Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/49Po9zgKeeICIY6foxRSaIgeifA.roa
File: 49Po9zgKeeICIY6foxRSaIgeifA.roa (raw, json)
Hash identifier: NN0A/dErmSez9LDrTgBNRSe0NRYAn6pZjkLU/k8MNfs=
Subject key identifier: E3:D3:E8:F7:38:0A:79:E2:02:21:8E:9F:A3:14:52:68:88:1E:89:F0
Certificate issuer: /CN=a1d71853324eb060fbafc988233860499c96c53a
Certificate serial: 01861D8BD819C1A7AA71525F6ED37EBE1275
Authority key identifier: A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/49Po9zgKeeICIY6foxRSaIgeifA.roa
Signing time: Sat 04 Feb 2023 17:49:09 +0000
ROA not before: Sat 04 Feb 2023 17:49:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209642
IP address blocks: 45.148.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:1d:8b:d8:19:c1:a7:aa:71:52:5f:6e:d3:7e:be:12:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d71853324eb060fbafc988233860499c96c53a
Validity
Not Before: Feb 4 17:49:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3d3e8f7380a79e202218e9fa3145268881e89f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:64:5b:8a:1f:9c:aa:ef:f6:3b:4f:fb:88:bd:
26:55:85:7e:e5:75:05:6b:c9:ac:67:4b:6a:28:94:
89:bc:b8:81:42:5d:8e:df:97:b5:8c:d4:1f:f2:dd:
18:a7:3e:75:8f:9e:7e:55:aa:9a:fe:d3:12:23:a8:
90:55:a7:11:f4:86:53:6f:95:0e:8f:bb:63:fb:4a:
ec:8d:1c:cc:31:b8:82:08:70:13:e7:fb:6f:2f:eb:
a4:d7:c3:6f:aa:04:69:27:ef:48:a5:b4:43:e5:17:
9a:90:52:c9:68:f5:05:1f:a6:3d:25:6c:36:c0:fa:
35:a2:8b:f4:07:f4:95:ec:16:8f:47:0a:b3:f4:42:
ff:4e:cd:9a:1f:cb:27:e2:93:ee:1d:8d:dd:51:2c:
4a:95:0f:89:c2:87:19:20:c0:b0:8c:27:93:2f:e8:
35:e1:ad:66:5b:8a:85:46:67:ae:12:f1:6d:8c:14:
95:69:59:cd:e0:0b:47:20:b9:49:52:6f:86:6c:1c:
c8:e4:2a:3b:ef:41:d4:a7:6e:58:6d:3b:51:d2:fd:
9d:2a:78:2f:b7:fa:a9:29:32:1c:61:24:f7:61:84:
ce:ad:55:1d:64:a0:74:ff:7d:54:f0:39:a0:b1:55:
d9:7e:96:ba:0a:2b:a6:8b:cf:12:03:ab:0c:b0:e0:
aa:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D3:E8:F7:38:0A:79:E2:02:21:8E:9F:A3:14:52:68:88:1E:89:F0
X509v3 Authority Key Identifier:
keyid:A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/49Po9zgKeeICIY6foxRSaIgeifA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.133.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:8d:15:ab:95:c4:ae:c0:12:f7:59:3d:c9:ca:e7:22:96:b9:
8f:09:9c:6a:e6:9f:5a:f6:18:68:9e:b9:dc:99:6e:20:ae:ff:
69:45:31:27:41:3e:a3:75:65:52:5e:d4:b6:79:e1:af:05:91:
88:09:91:fc:89:8a:54:3f:fc:c4:69:a9:ea:12:14:cc:83:26:
18:1f:fc:36:25:12:67:1b:f2:c1:6d:ce:44:56:6b:77:a8:1d:
66:ac:17:09:62:1b:2d:80:c7:51:8c:21:a7:f7:f5:ff:af:60:
cd:70:64:f4:7c:49:bc:da:3d:7e:75:1f:a5:d4:22:75:a1:fc:
1d:a0:6a:48:5a:13:e0:2c:ca:64:c1:97:8c:e2:2e:ea:f9:51:
9f:d9:6a:30:25:35:a0:00:1b:71:a4:60:cc:a6:26:e8:c9:53:
24:38:30:96:35:62:d3:ae:91:ca:3a:f0:80:48:6f:53:9e:7c:
7e:47:68:45:84:9c:4f:11:c3:c8:d3:b0:29:d2:2d:3d:b2:02:
fe:32:d2:c5:f6:f8:69:7f:14:0a:6c:a4:8c:57:29:01:5e:03:
cc:c2:90:ca:d0:d5:0b:60:55:06:f0:f1:c5:ba:be:88:b0:a8:
eb:b3:35:b2:8d:c0:66:ae:b8:c0:6f:b1:e6:48:28:37:3b:b3:
e8:f5:64:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:51 2024 by rpki-client on console-fra.rpki-client.org