Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/jxCEVCAv-NtqIXLCIRfDVh6E_lY.roa
File: jxCEVCAv-NtqIXLCIRfDVh6E_lY.roa (raw, json)
Hash identifier: Ksxv1l69yfbkeBcMea74HqZzGj6bMnb32Uklc4Hu5Jw=
Subject key identifier: 8F:10:84:54:20:2F:F8:DB:6A:21:72:C2:21:17:C3:56:1E:84:FE:56
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 0191698B4DA10DF8621BA14C76D94742DAE5
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/jxCEVCAv-NtqIXLCIRfDVh6E_lY.roa
Signing time: Mon 19 Aug 2024 07:30:22 +0000
ROA not before: Mon 19 Aug 2024 07:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.95.226.0/24 maxlen: 24
45.140.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Aug 2024 07:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:69:8b:4d:a1:0d:f8:62:1b:a1:4c:76:d9:47:42:da:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Aug 19 07:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f108454202ff8db6a2172c22117c3561e84fe56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:57:95:71:db:c9:ab:95:3a:49:a6:3d:c9:1b:
7d:ca:fe:1c:40:91:51:7a:3d:99:02:33:ba:f3:16:
0e:ea:e4:44:62:bc:55:a9:a9:ba:17:54:57:b5:43:
0c:be:90:84:87:48:58:8a:0c:fa:64:f8:f8:c9:ea:
a6:30:2d:d1:f2:03:b6:95:0b:78:e0:f1:de:2d:81:
17:16:db:fb:4e:69:c3:60:cc:d7:64:07:5f:dd:df:
44:73:00:df:21:3b:76:9c:bd:88:41:32:0a:39:ae:
d8:c6:34:db:2b:81:6c:08:8d:c9:a5:83:d6:97:47:
83:84:e9:f1:af:05:55:ff:0e:7e:02:02:84:ec:ab:
88:05:70:54:f4:2c:0a:08:63:e7:9f:3f:f5:bc:76:
72:74:9d:0c:83:a6:57:89:35:66:fc:d2:18:92:cb:
44:5e:35:0a:cd:3b:d4:b1:fe:5f:52:a0:57:d2:dc:
bb:0a:49:81:0e:09:f4:41:df:2e:cd:4c:d3:d1:55:
53:f3:88:0b:5b:6e:44:f9:6c:69:fd:b9:59:97:64:
5b:bb:93:84:1a:53:8a:50:1d:28:5e:8b:b8:42:07:
cc:be:8c:2f:73:af:f1:99:20:f8:af:18:2e:fa:cc:
73:40:3c:4a:82:55:dc:97:cc:b9:7b:bc:c6:00:dc:
0f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:10:84:54:20:2F:F8:DB:6A:21:72:C2:21:17:C3:56:1E:84:FE:56
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/jxCEVCAv-NtqIXLCIRfDVh6E_lY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.226.0/24
45.140.57.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:e3:5a:c8:d6:03:68:d9:8c:ed:ed:1a:44:fa:01:ff:6d:25:
e6:0c:61:8b:cc:d2:06:b4:45:19:a0:63:fe:54:69:19:02:2b:
33:bc:fc:4d:00:9c:68:40:ea:4e:84:f3:05:91:29:61:25:da:
ef:61:02:12:9d:24:78:9d:6e:80:3f:34:fb:5d:29:93:cb:84:
28:48:0a:dc:93:09:24:ac:bc:8a:6b:95:52:45:d8:51:9b:fa:
e4:08:f9:53:f4:87:ba:b9:05:1f:9a:b8:6c:d7:8d:08:31:85:
38:00:1b:a0:3f:30:bb:f1:5f:9a:11:ce:83:7f:29:b4:19:90:
ed:5f:19:98:de:12:86:9d:85:fa:5f:e2:cd:78:8a:4c:2c:0f:
b4:39:cc:fa:98:7f:b8:37:cc:20:bb:54:65:c1:52:13:e5:64:
1a:42:cb:e4:c3:94:e1:ee:e9:e7:07:76:d3:33:e0:a6:bc:0b:
0a:11:9f:05:03:bd:a5:73:21:8f:e7:cd:1b:8e:a1:74:4d:9f:
7d:53:50:c5:6a:84:0d:e9:4b:7e:be:46:a5:e4:6d:fd:fb:48:
a8:56:f6:b9:8b:de:70:8e:a8:2d:51:78:44:f3:e7:e4:9d:24:
e4:c1:d4:9b:27:44:be:2c:a9:c3:f4:12:ad:b8:96:ba:3e:83:
44:77:87:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 09:43:39 2024 by rpki-client on console-fra.rpki-client.org