Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/7kAtLJa6F9RrIpQlpa6OKrF96BQ.roa
File: 7kAtLJa6F9RrIpQlpa6OKrF96BQ.roa (raw, json)
Hash identifier: jDaVemsSZkKE+8qiEhXGX3puyEMr7CXTuYpny/4tDIM=
Subject key identifier: EE:40:2D:2C:96:BA:17:D4:6B:22:94:25:A5:AE:8E:2A:B1:7D:E8:14
Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial: 018A31097C38B6C9C73DF889A9E806938E7D
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/7kAtLJa6F9RrIpQlpa6OKrF96BQ.roa
Signing time: Sat 26 Aug 2023 08:50:19 +0000
ROA not before: Sat 26 Aug 2023 08:50:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216416
IP address blocks: 45.94.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Sep 2023 17:47:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:31:09:7c:38:b6:c9:c7:3d:f8:89:a9:e8:06:93:8e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Validity
Not Before: Aug 26 08:50:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee402d2c96ba17d46b229425a5ae8e2ab17de814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f3:92:f8:c3:f2:64:ad:c7:73:d3:bc:d4:c0:
77:41:0a:e0:07:88:1f:73:8c:38:43:e2:30:77:d8:
df:9f:61:ab:c7:87:aa:48:9b:2c:e9:7e:2e:61:70:
3b:00:38:91:34:92:45:a3:68:b4:2e:39:77:e4:c4:
33:15:30:6c:aa:d1:e7:17:85:98:ba:c0:3b:29:f7:
f8:b8:9d:3c:09:df:60:dc:50:34:d2:b1:25:16:9a:
fb:b6:f8:ce:e7:98:12:82:fc:ad:b3:e7:ce:29:19:
ca:d8:f8:80:44:15:a6:15:bd:69:a9:8b:5c:fc:33:
e8:44:89:17:e2:5a:40:78:42:ca:46:d7:90:20:e0:
da:13:e8:c7:5a:a2:0f:8a:5b:e3:14:16:b9:9c:63:
14:11:3e:5f:14:25:ad:5e:cc:37:07:3a:b3:db:f3:
ce:ee:05:e0:a6:54:06:1d:99:12:c6:31:fa:17:0b:
01:74:66:7f:66:c3:21:59:9d:b5:f3:de:9c:7c:d1:
41:3e:7d:2b:2d:17:d0:2c:74:1d:03:10:aa:9e:3b:
0a:a1:7f:dc:e7:61:81:d6:99:99:7d:77:17:23:e1:
d7:9a:7b:9e:da:ac:6a:59:e8:80:69:7a:fe:3b:7d:
dc:09:1d:8c:ca:a4:d4:ef:b6:26:67:23:49:e2:cf:
da:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:40:2D:2C:96:BA:17:D4:6B:22:94:25:A5:AE:8E:2A:B1:7D:E8:14
X509v3 Authority Key Identifier:
keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/7kAtLJa6F9RrIpQlpa6OKrF96BQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.6.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:70:1e:0f:32:22:29:a2:11:6c:d2:eb:62:b4:ad:b8:ec:72:
95:a4:f4:75:69:a5:e8:f5:58:70:8c:d1:27:00:5a:26:95:f0:
65:1a:b9:78:62:07:04:a2:6e:58:40:0b:70:55:df:76:76:9c:
95:bc:8d:50:c5:60:f1:7b:fa:fa:8c:ef:6a:b0:5b:f3:53:3d:
2f:ea:5d:2b:b7:a5:72:61:ce:b4:1f:4c:ed:0e:3d:67:9d:e2:
8f:4b:9f:7e:cd:bc:9a:16:be:2e:bb:81:a8:be:aa:f2:bb:73:
c4:c7:50:be:dd:03:c8:66:42:bd:81:1b:95:23:66:b4:66:03:
3a:fc:17:fb:87:6b:f5:0f:60:50:63:34:79:86:09:1e:75:d9:
10:0e:c6:5e:92:09:75:f4:b6:ed:df:a9:ef:71:e1:99:ae:40:
84:7e:b4:da:63:ec:d6:68:b1:d3:3e:b9:56:29:16:01:9a:3c:
96:ff:c1:e5:56:0a:6f:ad:b9:0b:90:d2:64:9d:db:04:58:47:
04:4a:b2:2c:fc:13:7b:9b:2c:85:ca:88:ec:f3:1a:8a:e6:b1:
dd:87:7d:13:40:79:cb:2b:ff:1e:72:bf:9d:df:09:86:4d:02:
1a:05:48:09:c5:c0:4d:ca:1a:de:ea:48:06:24:00:af:69:4b:
f3:1f:c5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:36 2024 by rpki-client on console-ams.rpki-client.org