Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/7MAMnODksFgy5kdC46__LbcWuZI.roa
File: 7MAMnODksFgy5kdC46__LbcWuZI.roa (raw, json)
Hash identifier: zBfOCN0739yZSk9ebe88Ps3IIPZFiAALbNvw/QW2hF4=
Subject key identifier: EC:C0:0C:9C:E0:E4:B0:58:32:E6:47:42:E3:AF:FF:2D:B7:16:B9:92
Certificate issuer: /CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Certificate serial: 018F99DF1381D83DD3A2EFA1162B06CE82D7
Authority key identifier: C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/7MAMnODksFgy5kdC46__LbcWuZI.roa
Signing time: Tue 21 May 2024 06:38:04 +0000
ROA not before: Tue 21 May 2024 06:38:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 4648
IP address blocks: 45.144.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 May 2024 04:13:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:99:df:13:81:d8:3d:d3:a2:ef:a1:16:2b:06:ce:82:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Validity
Not Before: May 21 06:38:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ecc00c9ce0e4b05832e64742e3afff2db716b992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2a:5b:87:bc:39:2b:c7:34:5d:40:00:9f:86:
19:78:1b:6c:d9:95:d8:a4:c9:8d:5f:5b:cb:9b:f6:
f3:77:e6:65:a9:96:97:63:81:df:37:b9:eb:a5:ce:
f7:d6:b7:f9:20:fc:0e:3f:4e:fa:9a:b4:f7:8f:09:
b6:14:bb:9a:09:1a:ac:63:db:ec:9e:40:9d:79:8c:
cf:af:4b:f0:a6:c1:d1:4a:f1:f2:db:fd:35:6c:8f:
94:4a:fc:ca:c2:f2:d6:ed:78:b7:d4:f5:c2:8d:4c:
fb:36:d6:60:30:8e:b9:ed:b6:11:78:6b:56:5e:1e:
52:6e:8e:60:e1:e6:0a:8f:28:50:09:fb:ee:be:ef:
c1:51:13:ce:03:eb:71:aa:bd:78:87:2b:f9:89:8d:
25:98:28:bc:42:e9:52:01:2f:d5:9e:eb:97:36:06:
c2:ce:a1:ca:1f:5b:6d:ee:0d:3b:10:a2:35:17:2c:
87:2d:3a:b6:b3:d4:a3:69:c0:0b:d8:00:7b:a9:98:
c0:fa:d4:51:58:7c:5d:46:54:ca:a6:b7:bd:79:ae:
73:6d:db:26:c8:56:42:df:a5:ac:01:b3:8b:da:40:
ff:b7:5a:26:39:47:c3:53:dc:c2:43:42:a1:74:5d:
b8:6f:1c:57:ad:ac:9d:45:9c:83:d7:9f:e7:a6:f2:
49:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C0:0C:9C:E0:E4:B0:58:32:E6:47:42:E3:AF:FF:2D:B7:16:B9:92
X509v3 Authority Key Identifier:
keyid:C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/7MAMnODksFgy5kdC46__LbcWuZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.197.0/24
Signature Algorithm: sha256WithRSAEncryption
40:31:0c:45:5d:0b:f7:a1:4f:ce:5c:8c:39:b6:ee:a9:11:f7:
db:61:2e:e3:2e:f8:9b:c1:37:1f:da:19:60:6d:83:03:2e:44:
a8:02:b6:9f:1b:91:16:23:b2:9b:cb:d9:32:c0:6d:4e:8d:5d:
43:3b:1c:96:d3:a1:62:85:e5:25:35:df:5b:13:8b:d7:65:44:
70:fa:5a:f6:db:7e:46:c4:bf:06:7e:80:ef:76:f3:42:18:8d:
28:f4:7c:30:6e:8a:69:2e:03:5e:ab:ad:3e:12:82:b7:e6:3f:
74:6e:13:78:a5:83:28:89:20:0a:cd:f2:06:85:97:2b:0f:96:
8e:e5:63:0e:38:f5:03:03:54:f8:c5:48:3b:ac:06:8b:ae:60:
0c:13:64:7c:7c:a9:86:ac:9e:3f:c2:43:9a:95:39:2b:a6:07:
75:18:fd:22:dd:b1:b5:9b:a1:38:c1:8e:24:cf:74:70:5f:68:
53:b2:0a:11:8a:2f:8a:4a:95:c6:4d:34:0d:fa:fc:e2:d8:87:
f6:ab:b2:5e:1c:78:2a:af:44:f0:d4:20:6f:98:66:70:2d:d8:
76:4f:86:f4:63:f5:da:b9:49:d1:34:a0:bf:18:72:08:ab:7d:
f0:c7:4a:b9:25:02:91:75:26:f6:61:a2:4a:3f:28:16:55:0c:
e4:44:93:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:02 2024 by rpki-client on console-fra.rpki-client.org