Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/eadacb-e4a4-41f9-89ed-c5718bde6751/1/DLcwRLc9ULSH7heU1Ufc4CKMnB8.roa
File: DLcwRLc9ULSH7heU1Ufc4CKMnB8.roa (raw, json)
Hash identifier: DvotHTGnSCsDNpMDrwweiNzFOEJGUQ9zKtYGJ4jcxHc=
Subject key identifier: 0C:B7:30:44:B7:3D:50:B4:87:EE:17:94:D5:47:DC:E0:22:8C:9C:1F
Certificate issuer: /CN=9af4f122622fc3bb6fb83b7c8269036eda62466f
Certificate serial: 018CC94E27DD2E1F2FD8D4DF21590D89F44A
Authority key identifier: 9A:F4:F1:22:62:2F:C3:BB:6F:B8:3B:7C:82:69:03:6E:DA:62:46:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvTxImIvw7tvuDt8gmkDbtpiRm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/eadacb-e4a4-41f9-89ed-c5718bde6751/1/DLcwRLc9ULSH7heU1Ufc4CKMnB8.roa
Signing time: Tue 02 Jan 2024 08:33:11 +0000
ROA not before: Tue 02 Jan 2024 08:33:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202813
IP address blocks: 45.156.176.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 18:16:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:27:dd:2e:1f:2f:d8:d4:df:21:59:0d:89:f4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9af4f122622fc3bb6fb83b7c8269036eda62466f
Validity
Not Before: Jan 2 08:33:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0cb73044b73d50b487ee1794d547dce0228c9c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:60:ad:da:a4:19:29:9a:08:44:85:8d:80:10:
75:9e:21:41:05:d4:6d:0c:31:6c:e9:bd:a4:0c:8e:
33:ee:1d:39:29:a3:cc:e2:4f:12:65:2d:ba:54:68:
ea:39:31:4c:8e:16:37:07:c8:0e:d5:e7:c6:68:8d:
4d:ca:33:64:fc:2a:8a:ae:20:6b:f3:e7:8d:31:c9:
ab:71:5a:73:32:ef:b0:5e:02:0d:e4:6c:8c:c7:bc:
4e:32:66:f9:2f:97:d4:1b:38:30:43:9b:c1:4e:fe:
31:01:66:59:0a:48:1e:d3:f5:05:bb:5e:48:77:e3:
3a:d0:a8:a6:de:45:1f:cd:7a:f0:53:2f:4a:7a:b2:
7d:88:c4:29:c4:86:78:42:34:bb:b1:d3:6c:65:96:
e8:fd:68:7d:80:52:e6:cd:3d:20:eb:b3:cb:8f:7a:
79:67:8d:ea:10:86:eb:4c:e7:08:25:21:e2:59:be:
2e:f6:92:64:f2:37:31:64:da:75:fb:f8:b4:c0:2f:
b9:f2:2e:40:6f:b2:50:cf:a3:07:1b:0d:2c:c9:c0:
6f:8b:e9:74:ae:ee:b8:1a:98:48:b8:75:f2:51:59:
b7:6e:4d:11:39:88:53:da:f5:59:f3:b8:e3:2d:45:
90:d1:c0:da:eb:e9:71:49:83:c2:8e:04:b3:9c:a0:
e3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B7:30:44:B7:3D:50:B4:87:EE:17:94:D5:47:DC:E0:22:8C:9C:1F
X509v3 Authority Key Identifier:
keyid:9A:F4:F1:22:62:2F:C3:BB:6F:B8:3B:7C:82:69:03:6E:DA:62:46:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvTxImIvw7tvuDt8gmkDbtpiRm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/eadacb-e4a4-41f9-89ed-c5718bde6751/1/DLcwRLc9ULSH7heU1Ufc4CKMnB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/eadacb-e4a4-41f9-89ed-c5718bde6751/1/mvTxImIvw7tvuDt8gmkDbtpiRm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.176.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:40:19:cc:65:98:68:3a:e1:99:71:b8:0a:44:0b:b4:2d:8e:
d1:b9:d9:af:54:ea:be:e4:a4:3d:b1:fc:bd:f1:df:3e:4e:4f:
9c:14:78:7b:58:8a:85:29:3b:ed:0a:af:c9:29:c0:8c:fb:b7:
01:a7:d0:7f:7c:7b:69:a1:fe:38:cf:bc:eb:e0:88:52:24:0b:
98:1c:bc:b7:ae:ce:4f:02:20:91:55:a6:54:10:87:6f:b3:74:
0d:e1:06:6c:60:34:12:f4:d1:6f:9b:a0:ec:af:93:e5:c4:c4:
33:d1:a5:fe:6a:e7:5e:76:8a:84:17:63:27:89:0d:93:ae:50:
57:42:d6:eb:d2:ed:f8:4c:3f:c1:89:96:05:2d:4a:b4:d9:29:
eb:32:fc:8a:2c:9d:9e:35:ac:85:8d:bb:e7:ee:1d:6b:70:b1:
64:f7:d1:da:43:2e:a0:0c:ea:70:74:56:12:29:52:0e:94:50:
8f:ec:80:ff:91:d9:29:37:b0:55:30:ac:09:d4:d9:1a:f9:67:
b5:b1:5f:3d:e3:51:c7:15:84:e1:8f:f0:ed:32:40:62:5b:18:
bd:dc:e8:6e:f8:0c:1a:a8:ad:51:e2:7f:08:57:4e:2d:f8:5d:
c8:a8:3f:cc:6a:10:93:64:b7:f2:8a:37:ec:84:02:3b:4a:7c:
e5:06:b7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:48 2024 by rpki-client on console-fra.rpki-client.org