Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/EpyllW2N1nTKi0Ig4JEgFqjDaWY.roa
File: EpyllW2N1nTKi0Ig4JEgFqjDaWY.roa (raw, json)
Hash identifier: f49W4PeX4QCQVYeNahlY7SXlwd54pXoipcKVGvP6Z5I=
Subject key identifier: 12:9C:A5:95:6D:8D:D6:74:CA:8B:42:20:E0:91:20:16:A8:C3:69:66
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 01856FB128E44559543E7C987F9ACFBCF559
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/EpyllW2N1nTKi0Ig4JEgFqjDaWY.roa
Signing time: Sun 01 Jan 2023 23:35:59 +0000
ROA not before: Sun 01 Jan 2023 23:35:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 4785
IP address blocks: 45.95.226.0/24 maxlen: 24
45.95.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 May 2023 11:25:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b1:28:e4:45:59:54:3e:7c:98:7f:9a:cf:bc:f5:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Jan 1 23:35:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=129ca5956d8dd674ca8b4220e0912016a8c36966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:38:9d:1b:7a:3f:7d:da:0e:4d:be:45:94:42:
07:73:0c:e0:65:b2:a2:07:33:25:c1:b2:6d:a8:a8:
c1:ce:ea:81:c2:20:8e:b4:18:25:25:99:07:17:1f:
4a:9e:64:8e:73:0d:f4:0f:f6:d2:8e:bf:cb:ab:2a:
54:44:ae:01:d8:98:7b:6f:0c:f4:c4:3e:40:d3:20:
96:f2:bb:56:9d:65:e7:cd:52:16:30:a8:71:0a:bf:
b1:d8:87:7b:30:9c:38:2a:ef:34:a3:a1:bf:b5:e8:
83:8b:a4:b8:2d:c2:7b:ab:40:77:8e:f4:cd:3e:ad:
6f:fe:43:90:63:0b:f0:b7:5b:de:3b:6a:8f:38:62:
a0:b7:4a:42:61:f3:43:32:04:e4:ed:b7:d5:15:e8:
8d:c3:f2:79:8a:8c:87:1d:ee:47:5f:f0:d1:e7:83:
eb:b2:8c:20:93:c2:25:c8:f1:38:9c:36:f9:cf:80:
f8:f7:75:36:42:df:48:50:82:e3:64:84:f7:32:46:
57:c5:83:2c:4a:72:d5:a1:4a:ec:9e:25:a7:fe:75:
69:62:8c:52:68:7f:f9:da:12:74:f7:41:77:82:30:
20:44:22:eb:98:86:9a:13:30:34:b2:26:33:7d:1c:
a4:98:7d:63:d4:39:3a:2b:b0:f7:bf:e3:44:34:3a:
3a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9C:A5:95:6D:8D:D6:74:CA:8B:42:20:E0:91:20:16:A8:C3:69:66
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/EpyllW2N1nTKi0Ig4JEgFqjDaWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.226.0/23
Signature Algorithm: sha256WithRSAEncryption
88:39:5e:80:c7:28:39:3e:ba:83:86:56:43:8c:f3:c4:a5:fe:
12:d1:01:65:48:d0:7e:bb:fc:15:5b:f9:12:6a:9d:1e:5c:2d:
ef:f3:16:a5:18:88:14:c0:40:58:35:94:ab:72:57:73:5f:86:
54:05:df:b7:1b:14:61:c2:40:92:c3:85:cb:30:6e:f9:f7:aa:
d4:38:c7:1c:4b:9e:d2:f4:3c:85:33:00:0d:dd:71:6c:01:71:
5f:aa:cc:4e:33:22:3b:b5:55:38:37:17:a8:29:ad:5d:b0:dc:
6c:65:16:9c:a3:20:05:4e:7b:f7:a8:f6:2c:95:ff:0d:e6:b3:
62:ba:ba:bd:45:0d:33:96:85:0b:b4:2e:73:7f:84:f3:79:a1:
a0:25:95:ea:65:5f:9a:b0:e8:7b:4d:2c:ea:bd:e3:b1:23:69:
95:c6:d5:ba:c2:8a:de:07:2a:c3:97:db:a3:ab:66:b4:0f:3b:
77:7e:64:bc:ed:03:4d:10:40:02:b0:d1:64:eb:b7:a7:49:04:
62:75:0d:44:54:33:ff:f6:31:20:28:c2:9e:03:40:4c:c0:69:
c0:18:99:88:bc:cc:50:2e:46:8d:ed:39:7d:d1:84:6f:f9:32:
a8:3b:bf:d1:ef:4b:ec:b6:aa:bf:15:e2:17:13:0e:c8:a8:d0:
84:cb:b2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:56 2024 by rpki-client on console-ams.rpki-client.org