Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/MS345JcWsXyRDVolxdiQ-cXAB6c.roa
File: MS345JcWsXyRDVolxdiQ-cXAB6c.roa (raw, json)
Hash identifier: M7UaIQC9Ep3lyFCcmRUkKZLvR+PXUbsxO+4FJoCUSZo=
Subject key identifier: 31:2D:F8:E4:97:16:B1:7C:91:0D:5A:25:C5:D8:90:F9:C5:C0:07:A7
Certificate issuer: /CN=1662cfd26eccf289757399cc99c17d1cb4357535
Certificate serial: 018572CC8E48A4B590C5F98A9504A813B7E4
Authority key identifier: 16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/MS345JcWsXyRDVolxdiQ-cXAB6c.roa
Signing time: Mon 02 Jan 2023 14:04:46 +0000
ROA not before: Mon 02 Jan 2023 14:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15945
IP address blocks: 45.148.216.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:8e:48:a4:b5:90:c5:f9:8a:95:04:a8:13:b7:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1662cfd26eccf289757399cc99c17d1cb4357535
Validity
Not Before: Jan 2 14:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=312df8e49716b17c910d5a25c5d890f9c5c007a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0c:65:60:ee:36:4c:59:c2:0f:47:8c:37:2d:
9b:69:e6:30:2d:ba:ab:26:f8:8c:4d:cb:46:7e:e6:
2c:e4:00:8d:a3:39:52:54:c7:11:1b:e8:5b:ec:6c:
c8:21:61:b2:75:a2:34:39:e6:a5:87:8f:eb:e5:a8:
d6:31:52:49:7a:f2:15:4d:e8:b7:3c:6d:60:06:d2:
13:5c:02:0b:11:0b:a0:c5:54:8d:33:5d:41:a1:5c:
92:55:07:12:8a:29:cb:99:42:f7:58:e2:72:a2:64:
bb:72:72:10:de:80:4a:6a:73:b6:3c:ff:6f:a5:35:
18:cf:c8:90:07:c6:8b:f6:65:83:6e:41:6c:37:38:
80:24:ea:4b:59:be:88:b5:19:b2:ba:61:f3:dd:e3:
ad:47:8b:8b:c8:da:79:8d:c7:26:a0:44:f8:7c:bf:
5c:85:fd:e6:b5:42:57:a6:ba:d8:9a:d1:87:96:67:
f3:c0:a2:19:ae:fb:36:e0:86:84:9a:0d:92:f7:de:
56:72:6e:b6:2a:79:62:2d:22:68:49:d2:77:79:2e:
33:13:99:0e:72:bc:f6:2c:5f:e2:86:74:01:e6:b6:
42:03:60:c7:01:50:11:26:3a:32:59:51:b6:b7:49:
45:83:08:eb:bb:5a:26:6f:1f:02:b3:b7:75:09:4a:
c7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:2D:F8:E4:97:16:B1:7C:91:0D:5A:25:C5:D8:90:F9:C5:C0:07:A7
X509v3 Authority Key Identifier:
keyid:16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/MS345JcWsXyRDVolxdiQ-cXAB6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.216.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:2f:7c:ae:4e:8c:6d:fa:7c:46:c7:42:0f:f6:1b:33:52:ee:
fd:80:c7:a2:d5:2e:17:db:10:08:37:a8:47:33:cf:8d:87:39:
ce:46:52:46:e5:7d:9b:dc:79:76:f6:06:ef:74:24:e1:87:d0:
c0:2e:29:cd:01:c5:94:2d:33:dd:1f:b2:55:65:b5:85:5c:b6:
5e:34:ce:d2:6f:29:8e:96:38:6c:b2:79:ad:69:ba:9a:96:4d:
44:34:f8:4b:0b:ca:d7:2b:9b:ab:9c:c3:ea:85:b4:38:a0:2f:
22:95:00:66:c0:14:8f:fc:13:ce:11:7c:32:0b:c3:2c:1e:76:
3b:65:e2:d5:17:5d:f8:23:99:a5:b1:1e:92:8a:43:18:c5:a9:
0c:fd:29:2b:2c:0d:80:b8:ab:0e:92:e1:20:5c:cd:78:0a:29:
ac:07:24:0e:c8:af:c1:1f:94:69:a6:af:29:eb:f2:0f:99:dc:
c8:15:70:1a:f1:64:c0:47:a7:10:20:28:b6:60:2e:15:87:de:
94:90:57:ce:61:2f:32:fb:da:4f:ee:d1:2b:b2:76:94:33:ef:
c6:2c:d8:f8:8d:b4:00:a4:f9:c5:48:6e:ba:52:13:7e:a5:25:
08:5c:28:7b:fe:a5:3d:d7:12:e6:c0:70:d9:91:37:79:ae:fc:
f4:aa:cb:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:16 2024 by rpki-client on console-fra.rpki-client.org