Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/AJe-dl16KOSjd3UM7jjPLGsH4x4.roa
File: AJe-dl16KOSjd3UM7jjPLGsH4x4.roa (raw, json)
Hash identifier: FecHFA4DniPilM/UyUQEuemBqqHIqas3IrFBI1HIQog=
Subject key identifier: 00:97:BE:76:5D:7A:28:E4:A3:77:75:0C:EE:38:CF:2C:6B:07:E3:1E
Certificate issuer: /CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1
Certificate serial: 018CC86F0B682A0CEB4D9487F07C5EAC6F62
Authority key identifier: 5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/AJe-dl16KOSjd3UM7jjPLGsH4x4.roa
Signing time: Tue 02 Jan 2024 04:29:29 +0000
ROA not before: Tue 02 Jan 2024 04:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41327
IP address blocks: 45.67.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 15:28:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:0b:68:2a:0c:eb:4d:94:87:f0:7c:5e:ac:6f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1
Validity
Not Before: Jan 2 04:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0097be765d7a28e4a377750cee38cf2c6b07e31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:74:c6:84:43:51:55:49:b3:ff:db:96:00:59:
c6:7b:22:68:5e:50:99:41:a4:4d:2f:30:e3:34:53:
11:22:a0:b0:cb:6b:98:59:e4:55:3a:a2:34:b8:c4:
d4:eb:09:8c:be:80:ef:c8:b8:b9:76:5f:49:05:6e:
b2:4e:e3:61:ab:2e:4d:dc:35:aa:f8:75:95:b0:ed:
39:f3:c2:bb:19:9d:f7:ac:07:60:52:73:4a:27:eb:
1f:b8:37:9e:85:63:e7:7e:41:60:7f:3f:be:ce:42:
1d:d7:85:89:1e:0e:be:17:49:41:62:65:d0:e6:84:
f4:10:31:75:c2:87:cf:d3:be:cf:ba:50:4c:9c:e5:
d5:ea:e1:c8:d8:39:63:40:cf:52:78:8b:e7:b8:08:
58:45:2a:98:7e:6e:e6:34:58:2d:b7:6e:a9:ac:c5:
bd:99:15:fd:f6:b3:30:82:d7:d1:96:44:a8:09:6e:
9f:74:76:76:2d:63:54:24:ff:b7:c9:10:13:08:36:
dd:d9:87:6e:21:f6:21:dc:f2:4e:d2:14:e5:24:d7:
c7:51:31:a7:00:83:73:2f:31:b5:8b:fe:06:82:68:
89:b4:4c:d7:2b:b2:4b:b0:2a:22:1a:2c:07:8a:2b:
15:40:65:2e:22:4f:90:e9:fa:14:ab:b2:fa:24:fa:
71:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:97:BE:76:5D:7A:28:E4:A3:77:75:0C:EE:38:CF:2C:6B:07:E3:1E
X509v3 Authority Key Identifier:
keyid:5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/AJe-dl16KOSjd3UM7jjPLGsH4x4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.115.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:4b:a2:b1:87:70:c3:69:e6:ed:c5:16:5c:e5:74:0e:4f:20:
5d:40:63:24:30:ca:3c:bf:2e:65:4a:a1:c8:9a:2f:bd:fc:e3:
86:86:e6:65:d0:98:11:b3:fb:2f:99:bf:dd:de:b6:28:dd:4f:
a6:3f:55:0a:c3:6f:66:9d:72:ab:10:e1:74:28:83:ee:05:b4:
38:98:4f:9a:8f:02:ba:a7:1f:d8:1f:3e:75:37:cc:f7:db:21:
63:12:15:c6:02:39:68:f9:38:d6:e6:89:a3:01:f2:e4:27:41:
2a:46:3b:56:d2:f6:11:a0:ed:80:4f:31:3b:2a:b9:12:91:10:
cb:b7:4c:c1:dc:16:a4:98:2a:ae:ac:7b:d4:c9:29:d9:df:5d:
56:3f:cd:a6:7d:d8:dd:f0:bc:26:42:54:05:b5:7d:4e:0c:af:
9e:b0:8f:14:ea:e5:f8:19:d9:69:ed:bb:52:e8:56:f1:3f:cf:
c3:f2:b0:c3:2e:26:ef:b8:bd:4b:02:6b:79:12:5c:8d:57:aa:
47:c1:98:ff:43:0f:ea:86:97:a9:cd:62:5f:a2:49:f2:0e:aa:
40:8f:53:bc:e3:43:da:2f:55:0b:93:05:25:9f:e2:5b:79:5e:
6f:48:c0:6f:ba:b8:28:fc:d3:ba:40:72:be:e5:60:b8:df:09:
82:a9:c9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 01:00:34 2024 by rpki-client on console.sobornost.net