Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/T-k_utxQMBlreynGQBEkoQ8t3Sg.roa
File: T-k_utxQMBlreynGQBEkoQ8t3Sg.roa (raw, json)
Hash identifier: YBJ4DoRqbeg9xu8bwmGbah3e/lUE6HYneASR/aE5ZRU=
Subject key identifier: 4F:E9:3F:BA:DC:50:30:19:6B:7B:29:C6:40:11:24:A1:0F:2D:DD:28
Certificate issuer: /CN=a1d71853324eb060fbafc988233860499c96c53a
Certificate serial: 0187E70587D94CC36E71D62FE2CB6E43E204
Authority key identifier: A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/T-k_utxQMBlreynGQBEkoQ8t3Sg.roa
Signing time: Thu 04 May 2023 13:48:32 +0000
ROA not before: Thu 04 May 2023 13:48:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.148.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 May 2023 21:11:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e7:05:87:d9:4c:c3:6e:71:d6:2f:e2:cb:6e:43:e2:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d71853324eb060fbafc988233860499c96c53a
Validity
Not Before: May 4 13:48:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fe93fbadc5030196b7b29c6401124a10f2ddd28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4c:7e:c7:f9:aa:1b:91:49:08:0a:73:f8:a4:
50:1d:2d:f4:14:b4:0d:dd:c2:ef:28:fc:7f:bc:c4:
9c:57:36:3e:12:21:50:b1:56:25:91:7a:24:d5:89:
6c:43:27:ab:56:df:78:37:80:47:2a:ed:c9:a2:73:
97:ec:61:43:d3:88:ff:98:74:19:6a:4d:fc:85:9b:
8f:9f:a6:4a:f3:87:9b:d4:aa:c0:55:3a:30:18:59:
16:f4:92:2a:ca:94:75:98:84:10:48:df:36:93:94:
0e:f0:14:c9:8e:ef:0d:54:13:35:6b:37:ef:6d:53:
6e:4b:e4:ca:55:ee:fd:ad:32:8b:a3:3c:bb:90:81:
18:94:8a:e6:f8:34:6f:cf:bb:d3:e0:27:3f:53:14:
32:40:b8:cc:3e:cb:65:39:30:d8:60:14:5c:63:53:
e9:79:b8:3a:7f:19:d3:60:88:f1:7e:82:4d:01:e5:
7d:6b:5f:43:7f:ae:c8:7f:72:ec:24:0b:64:79:75:
65:2c:14:58:43:6f:96:b1:be:06:12:51:36:71:6c:
f5:5b:98:86:33:2b:ac:ae:1d:19:30:ac:81:d9:67:
53:a0:25:33:aa:3a:0f:5d:1d:f5:55:5b:6a:34:f0:
95:79:b1:d1:7f:0e:73:64:2d:34:9a:b7:e6:90:54:
8d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E9:3F:BA:DC:50:30:19:6B:7B:29:C6:40:11:24:A1:0F:2D:DD:28
X509v3 Authority Key Identifier:
keyid:A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/T-k_utxQMBlreynGQBEkoQ8t3Sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.132.0/24
Signature Algorithm: sha256WithRSAEncryption
97:97:e7:51:3c:40:52:56:2d:8a:0f:ea:de:80:e1:11:9e:10:
a3:d9:ab:ce:7f:1d:80:bd:75:c7:30:9d:15:ab:3d:fb:98:99:
2b:de:29:13:7d:a2:d2:f0:70:18:25:a0:95:d7:a1:20:bd:55:
75:ca:be:7d:e3:d6:0f:2f:2a:a6:eb:ca:ce:f3:f9:74:71:00:
05:31:76:97:ee:43:f1:2e:dd:c3:be:a4:22:2e:b8:77:15:4c:
9d:0e:0e:7f:8a:20:f0:e0:62:f2:69:24:d1:c5:84:ac:7e:3d:
3c:f4:eb:1c:47:5e:af:23:d5:ce:66:d6:07:a9:c0:bb:dc:0f:
88:79:3c:ae:05:40:c1:c3:96:48:2e:5f:cd:c1:24:28:b2:78:
c1:7c:58:48:35:b4:d3:e6:7c:77:72:f2:ad:e1:b3:f3:de:ed:
74:5b:7c:0d:cb:4c:9c:c6:53:cd:27:1d:89:6a:62:97:b9:db:
4b:9d:03:70:8e:7b:fc:c0:4b:7f:b0:35:7e:1a:11:bc:a2:ab:
fc:2e:30:30:6d:f6:2b:d6:1d:04:a0:83:11:b5:aa:54:f1:6a:
31:3d:6c:22:09:84:83:57:6b:2f:ab:e6:da:46:52:60:cd:72:
fc:3f:bd:f2:78:29:17:56:24:09:ad:2f:2e:5f:cb:d9:66:54:
25:c7:16:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:08 2024 by rpki-client on console-ams.rpki-client.org