Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/a-ncku2t9Zlb75rcIf99qxfIBzw.roa
File: a-ncku2t9Zlb75rcIf99qxfIBzw.roa (raw, json)
Hash identifier: n65vviu5yigAvfJKMhMEAQDY5btV9xwdahKh8sptOJU=
Subject key identifier: 6B:E9:DC:92:ED:AD:F5:99:5B:EF:9A:DC:21:FF:7D:AB:17:C8:07:3C
Certificate issuer: /CN=b1814a28a8c1ebe0adc33a1519b9883e3084bb59
Certificate serial: 01856E01DF64BB3DB111F83A90034BAF8421
Authority key identifier: B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/a-ncku2t9Zlb75rcIf99qxfIBzw.roa
Signing time: Sun 01 Jan 2023 15:44:54 +0000
ROA not before: Sun 01 Jan 2023 15:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 45.152.134.0/24 maxlen: 24
45.152.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:df:64:bb:3d:b1:11:f8:3a:90:03:4b:af:84:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1814a28a8c1ebe0adc33a1519b9883e3084bb59
Validity
Not Before: Jan 1 15:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6be9dc92edadf5995bef9adc21ff7dab17c8073c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b7:06:d4:71:7b:34:ee:a4:09:35:ce:01:90:
b7:cd:c8:c4:52:0d:ce:4f:f5:14:fd:f0:7b:7c:a3:
a4:23:5b:0c:86:3d:a3:1f:13:c4:d4:db:85:73:d7:
6d:ba:a2:a5:cf:63:fc:94:f7:ec:ac:90:28:42:51:
34:11:bc:e7:fb:73:b0:66:fa:4f:2d:f2:a1:bd:05:
b5:23:07:31:81:f5:62:dc:20:d1:d3:13:8d:3e:cd:
a8:8f:4a:7b:a6:90:e7:67:02:a6:98:0a:7e:e0:38:
b2:59:38:8e:36:20:ba:85:98:f7:7a:43:b2:3d:29:
81:37:3e:a4:12:e4:50:d7:11:74:16:ae:9c:c8:dc:
12:a4:14:45:0d:fb:e1:a7:d7:9c:a9:d3:84:47:a8:
5a:c5:ce:59:b9:52:f1:ce:f7:3f:e6:04:7e:d0:56:
a3:cb:e2:56:66:fb:cf:29:78:5a:ce:4d:83:78:5d:
54:99:75:28:b1:86:43:73:f5:df:76:b6:54:f7:f8:
8e:81:30:79:f0:b4:6c:90:b8:34:fe:b8:cb:73:d7:
3c:44:42:a2:21:e3:da:52:54:43:aa:35:5e:25:25:
64:bb:16:3b:44:3e:66:3d:de:06:9a:78:6e:26:81:
28:2b:4d:d3:4a:78:c2:b4:4b:a1:a0:7b:fe:ed:09:
68:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E9:DC:92:ED:AD:F5:99:5B:EF:9A:DC:21:FF:7D:AB:17:C8:07:3C
X509v3 Authority Key Identifier:
keyid:B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/a-ncku2t9Zlb75rcIf99qxfIBzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.134.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:e9:85:d6:4b:52:d2:47:06:2a:e5:8b:2c:15:30:54:a4:1f:
87:b2:c8:49:68:25:ee:50:7a:6f:b4:cd:0b:d3:68:09:b4:3b:
ff:42:47:aa:b0:39:a0:e1:49:62:5d:5f:8c:d4:83:8f:13:81:
c2:d0:a5:94:ca:c9:3a:0a:aa:a0:a3:1d:1f:f6:60:66:76:ac:
27:0d:3a:37:8e:b2:83:0b:4b:b4:86:bb:74:96:d6:06:6b:75:
ff:b6:2c:28:fd:ef:0c:a3:92:71:c3:05:3d:3d:e0:57:4b:33:
18:f2:b7:87:80:4f:c8:95:a6:ce:5d:ab:5a:68:14:06:4e:bc:
8b:c1:fa:63:e3:cc:50:27:de:3b:08:54:13:b3:b4:40:a7:02:
59:4c:be:07:86:65:54:e5:4f:c8:42:d4:1c:72:e9:99:4d:44:
ef:61:13:0a:da:d1:ca:e1:00:11:fb:bb:5a:82:a8:a9:10:c7:
95:35:8e:fe:77:5e:8e:d4:50:ee:e2:d3:ad:c0:d1:8a:31:35:
c0:9e:1b:6f:19:eb:76:58:c5:b2:74:f2:fa:0d:7d:81:d9:60:
ec:c0:05:f0:08:ef:2f:b7:69:75:98:53:01:80:eb:52:0c:c8:
45:87:ac:ce:e1:ac:5e:14:83:da:c0:35:fb:5b:09:96:59:ac:
1a:a3:b0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:25 2024 by rpki-client on console-ams.rpki-client.org