3b:
06:f1:18:65:f3:98:f6:41:af:da:5f:6b:7a:14:db:
18:35:00:83:06:ca:13:cb:bc:e2:fb:ef:1a:60:26:
85:17:d5:91:1b:a2:6b:b0:73:3a:b7:c1:ca:51:26:
3c:2a:d1:c2:76:15:01:75:06:37:8c:b9:6e:42:1a:
57:96:9f:4f:7c:6a:62:f3:c0:28:ed:9d:e2:8a:e6:
bf:49:4b:42:fa:79:0d:c5:b7:80:0f:b1:db:a7:69:
77:08:b8:cf:99:dd:f3:22:b7:72:18:e9:a6:11:03:
47:b5:87:21:61:f9:7c:2c:07:0e:e4:8c:03:22:ea:
1b:0f:0f:6b:df:97:99:16:07:1f:5f:52:ca:7a:c3:
e6:a4:cb:05:80:cb:62:0a:aa:b1:b1:0d:45:04:b1:
68:d2:9b:3f:93:33:08:7f:d4:8d:94:5a:4a:9c:59:
aa:c3:da:87:36:39:8a:0d:cf:9d:f9:93:5f:d0:c8:
02:2f:5e:32:7c:46:4f:83:e3:29:4e:1a:a1:38:83:
79:08:2f:1a:b2:e1:58:3c:c3:d1:ff:66:45:40:bc:
c3:d5:d0:fe:bb:92:ca:bf:54:a6:84:3d:e2:cb:d4:
5a:6e:60:9a:3f:1c:cc:29:4a:f1:3d:87:a3:5b:32:
82:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:05:C9:8D:01:E3:1B:8A:A3:AF:D0:94:F9:84:CE:15:F3:3B:76:AF
X509v3 Authority Key Identifier:
keyid:B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/RAXJjQHjG4qjr9CU-YTOFfM7dq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.13.0-45.130.15.255
Signature Algorithm: sha256WithRSAEncryption
80:64:7e:d8:7d:ea:92:58:ef:6f:b8:a0:56:43:bb:ba:b9:1d:
7a:d7:34:c2:26:25:af:ba:92:e8:eb:1d:7e:c5:1d:56:89:86:
1a:90:22:18:1e:1d:2c:6c:21:8c:b2:75:f9:6a:2f:67:3b:84:
3f:19:d3:c2:8a:3b:5c:75:4e:f5:85:7e:b5:4e:3e:71:f4:39:
45:19:6c:0b:a9:3b:0d:16:f0:25:3e:ff:fe:b4:8a:b2:1b:7a:
86:b7:28:13:a4:3c:39:56:1d:83:dc:8a:22:0c:c9:65:f7:d4:
13:53:10:de:12:16:5e:1d:f3:1a:27:cf:39:3a:fe:4c:0a:97:
ef:8e:a4:0a:f0:03:ce:7a:76:52:e5:5c:86:e3:41:c1:ad:27:
fd:b0:03:61:09:f9:08:92:05:08:43:73:d0:23:e7:29:3a:d3:
2b:e2:de:54:05:65:39:ae:8c:38:f3:fa:1c:a3:8b:ae:12:08:
0f:2a:78:a1:aa:f7:63:82:d5:5b:bf:6a:07:29:29:50:95:da:
a9:67:65:2f:69:80:39:03:ba:8a:ac:e2:41:62:77:1b:58:e4:
63:32:30:e0:0a:e0:67:e1:d9:42:15:18:67:88:87:fc:b8:f1:
46:7e:13:94:46:43:cf:46:f1:54:98:1e:08:cb:93:66:67:f0:
1c:c0:23:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:02 2024 by rpki-client on console-fra.rpki-client.org