Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/qH-f3ullEWvBXZOVzjV1MJ3WtEc.roa
File: qH-f3ullEWvBXZOVzjV1MJ3WtEc.roa (raw, json)
Hash identifier: yA8zMtKce0HJdBAbjXu1EJhR0cWgLaNWxX7gTtVILs4=
Subject key identifier: A8:7F:9F:DE:E9:65:11:6B:C1:5D:93:95:CE:35:75:30:9D:D6:B4:47
Certificate issuer: /CN=a1d71853324eb060fbafc988233860499c96c53a
Certificate serial: 018CC80179B873BE4A43435C15C81064CBF2
Authority key identifier: A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/qH-f3ullEWvBXZOVzjV1MJ3WtEc.roa
Signing time: Tue 02 Jan 2024 02:29:49 +0000
ROA not before: Tue 02 Jan 2024 02:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 32167
IP address blocks: 45.148.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jan 2024 07:46:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:79:b8:73:be:4a:43:43:5c:15:c8:10:64:cb:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d71853324eb060fbafc988233860499c96c53a
Validity
Not Before: Jan 2 02:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a87f9fdee965116bc15d9395ce3575309dd6b447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e1:f0:5a:46:31:9e:08:9a:ad:9a:0d:06:7b:
ca:6b:ed:37:71:4b:67:64:47:d5:80:a3:81:51:58:
10:e8:ca:07:45:ae:dc:80:73:ed:6b:73:ee:70:58:
79:77:8c:0a:d0:f1:dc:0d:df:8f:50:d9:7c:92:20:
bd:ec:6e:a8:f2:97:73:dd:3e:fa:0c:0a:10:8e:c2:
9c:d5:9a:a9:32:d3:66:f1:68:a6:75:89:e9:0a:9f:
f9:64:f5:d4:ad:96:8b:14:82:35:3d:0d:5f:58:77:
3e:04:69:af:62:b6:a4:b6:7d:cb:d7:ca:4a:04:9f:
05:80:14:65:bc:3b:08:d6:ac:65:11:df:22:c3:07:
5d:c7:55:33:1e:c4:a7:af:80:65:16:1d:61:ae:23:
5a:6c:f7:d5:da:f3:dd:48:e9:d1:02:db:5c:a7:85:
14:ca:15:4d:95:f4:56:9d:03:20:ba:29:11:54:10:
83:59:3f:a0:52:c4:ce:e2:da:09:da:bc:42:e7:77:
59:ad:9a:3f:a9:f6:d3:a2:ee:95:78:71:12:ed:79:
b3:2e:d2:7c:c6:fe:f8:27:d1:e6:1b:f8:5f:c9:9b:
88:1f:0e:e9:78:3e:cb:f8:fc:87:33:5b:87:af:2e:
ba:e5:e8:a3:9e:68:c1:b9:ac:f8:4c:ad:64:b4:25:
ba:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7F:9F:DE:E9:65:11:6B:C1:5D:93:95:CE:35:75:30:9D:D6:B4:47
X509v3 Authority Key Identifier:
keyid:A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/qH-f3ullEWvBXZOVzjV1MJ3WtEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.132.0/24
Signature Algorithm: sha256WithRSAEncryption
67:9c:92:b4:95:27:25:6d:4a:ca:0b:c6:b5:db:78:89:c3:5c:
54:00:7a:86:d2:77:de:10:b7:fc:7a:53:07:10:22:b1:34:e5:
af:4d:6d:f5:7c:19:dc:e3:44:0e:a0:66:97:f1:30:f1:d0:4d:
c2:a1:b3:23:08:ce:a8:46:38:72:f3:1c:f3:fe:5a:9f:9b:5c:
4d:be:21:6e:22:ae:a9:ca:0c:b3:2e:c4:e0:6b:2f:62:f2:bb:
c1:fa:ac:6b:70:a3:27:bb:d3:3d:32:b0:40:1a:0e:f0:d1:6b:
22:f3:2b:c1:5b:64:9c:1e:9f:04:63:80:36:20:cc:87:e9:23:
ec:94:56:a8:2d:34:79:71:cc:31:c4:fe:6c:37:d7:51:9e:f7:
ff:b1:6a:03:3e:bd:3a:ea:51:81:20:ae:12:87:b9:0a:96:44:
81:11:4e:4f:60:4a:ff:3b:7c:ef:7b:70:1f:29:65:0e:e4:d9:
af:7f:bd:04:71:b9:bb:3d:d3:81:0a:d4:43:01:7a:b5:73:47:
60:20:b3:c7:53:26:21:5f:da:7f:ab:b6:b5:c2:42:2e:1b:ed:
e7:60:e4:45:03:d6:1b:22:09:ee:04:68:90:eb:e9:e4:d9:0b:
ea:fe:3d:49:35:87:3c:a7:d3:3b:61:25:0e:6c:1b:75:a2:6e:
38:46:2a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:08 2024 by rpki-client on console-ams.rpki-client.org