Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/aeg_UlnV6rru-4k3wE7vuhZg5aI.roa
File: aeg_UlnV6rru-4k3wE7vuhZg5aI.roa (raw, json)
Hash identifier: w9mios18lTOOJH9cjDCoyzJl8NpVz0VP/TqNgwuAsOU=
Subject key identifier: 69:E8:3F:52:59:D5:EA:BA:EE:FB:89:37:C0:4E:EF:BA:16:60:E5:A2
Certificate issuer: /CN=b1814a28a8c1ebe0adc33a1519b9883e3084bb59
Certificate serial: 01856E01E088FB67B16B78628EDDD99CFADC
Authority key identifier: B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/aeg_UlnV6rru-4k3wE7vuhZg5aI.roa
Signing time: Sun 01 Jan 2023 15:44:54 +0000
ROA not before: Sun 01 Jan 2023 15:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 45.152.135.0/24 maxlen: 24
45.152.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:e0:88:fb:67:b1:6b:78:62:8e:dd:d9:9c:fa:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1814a28a8c1ebe0adc33a1519b9883e3084bb59
Validity
Not Before: Jan 1 15:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69e83f5259d5eabaeefb8937c04eefba1660e5a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:77:d3:11:9f:e2:02:3f:0b:97:91:9f:80:4e:
f0:b4:a8:ef:aa:24:6e:3d:cb:ee:c3:a5:55:a5:c1:
a8:8c:56:4f:6f:c0:8c:6b:91:25:b2:a6:8b:13:81:
3b:d3:00:57:98:a2:1c:bb:6e:d5:98:27:95:ae:89:
43:e3:d0:f2:fc:4d:6d:ad:80:93:04:9c:12:10:7d:
09:a2:ff:21:20:f8:1d:7d:c9:3b:eb:26:1d:9c:6a:
48:d3:32:63:6e:8f:de:d6:f2:4a:b0:6f:13:c8:32:
98:55:71:0f:ba:68:a3:ca:f2:57:df:da:dd:69:1f:
cc:9a:cf:06:0f:13:be:47:82:76:3c:eb:f1:31:32:
02:a0:1f:06:67:60:c0:ac:03:2e:1f:98:8b:f7:bf:
2b:eb:d4:63:0f:20:28:31:02:bd:7c:ed:74:11:09:
08:66:d1:18:cc:c5:70:26:18:26:3c:4d:8b:cc:c3:
3b:00:d4:6d:3d:80:92:e2:8e:d6:18:10:6a:d7:07:
c0:63:4b:e6:2f:b8:33:eb:f9:8e:bb:53:47:a8:bf:
e2:51:d3:e7:f7:51:5c:88:ce:02:1f:4f:bb:31:b3:
6d:64:23:af:99:29:6c:27:14:fb:92:4c:37:67:e8:
4d:37:2b:7f:95:5d:b2:8e:08:c2:01:fc:c4:ff:1b:
98:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E8:3F:52:59:D5:EA:BA:EE:FB:89:37:C0:4E:EF:BA:16:60:E5:A2
X509v3 Authority Key Identifier:
keyid:B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/aeg_UlnV6rru-4k3wE7vuhZg5aI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.134.0/23
Signature Algorithm: sha256WithRSAEncryption
48:9f:4c:05:af:22:e8:4e:96:45:e3:2f:95:39:95:ca:05:57:
57:ad:4e:8c:82:90:78:93:04:ef:68:1b:c8:28:d9:b6:a1:b0:
47:28:b6:4c:f2:c0:36:ef:95:5e:e9:e1:85:14:af:27:c3:fc:
08:c7:b9:de:ee:34:8a:6e:35:a1:57:04:58:01:da:2a:ff:71:
22:73:bf:e6:f7:56:84:fb:ea:e0:ea:d2:6c:80:99:ee:61:92:
54:d8:93:f8:1b:67:8b:65:6a:60:4d:94:1b:92:d3:d5:b7:6f:
eb:56:3b:b1:77:d1:08:bb:8d:72:86:53:e0:32:b7:e7:c0:46:
fd:9b:a9:a4:eb:b0:09:4a:5d:c0:3b:e0:ab:ab:0f:c6:0f:7a:
92:71:ea:a5:48:11:e8:33:88:5c:ea:dc:9c:43:5b:97:e9:df:
ae:21:96:e2:63:c5:21:31:ce:75:66:34:31:c3:61:95:df:17:
16:16:85:da:48:99:b0:13:ff:17:8e:50:0e:77:a0:d8:6b:a5:
cf:31:0d:ee:e6:48:eb:11:16:9d:cb:25:ff:5e:3a:64:8a:23:
11:da:da:1a:d2:57:df:72:f5:d7:7f:93:29:c2:fc:f9:03:fc:
8d:8a:07:1f:74:00:77:3d:4f:97:57:d4:ef:cd:f3:7b:0b:5d:
01:c6:09:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:24 2024 by rpki-client on console-fra.rpki-client.org