Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/ChS8BKVnOe6LwCiQfK15taL2hYI.roa
File: ChS8BKVnOe6LwCiQfK15taL2hYI.roa (raw, json)
Hash identifier: syRHQFB7fxxg4VLPRS9Yo8Y7sULLbKWU7KY2RMpBm58=
Subject key identifier: 0A:14:BC:04:A5:67:39:EE:8B:C0:28:90:7C:AD:79:B5:A2:F6:85:82
Certificate issuer: /CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
Certificate serial: 018656A18B0D679E3C9653E298BF8E4D54A2
Authority key identifier: BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/ChS8BKVnOe6LwCiQfK15taL2hYI.roa
Signing time: Wed 15 Feb 2023 19:51:12 +0000
ROA not before: Wed 15 Feb 2023 19:51:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 11426
IP address blocks: 45.94.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:56:a1:8b:0d:67:9e:3c:96:53:e2:98:bf:8e:4d:54:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
Validity
Not Before: Feb 15 19:51:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a14bc04a56739ee8bc028907cad79b5a2f68582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:16:2a:f1:cd:4c:c9:b4:66:fa:f3:64:1c:ad:
47:21:62:8f:e9:02:7f:52:4c:16:65:5a:d1:39:26:
4c:69:5a:7d:25:0b:a7:94:c5:8d:40:a0:92:46:1f:
88:f8:4d:bc:ff:3d:04:6e:bc:f8:0b:85:20:07:75:
8a:b3:7c:05:6c:38:cf:81:e6:1b:c0:32:0e:6e:50:
c4:a3:83:e9:7f:4a:73:84:b5:da:73:10:8b:3a:b2:
7d:b1:2b:c4:6d:58:f6:31:06:21:0b:18:67:b4:28:
b0:87:a4:d6:af:c5:fd:e5:94:3e:de:ab:c6:55:ec:
52:e7:78:57:de:11:b1:d0:97:05:b3:04:2a:9a:21:
39:be:ab:6b:ce:82:9f:38:da:89:89:0d:77:4e:f7:
f4:91:a8:b8:be:9d:76:83:44:c2:43:b2:14:0f:55:
61:19:2a:7d:4b:6b:38:c7:7b:68:22:12:59:1a:2f:
cc:ca:2f:6f:fd:e0:dd:85:f4:63:f5:49:90:f7:a1:
d3:9b:3d:29:68:ba:b5:a3:fe:f4:7f:c5:0f:b9:45:
05:15:ba:39:c2:81:99:77:20:9d:c3:bc:17:3b:94:
d8:ea:6c:89:a3:74:4c:74:25:59:4e:dd:7c:ec:67:
7a:ec:50:6e:dd:39:11:11:46:58:7a:c7:98:68:47:
d0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:14:BC:04:A5:67:39:EE:8B:C0:28:90:7C:AD:79:B5:A2:F6:85:82
X509v3 Authority Key Identifier:
keyid:BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/ChS8BKVnOe6LwCiQfK15taL2hYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.152.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:a7:5e:49:32:55:af:c3:61:7f:35:7c:f3:a2:95:42:41:bd:
64:5f:8b:ee:ed:ea:8d:68:eb:05:c8:38:98:71:b9:c1:15:4e:
99:d7:50:87:ea:4d:40:c1:4b:b3:b8:97:fe:c6:d5:d6:d3:28:
95:40:00:71:80:cc:2b:ad:09:e0:0a:8f:e0:13:1c:8a:88:33:
e1:d1:e6:b8:ac:ec:f3:99:82:25:2b:47:e6:98:f5:c6:19:dd:
81:3c:20:d0:f7:3d:f4:54:1b:7e:b5:e1:3f:b3:67:75:4d:c0:
99:0b:1a:b9:7c:75:6c:a2:f3:5a:a3:06:6b:30:cc:a4:15:f7:
02:9f:f0:15:1a:88:a9:4f:bd:17:0d:2b:a4:78:23:54:4d:65:
98:fe:5f:ec:61:9a:08:19:ac:bb:85:78:74:bf:e9:ca:c7:f0:
ae:2c:a0:8f:58:59:57:be:f0:19:29:3d:42:07:69:2a:05:bd:
cd:7a:7f:38:bd:d0:5f:24:03:cf:96:ab:f9:a9:3c:da:04:ee:
88:d4:c8:ef:38:e1:61:27:da:86:ef:bd:c1:e7:6b:66:3c:66:
df:67:61:99:86:be:5a:d1:3c:84:b0:ed:48:50:92:41:4f:84:
a1:8d:51:2c:da:ed:ff:00:bb:45:3b:08:e5:94:ed:ce:2d:e1:
bd:96:20:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:59 2024 by rpki-client on console-fra.rpki-client.org