Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/Tn3m5zLvMKq53YM9xYcXgUls02M.roa
File: Tn3m5zLvMKq53YM9xYcXgUls02M.roa (raw, json)
Hash identifier: nC6DoZLjXOiD6SR3Ufg0YooPifFshoEBoBsrZ7jwX64=
Subject key identifier: 4E:7D:E6:E7:32:EF:30:AA:B9:DD:83:3D:C5:87:17:81:49:6C:D3:63
Certificate issuer: /CN=c7e9c7aa534b1300bf724fff0f0c1b0519d505bb
Certificate serial: 018572FA5FA1F426013CC80B57E9CC728CFE
Authority key identifier: C7:E9:C7:AA:53:4B:13:00:BF:72:4F:FF:0F:0C:1B:05:19:D5:05:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/Tn3m5zLvMKq53YM9xYcXgUls02M.roa
Signing time: Mon 02 Jan 2023 14:54:49 +0000
ROA not before: Mon 02 Jan 2023 14:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208816
IP address blocks: 45.84.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Jan 2023 19:47:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:fa:5f:a1:f4:26:01:3c:c8:0b:57:e9:cc:72:8c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7e9c7aa534b1300bf724fff0f0c1b0519d505bb
Validity
Not Before: Jan 2 14:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e7de6e732ef30aab9dd833dc5871781496cd363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:59:6b:34:07:9a:fe:57:96:bf:9d:81:67:52:
e6:9c:61:f9:f0:1d:a6:8c:4d:59:f8:03:c7:a6:bc:
4e:90:9e:92:e7:34:6b:4c:62:24:47:0d:3b:26:0d:
b4:5a:c6:da:ac:11:79:54:c7:1c:34:23:1e:da:02:
69:fb:2c:0d:79:23:c9:84:a5:5f:e0:73:35:5b:17:
b4:89:8c:3a:96:a1:0f:54:15:8c:53:c5:d1:b5:82:
38:0f:40:3c:0d:e8:71:7b:a3:25:82:c5:09:97:04:
76:eb:c0:5b:64:ff:ea:71:f0:6a:ec:7c:23:eb:1e:
8a:5e:28:47:81:e7:7a:1b:04:14:30:05:6d:94:86:
ef:11:ad:9c:ce:bf:aa:8a:47:05:19:5a:02:84:5f:
59:d3:d4:02:ba:02:c2:da:1a:89:d6:95:0d:5c:7d:
76:a5:3c:b8:96:ce:97:25:e0:cc:ab:46:60:d7:c6:
16:a3:c7:b0:80:b0:ed:8c:7c:30:60:9c:91:49:13:
3e:d9:d7:37:b4:b2:f7:50:e5:79:4a:f6:db:00:14:
63:cd:d3:3d:a8:06:43:1d:90:78:1f:45:b8:bd:e5:
f0:fc:3b:bb:23:3e:8d:84:63:c7:d6:f8:0a:cb:be:
55:14:ae:15:00:98:fb:d4:94:b1:d3:2f:a1:ff:29:
26:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7D:E6:E7:32:EF:30:AA:B9:DD:83:3D:C5:87:17:81:49:6C:D3:63
X509v3 Authority Key Identifier:
keyid:C7:E9:C7:AA:53:4B:13:00:BF:72:4F:FF:0F:0C:1B:05:19:D5:05:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/Tn3m5zLvMKq53YM9xYcXgUls02M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.31.0/24
Signature Algorithm: sha256WithRSAEncryption
62:9e:55:6f:c6:bc:4c:64:34:41:e9:df:33:5e:41:91:e9:b1:
48:e5:cd:c9:82:e6:8c:53:a2:ad:dc:5a:2a:9c:bd:a6:e1:c4:
c8:e7:52:e0:5e:1c:aa:2d:24:55:b8:c9:62:d8:e4:6a:80:38:
b8:11:c1:2f:6d:87:0f:d3:4d:e4:3d:04:d0:aa:8e:dc:26:d7:
b6:53:79:ac:56:91:f9:2a:30:fe:b2:ec:17:08:44:06:7c:70:
7c:43:af:26:44:e9:ef:c2:2a:21:70:55:48:c5:60:bb:44:4f:
6d:6f:a9:e1:8f:6f:d3:d0:fd:f8:95:16:f4:de:f4:c0:d6:4e:
57:06:a7:74:66:11:39:81:6b:66:33:5a:e7:84:1c:d3:14:fc:
00:78:41:51:98:ec:0d:04:56:7c:5a:a8:85:86:f0:58:a0:cd:
cb:5e:f7:c7:2f:fc:e7:44:8f:d3:04:e2:d6:c9:db:71:65:66:
76:a8:f4:3b:06:8c:d5:73:8f:8c:cd:59:0b:78:e2:8f:6d:3f:
a6:c9:ed:cd:11:71:f0:a6:f1:e5:78:12:25:df:4a:93:9b:50:
84:2c:f3:0a:f7:4e:ef:6b:8f:3c:79:89:77:58:cd:83:5b:fb:
2c:63:7c:46:12:d0:e0:4f:9c:f6:72:6f:65:cf:0d:bd:79:21:
82:43:b3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:09 2024 by rpki-client on console-fra.rpki-client.org