Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/_51ddofe4wpMgSTPWA2CCDb21v8.roa
File: _51ddofe4wpMgSTPWA2CCDb21v8.roa (raw, json)
Hash identifier: Ba/4m3dm7+ioU+dz/JXELDMV8qzbH0IrohfzSbOYz0k=
Subject key identifier: FF:9D:5D:76:87:DE:E3:0A:4C:81:24:CF:58:0D:82:08:36:F6:D6:FF
Certificate issuer: /CN=a1d71853324eb060fbafc988233860499c96c53a
Certificate serial: 0189BD8C08E455DC2DAA2D9A6A5B2E2BCDB4
Authority key identifier: A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/_51ddofe4wpMgSTPWA2CCDb21v8.roa
Signing time: Thu 03 Aug 2023 22:36:58 +0000
ROA not before: Thu 03 Aug 2023 22:36:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 32167
IP address blocks: 45.148.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Sep 2023 23:13:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bd:8c:08:e4:55:dc:2d:aa:2d:9a:6a:5b:2e:2b:cd:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d71853324eb060fbafc988233860499c96c53a
Validity
Not Before: Aug 3 22:36:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff9d5d7687dee30a4c8124cf580d820836f6d6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cd:0f:f4:92:e4:57:e1:8c:df:6b:51:bb:9f:
60:34:ae:2c:d2:e0:ed:dd:e0:83:2c:1b:75:c9:8f:
66:79:0f:cb:ca:3f:74:5b:aa:b2:e3:62:22:d5:c7:
16:a1:a0:cd:17:4b:75:92:93:fe:40:72:e2:26:86:
56:f4:a6:dc:36:03:a0:d4:c9:19:e5:94:6d:0e:e0:
5f:77:f1:31:9c:14:75:a8:73:18:35:90:a1:c1:4b:
76:64:39:3e:6d:c2:b7:b5:68:a1:60:f5:74:bb:68:
3f:3b:f8:2d:58:46:f3:cc:f5:20:17:a2:f7:e3:1a:
8b:99:7b:f2:fd:de:43:9b:b9:f0:5e:25:19:fe:07:
35:c6:a1:7d:ab:9e:44:18:c8:08:76:57:79:c9:68:
0f:14:fd:61:a8:ee:35:3c:2f:b1:9a:87:db:6e:62:
46:8d:80:ff:4e:21:f7:d5:ac:21:5a:1e:f6:1b:e2:
6c:93:53:43:d2:ec:80:c4:7c:d8:97:97:b6:5b:c5:
79:c1:35:ee:e1:54:9e:ae:0e:e9:ba:c9:1c:a1:20:
fb:dc:df:34:87:9a:ad:ce:a4:8e:e4:eb:d7:4a:c5:
2f:6d:b1:9b:fe:e2:6e:28:67:15:2e:72:61:1d:05:
11:cd:15:28:b6:26:54:5c:a9:97:85:f6:bb:5a:d0:
fe:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9D:5D:76:87:DE:E3:0A:4C:81:24:CF:58:0D:82:08:36:F6:D6:FF
X509v3 Authority Key Identifier:
keyid:A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/_51ddofe4wpMgSTPWA2CCDb21v8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.132.0/24
Signature Algorithm: sha256WithRSAEncryption
70:37:7f:02:46:a7:ad:8e:b0:6f:7a:fd:48:e9:12:53:3f:45:
60:e2:86:f9:59:a5:77:83:b2:78:54:a4:45:0b:2c:0d:66:86:
3b:01:5f:30:9b:65:0d:ab:ee:4c:8c:29:46:65:eb:59:44:dc:
06:a1:6d:14:a1:81:ab:5c:a5:a0:0e:64:f5:85:3e:22:15:3b:
cd:92:f5:b8:af:1c:aa:1c:73:96:aa:91:49:46:95:8f:b0:ac:
36:47:64:b0:8d:88:04:ca:3f:eb:12:c7:49:d1:be:24:ad:2c:
5f:f5:4c:6c:b3:ad:8a:d0:e2:42:2a:f2:b8:c9:1a:84:19:b1:
b7:3f:79:4c:f0:51:92:02:c0:b3:ec:c2:47:07:78:9f:28:70:
23:d0:08:9c:68:0a:d8:c7:64:d4:66:6f:28:15:c6:3c:75:5a:
0f:60:bd:0b:0d:3b:67:b9:0c:3a:c1:50:2e:e9:68:c7:48:21:
5a:44:01:7c:98:d5:c7:a7:8b:39:03:46:97:88:c9:30:80:f8:
3a:2a:62:e5:5e:d2:bf:69:85:7e:23:9b:85:52:cb:77:74:9f:
7c:7d:a6:05:14:8c:e6:d4:1e:3d:fe:57:04:48:50:1e:3b:cc:
5e:08:f7:3b:cb:a3:5b:db:25:01:93:30:c8:b3:87:d5:8c:37:
1d:8e:6e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:51 2024 by rpki-client on console-fra.rpki-client.org