Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/qgjkFRIeyt6reVeKqzcRxMkpK88.roa
File: qgjkFRIeyt6reVeKqzcRxMkpK88.roa (raw, json)
Hash identifier: eUDjzJuJ89POQuKlFHTukbC9LY+tRHFM+Uhbag6p/qU=
Subject key identifier: AA:08:E4:15:12:1E:CA:DE:AB:79:57:8A:AB:37:11:C4:C9:29:2B:CF
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018B47103631629E33F2586A0D718BA16B1C
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/qgjkFRIeyt6reVeKqzcRxMkpK88.roa
Signing time: Thu 19 Oct 2023 08:32:06 +0000
ROA not before: Thu 19 Oct 2023 08:32:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.144.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Oct 2023 18:48:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:47:10:36:31:62:9e:33:f2:58:6a:0d:71:8b:a1:6b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 19 08:32:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa08e415121ecadeab79578aab3711c4c9292bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0b:6d:ca:3e:c8:7b:27:e8:1a:2e:2d:58:1d:
35:bd:6e:08:62:0f:1a:2c:67:d6:da:bf:b6:68:98:
ca:f4:b2:0c:27:aa:c3:16:f9:9e:a2:cd:cb:d6:9a:
68:82:16:e5:76:d2:74:13:db:50:94:3a:09:e8:ff:
d3:e2:ec:b0:12:98:5c:46:cb:cf:f3:61:ce:39:da:
09:7c:30:79:93:70:4b:43:2e:04:ec:57:04:86:aa:
00:35:3f:d2:6f:52:c0:20:8c:57:0d:5b:b7:6f:28:
18:6a:83:9e:ef:69:4d:7c:2c:7a:5b:bd:90:92:4c:
91:b2:f3:14:3a:a8:3d:3b:8e:20:b0:be:d2:c7:00:
5d:bc:d1:84:c2:16:6f:0d:2c:f5:e7:f1:47:fc:d1:
d1:3e:7e:65:aa:5e:3a:41:fe:9f:69:c1:8b:34:a1:
32:d0:f8:5b:15:ca:0f:cc:8d:6b:e8:42:c9:f2:d9:
45:7e:7b:f5:20:00:46:e0:71:be:ca:70:1e:57:80:
f2:95:b5:3a:b7:95:98:17:67:fd:cf:ba:28:a5:8c:
17:dd:60:ba:65:f8:0e:7e:26:cf:c8:fc:f5:36:6c:
d3:a0:fb:12:87:ff:ca:45:41:29:f9:dd:46:09:78:
4a:ea:9b:ac:de:83:ab:80:29:85:f5:fc:7a:c2:37:
90:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:08:E4:15:12:1E:CA:DE:AB:79:57:8A:AB:37:11:C4:C9:29:2B:CF
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/qgjkFRIeyt6reVeKqzcRxMkpK88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.215.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:34:aa:9f:ac:56:54:a3:47:f3:ef:52:d1:9a:99:dc:e6:77:
8d:cc:88:1b:04:49:34:a2:a0:ef:85:b8:4c:c9:bc:33:ed:60:
30:17:b5:94:cf:5a:bd:cc:14:c0:ed:34:a1:2b:86:57:bb:f4:
b0:8e:6d:25:bd:83:91:b0:6b:c3:4a:38:cc:2c:5d:cd:5d:94:
e6:96:76:8b:ae:3d:60:9a:cb:a2:bb:98:4a:74:07:60:09:ad:
65:e3:16:d9:75:27:d3:5f:ec:5e:a0:0f:d1:e6:b8:5e:59:2a:
c6:18:1b:41:25:60:12:39:8e:5c:a4:72:30:c3:ed:68:97:8f:
f3:f5:dc:a0:02:f3:d2:5f:0a:f9:4f:95:98:94:46:69:22:92:
11:3a:1e:76:9b:f9:d4:4d:40:49:41:bb:2d:db:29:67:23:81:
2f:31:55:fb:89:43:07:aa:e5:69:b2:57:d4:73:10:90:90:f7:
ad:8d:60:eb:1b:e1:20:d0:7b:ba:c6:73:c0:af:6f:99:a2:23:
21:17:74:30:f5:45:17:0b:0e:dc:a9:26:67:7a:63:97:2b:dc:
93:9e:ab:ff:a4:83:38:12:3a:10:98:78:2d:98:b6:d6:d1:a9:
15:a5:86:59:c7:d1:43:f9:11:16:79:77:00:a0:0e:d3:ae:4c:
5c:07:8e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:32 2024 by rpki-client on console-fra.rpki-client.org