Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/RePEz9tEiPcXxoveRBSiOgId3HU.roa
File: RePEz9tEiPcXxoveRBSiOgId3HU.roa (raw, json)
Hash identifier: H9j+9RurNj+LD5fDdAsCc560j258P0HAABoTb4V1GWU=
Subject key identifier: 45:E3:C4:CF:DB:44:88:F7:17:C6:8B:DE:44:14:A2:3A:02:1D:DC:75
Certificate issuer: /CN=139e83616f51f00b1e55c0c617b3a5f04ab741a3
Certificate serial: 01856E2FA0D2B3F550EBF6FB4524085B12D5
Authority key identifier: 13:9E:83:61:6F:51:F0:0B:1E:55:C0:C6:17:B3:A5:F0:4A:B7:41:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E56DYW9R8AseVcDGF7Ol8Eq3QaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/RePEz9tEiPcXxoveRBSiOgId3HU.roa
Signing time: Sun 01 Jan 2023 16:34:53 +0000
ROA not before: Sun 01 Jan 2023 16:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52110
IP address blocks: 46.174.24.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:a0:d2:b3:f5:50:eb:f6:fb:45:24:08:5b:12:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=139e83616f51f00b1e55c0c617b3a5f04ab741a3
Validity
Not Before: Jan 1 16:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45e3c4cfdb4488f717c68bde4414a23a021ddc75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4c:bf:a9:47:13:b4:7f:26:03:fa:e1:56:d6:
e8:05:c7:c6:f8:ea:76:a1:f8:ad:7d:e8:ce:a9:4a:
55:8a:d2:2e:73:bb:d0:94:2e:db:9c:ef:5d:d6:b5:
84:18:64:03:d6:e0:bd:30:04:77:d2:c2:3b:b5:50:
92:2e:2f:72:24:82:60:54:2d:d0:38:8c:fd:af:09:
44:62:05:61:51:1c:10:bc:3e:11:ce:4d:e7:b9:c3:
c1:13:33:d2:f4:8c:b5:20:ad:65:82:17:b8:bb:82:
bd:65:1f:c6:8c:59:d7:d9:17:c9:93:30:8f:17:03:
02:16:87:58:4b:76:fc:af:4b:95:42:7f:23:19:9a:
3b:cb:cf:58:f9:66:6e:f8:41:db:ae:f2:d7:a4:70:
53:b0:35:74:96:3b:6f:dc:9d:c0:58:08:2b:10:3c:
ed:1f:b7:5f:0b:ed:bd:8c:16:8e:9a:e5:58:d7:57:
55:37:30:38:d1:a0:de:85:d4:2e:2f:c0:cf:52:58:
17:b5:e4:c6:d1:10:91:2b:64:07:18:b2:2b:9e:54:
8e:2a:c2:b3:01:d5:e4:4b:b2:b6:e1:09:d7:a7:7f:
cf:9c:33:00:ba:3f:24:87:0e:53:c0:21:5f:c0:6d:
a7:28:40:5c:f0:89:52:4b:ed:3e:f8:cc:5f:14:aa:
1b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E3:C4:CF:DB:44:88:F7:17:C6:8B:DE:44:14:A2:3A:02:1D:DC:75
X509v3 Authority Key Identifier:
keyid:13:9E:83:61:6F:51:F0:0B:1E:55:C0:C6:17:B3:A5:F0:4A:B7:41:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E56DYW9R8AseVcDGF7Ol8Eq3QaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/RePEz9tEiPcXxoveRBSiOgId3HU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.24.0/21
Signature Algorithm: sha256WithRSAEncryption
a4:d5:d9:f6:79:68:56:83:2d:d1:08:95:39:16:ac:c3:a0:60:
1f:4b:62:c2:32:f2:40:2a:6e:40:6a:3e:e6:64:43:70:6e:5a:
cf:29:9f:93:60:d8:ca:f0:54:8e:84:6a:06:58:1a:d0:12:ca:
6e:61:25:eb:1e:1d:a8:61:5f:56:1a:a7:ec:44:24:9b:9c:1e:
eb:3f:f9:50:2e:c2:62:ba:70:99:e0:20:54:12:01:1b:f8:9e:
51:e0:e2:e7:0a:5b:fa:3a:58:fc:d2:1c:8b:cc:a7:e2:45:39:
cf:9c:44:4f:8a:6a:b7:ce:28:16:b8:d9:62:57:1b:91:e8:ae:
a0:fe:5b:3d:e5:ee:4c:b9:7a:77:6a:dc:58:7f:30:8b:54:77:
6d:03:40:fc:3f:65:6e:18:bc:64:df:cb:ff:f5:a8:cf:9f:c3:
f2:c1:aa:71:8c:4f:24:cf:96:86:db:d9:dc:84:9a:64:37:36:
89:55:77:62:a1:dc:d0:55:d4:fe:a1:be:d1:04:a0:1d:79:10:
0f:70:5a:c2:24:fc:0f:2d:1c:0e:8b:8b:92:05:87:fb:42:21:
85:96:83:08:5f:e8:92:3d:cb:6b:87:96:86:2d:3d:8b:46:e5:
a0:d0:0c:de:e1:da:fa:21:6d:a0:73:cb:56:8b:f0:ee:5c:9b:
7d:67:db:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:29 2024 by rpki-client on console-fra.rpki-client.org