Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/2U31Bl2GWowcZkWZ48wxnxU-BnQ.roa
File: 2U31Bl2GWowcZkWZ48wxnxU-BnQ.roa (raw, json)
Hash identifier: 93KjYBngvMwR3MrE/Rumiq7fCMe5U5RpsDe6ctEr32s=
Subject key identifier: D9:4D:F5:06:5D:86:5A:8C:1C:66:45:99:E3:CC:31:9F:15:3E:06:74
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 01888F7AE48D110B4CA6884D07CBA4CE228B
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/2U31Bl2GWowcZkWZ48wxnxU-BnQ.roa
Signing time: Tue 06 Jun 2023 06:52:55 +0000
ROA not before: Tue 06 Jun 2023 06:52:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.155.242.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Jun 2023 06:18:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8f:7a:e4:8d:11:0b:4c:a6:88:4d:07:cb:a4:ce:22:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jun 6 06:52:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d94df5065d865a8c1c664599e3cc319f153e0674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:88:69:b3:be:7e:d5:74:f2:b6:47:91:70:d3:
2a:d3:b2:aa:d1:90:2d:b1:6a:a7:08:f2:2b:07:e7:
85:01:85:43:51:86:11:ca:05:a0:94:68:68:57:ea:
25:b9:30:4c:bb:dd:f3:44:44:8c:58:b7:5c:40:e4:
d1:24:e9:9c:ef:ef:70:41:8d:21:cc:ae:37:27:7b:
27:1b:e4:3b:76:7b:1e:dd:10:ad:a9:5f:c1:34:74:
dc:7a:70:01:59:c3:fb:42:12:9d:4d:b3:af:17:71:
7b:3f:63:68:bc:61:ac:b7:fd:33:79:3e:56:e1:9d:
6f:d5:85:66:1c:cf:c6:6a:8e:0c:36:0f:72:1a:c5:
9e:a5:f0:29:a4:93:57:67:ea:99:b8:2b:34:80:f3:
78:d7:a2:c9:ce:d6:ea:59:dc:59:24:f8:33:04:b6:
e9:5b:19:77:20:ba:af:f3:98:dd:f0:b7:2d:51:b0:
88:d0:1b:f1:f5:ad:3b:bf:c9:22:95:54:fc:3f:bb:
51:fa:4c:d6:28:87:ec:9f:6e:11:51:87:af:1c:48:
9a:f4:53:a8:b3:68:d8:5c:dd:2a:63:33:f6:59:21:
0d:12:b5:b8:05:58:b9:a8:36:ea:82:b6:60:9a:55:
19:ef:22:eb:fb:32:d2:a0:3d:1f:d7:1e:43:b8:1c:
2c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4D:F5:06:5D:86:5A:8C:1C:66:45:99:E3:CC:31:9F:15:3E:06:74
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/2U31Bl2GWowcZkWZ48wxnxU-BnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.242.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:b6:2a:cf:9e:35:ba:b4:ea:5d:75:f2:da:ef:91:ee:e9:03:
66:38:c1:ac:f3:67:24:8a:bc:b2:58:3b:3b:6b:14:49:d1:2e:
6e:5f:c5:9b:b5:bb:a8:5b:b4:04:2f:eb:ba:09:8a:33:0f:73:
7c:cb:7d:1f:9c:04:1f:13:3d:76:9d:04:fa:9e:4c:40:ca:01:
52:08:50:42:57:23:89:1c:02:df:5f:7a:78:f7:22:d0:ea:12:
4f:8c:1c:b4:bf:fa:b4:4e:d7:6d:7e:ea:f8:23:ff:10:ba:41:
58:c8:5c:a0:6c:06:9f:22:fd:da:1c:7e:95:0c:f2:c6:a0:14:
3e:df:80:e5:98:25:58:ce:53:c9:eb:5f:ff:ee:0b:3e:93:87:
ec:ea:cd:cf:92:96:08:67:9d:a6:09:91:64:85:bd:0a:a0:2b:
a9:ef:27:66:6a:94:19:d7:5d:01:2a:86:f8:89:2c:08:ee:66:
e1:82:11:91:76:67:bd:2b:81:e5:52:5a:22:df:43:c6:3c:2e:
15:a1:98:1d:a1:a5:8a:48:01:e2:d4:55:58:77:2a:70:19:ee:
45:b6:86:ea:5b:a7:28:8f:da:ae:d8:ca:d4:70:4d:a2:80:17:
70:65:16:46:61:e4:d7:97:0e:db:e7:89:05:4a:60:f3:2a:29:
1a:30:38:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:40 2024 by rpki-client on console-ams.rpki-client.org