Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/NmpRYQl66w45my20Te8U6AvNAck.roa
File: NmpRYQl66w45my20Te8U6AvNAck.roa (raw, json)
Hash identifier: +sqDMlitV0pXxG0Ex/uFiKOow/hD0XDVynY5d0W1RlU=
Subject key identifier: 36:6A:51:61:09:7A:EB:0E:39:9B:2D:B4:4D:EF:14:E8:0B:CD:01:C9
Certificate issuer: /CN=646579561eca5879a747025e5798487b19cd2a97
Certificate serial: 018570152D3E9156CDAB94B3FF1380367962
Authority key identifier: 64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/NmpRYQl66w45my20Te8U6AvNAck.roa
Signing time: Mon 02 Jan 2023 01:25:13 +0000
ROA not before: Mon 02 Jan 2023 01:25:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 45.146.157.0/24 maxlen: 24
45.146.158.0/24 maxlen: 24
45.146.156.0/24 maxlen: 24
45.146.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:2d:3e:91:56:cd:ab:94:b3:ff:13:80:36:79:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=646579561eca5879a747025e5798487b19cd2a97
Validity
Not Before: Jan 2 01:25:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=366a5161097aeb0e399b2db44def14e80bcd01c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2a:5d:e2:f2:ae:66:11:03:95:ef:f6:06:a3:
08:2e:86:4b:3a:e4:7a:92:84:5f:32:80:d7:91:82:
5f:d8:e4:cd:ca:89:39:a9:39:a3:9d:96:de:95:79:
d3:02:b6:d0:f5:d7:fb:35:c6:ed:1d:f9:ac:a9:73:
41:05:a7:3b:4c:21:4f:d9:57:5c:e5:18:80:9b:8d:
00:9a:e4:72:44:31:19:73:24:5e:0a:f0:fb:8f:3a:
8b:aa:4a:23:b5:03:41:9c:fa:9e:09:9b:5c:d8:6e:
e6:2b:1e:61:48:da:8f:ae:1a:ca:b7:d1:c3:a8:67:
75:1a:fc:e8:d5:c2:f7:2d:45:15:bd:bf:1f:f7:8a:
f1:61:24:d8:f9:be:0c:4c:b0:f6:7d:96:3f:4a:5c:
d9:54:8b:47:f0:06:9d:16:9d:74:35:3e:e1:91:20:
82:0b:61:5d:2b:41:10:40:10:db:0b:ea:05:10:3a:
5c:6b:b8:5c:ab:5d:84:43:ea:82:c6:16:84:da:a9:
96:72:85:d9:70:e7:2b:e2:89:fc:8f:6c:75:1f:d0:
6b:73:e8:42:75:5e:6f:27:8c:6e:5f:9a:df:61:bc:
8d:e4:26:f9:34:33:39:b9:27:f1:17:75:1f:53:27:
f5:46:5c:cc:fd:74:44:aa:6a:87:4a:92:fc:07:e0:
7f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6A:51:61:09:7A:EB:0E:39:9B:2D:B4:4D:EF:14:E8:0B:CD:01:C9
X509v3 Authority Key Identifier:
keyid:64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/NmpRYQl66w45my20Te8U6AvNAck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.156.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:7c:3b:ea:20:af:a8:47:cb:34:1d:80:64:6f:fa:c5:5d:f2:
e6:19:8b:2f:2b:1a:4d:fb:aa:fe:18:7b:80:ce:d5:46:4c:94:
13:98:7b:d0:78:d5:ab:dc:76:fc:dc:f0:76:83:26:d6:d6:01:
2e:14:71:aa:50:be:a5:a1:29:b3:ed:1c:20:c7:d2:65:62:00:
1c:26:66:f6:20:6f:62:e2:ff:ae:84:05:0a:af:2c:39:25:e8:
9a:d2:9f:23:93:35:1b:97:b7:64:5a:c3:2c:a7:6f:e0:bf:90:
84:32:03:06:4a:6c:73:af:9b:4b:c3:9c:8d:ae:57:db:f3:83:
08:5e:d4:51:5b:83:94:56:6c:2f:b4:db:54:43:35:8b:da:74:
c0:4b:e7:f0:65:18:c9:d6:35:8a:1d:b3:97:02:e1:09:dd:0e:
da:a6:cc:f6:8b:f5:78:4d:4e:a7:f7:14:55:42:92:c8:62:bd:
42:a3:b8:1a:c9:20:87:4f:7a:4a:37:15:8c:03:64:af:1f:b8:
a5:79:2b:a9:84:2e:91:f5:2b:a0:18:98:3c:4b:ec:f8:d7:e9:
bb:20:07:8c:ce:64:ad:e3:0c:91:72:d5:34:a7:77:60:bf:68:
b4:70:bc:75:00:7d:b4:4b:62:00:38:74:47:df:87:78:53:6d:
00:b2:bc:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:16 2024 by rpki-client on console-ams.rpki-client.org