Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/xQvlV0FrRkUfwSHvAAcOlUjs2o0.roa
File: xQvlV0FrRkUfwSHvAAcOlUjs2o0.roa (raw, json)
Hash identifier: mJdnetjOVDehcwI0KI3k8EufBJcpnPvSQuqELHNxt9E=
Subject key identifier: C5:0B:E5:57:41:6B:46:45:1F:C1:21:EF:00:07:0E:95:48:EC:DA:8D
Certificate issuer: /CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7
Certificate serial: 018CC50125ECFB54D4C4243DD3B3B565B03C
Authority key identifier: F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/xQvlV0FrRkUfwSHvAAcOlUjs2o0.roa
Signing time: Mon 01 Jan 2024 12:30:35 +0000
ROA not before: Mon 01 Jan 2024 12:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56902
IP address blocks: 45.159.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jan 2024 08:18:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:25:ec:fb:54:d4:c4:24:3d:d3:b3:b5:65:b0:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7
Validity
Not Before: Jan 1 12:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c50be557416b46451fc121ef00070e9548ecda8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:52:a1:17:33:45:7e:48:12:75:9f:9e:a9:44:
bd:cc:9b:0d:cf:ad:26:de:59:3a:45:76:80:a4:35:
23:ca:79:bc:62:19:4c:2d:20:6b:c2:bc:63:46:b0:
cd:b2:2c:42:71:fc:4a:54:71:47:8b:e4:d8:fe:57:
b9:c2:43:dd:c7:a6:f6:5f:ff:f2:ed:71:28:8e:1d:
e2:db:03:5c:98:9c:5a:3c:fc:a8:4e:4a:1d:80:13:
1e:cd:f1:16:04:83:08:18:35:a4:f8:f0:7f:c2:c2:
af:7f:13:6c:11:13:6e:7d:f0:3f:68:99:19:92:1e:
18:34:53:f1:cd:31:37:75:50:16:82:e3:3c:b3:b8:
9e:00:2d:b3:86:76:03:2a:4e:cc:c3:3b:c8:79:7a:
54:a5:08:2e:c3:ba:29:64:f5:44:b4:10:e2:06:1c:
42:c7:11:77:9f:55:0a:14:2e:42:aa:09:f8:7c:6f:
dd:0b:e1:28:6e:69:1e:73:be:66:5c:c0:73:cd:ec:
0a:1e:c5:04:cf:f0:21:f3:25:80:33:09:be:1d:ef:
01:bc:94:e9:1f:f4:37:2a:03:8d:fc:e4:93:10:45:
1e:74:67:b7:4c:05:44:92:35:20:85:3d:36:25:f9:
09:3b:64:46:ce:2b:cd:bc:d5:85:b6:48:5a:de:4d:
ae:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0B:E5:57:41:6B:46:45:1F:C1:21:EF:00:07:0E:95:48:EC:DA:8D
X509v3 Authority Key Identifier:
keyid:F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/xQvlV0FrRkUfwSHvAAcOlUjs2o0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.187.0/24
Signature Algorithm: sha256WithRSAEncryption
01:9b:18:80:a4:e4:9f:9a:fe:06:e9:b8:6e:57:4d:8d:65:4e:
57:e1:92:f1:9e:4c:7b:85:b4:30:63:84:6b:48:fe:a4:dc:01:
cf:5f:49:5e:c6:4a:ad:11:f3:ae:2f:4a:18:2d:ee:b0:6b:e5:
95:79:66:53:2e:cd:2e:6d:e9:e5:d8:2c:90:2f:69:fc:5a:00:
f4:a4:05:28:19:dd:4c:fa:26:64:85:1a:7d:3f:b9:d7:71:5f:
6e:a8:8a:b3:0f:20:11:2d:49:41:b2:ce:e1:86:86:c9:a7:8e:
dc:f8:a7:c0:02:3f:e2:f8:3f:99:70:bd:f9:27:a3:ca:e2:19:
ff:17:0c:12:96:3a:da:a8:ba:23:43:0f:b6:87:1e:e4:bd:ce:
f0:29:0d:96:6d:78:92:24:2e:84:0b:d2:2a:7d:79:94:27:34:
b3:9b:bb:8c:23:e6:6b:91:68:cc:ed:ac:b7:22:eb:12:2e:6c:
36:a7:27:bb:b8:e0:fd:b2:d5:f1:c0:d4:64:2a:ed:5b:e6:6d:
dd:9c:80:fe:3a:32:83:cf:6e:87:20:dc:d3:05:ae:b6:f8:5b:
0e:a6:da:ad:c3:10:92:90:70:4e:c3:99:e8:37:b7:2b:c3:b3:
4b:5c:4c:6b:75:a8:60:f0:df:8d:c6:7c:6f:84:05:59:be:bf:
78:91:77:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:08 2024 by rpki-client on console-fra.rpki-client.org