Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/eadacb-e4a4-41f9-89ed-c5718bde6751/1/SL-8nwBfKoInAYpWThB4II3q-C0.roa
File: SL-8nwBfKoInAYpWThB4II3q-C0.roa (raw, json)
Hash identifier: fTf3rfVOFNI7odXyUXgSvNoH6hdxK7/j7vTo9+bTKmk=
Subject key identifier: 48:BF:BC:9F:00:5F:2A:82:27:01:8A:56:4E:10:78:20:8D:EA:F8:2D
Certificate issuer: /CN=9af4f122622fc3bb6fb83b7c8269036eda62466f
Certificate serial: 018E76D440019E3C1CD901F4125DAF8C8C77
Authority key identifier: 9A:F4:F1:22:62:2F:C3:BB:6F:B8:3B:7C:82:69:03:6E:DA:62:46:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvTxImIvw7tvuDt8gmkDbtpiRm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/eadacb-e4a4-41f9-89ed-c5718bde6751/1/SL-8nwBfKoInAYpWThB4II3q-C0.roa
Signing time: Mon 25 Mar 2024 18:16:45 +0000
ROA not before: Mon 25 Mar 2024 18:16:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215927
IP address blocks: 45.156.176.0/24 maxlen: 24
45.156.177.0/24 maxlen: 24
45.156.178.0/24 maxlen: 24
45.156.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 May 2024 11:43:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:76:d4:40:01:9e:3c:1c:d9:01:f4:12:5d:af:8c:8c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9af4f122622fc3bb6fb83b7c8269036eda62466f
Validity
Not Before: Mar 25 18:16:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48bfbc9f005f2a8227018a564e1078208deaf82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:44:68:0f:16:96:83:a8:e0:20:61:f7:d6:cd:
b3:6f:24:35:0f:08:42:b9:74:ad:d9:73:6d:95:39:
d6:77:af:41:a6:26:92:84:9f:d4:ed:b6:52:f5:9c:
2f:09:1b:00:ec:2f:47:8d:69:0e:fd:ce:18:1c:71:
f4:b1:d4:68:69:d5:a4:31:d4:fd:65:53:0b:21:26:
06:ba:40:cd:f7:2d:45:ac:85:fe:21:af:c2:d5:f9:
63:bc:f2:49:62:30:00:7d:a5:31:64:a8:27:56:34:
72:67:f1:32:e3:4e:cb:f9:86:fd:41:db:7c:25:22:
d4:57:72:6d:f6:53:a6:18:44:56:d3:41:84:18:0f:
11:7f:3e:47:2f:9e:ef:ec:63:db:3a:6c:03:82:46:
d1:61:de:88:70:08:1d:31:79:6f:c5:70:94:98:81:
22:b3:ac:14:27:2e:da:9c:95:66:4e:ef:d6:cb:c1:
4f:6a:0d:10:d7:ba:a6:aa:29:74:a6:98:e3:be:fb:
5e:19:d1:46:f4:50:95:6d:09:1c:34:27:d4:41:5d:
e8:14:d0:d7:ab:43:8e:ff:02:7e:56:f6:73:b5:c5:
bf:c9:6c:d2:02:0b:37:62:48:1a:a9:71:93:0b:72:
2d:05:87:39:ae:30:ac:9a:89:26:1d:94:f4:70:55:
92:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BF:BC:9F:00:5F:2A:82:27:01:8A:56:4E:10:78:20:8D:EA:F8:2D
X509v3 Authority Key Identifier:
keyid:9A:F4:F1:22:62:2F:C3:BB:6F:B8:3B:7C:82:69:03:6E:DA:62:46:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvTxImIvw7tvuDt8gmkDbtpiRm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/eadacb-e4a4-41f9-89ed-c5718bde6751/1/SL-8nwBfKoInAYpWThB4II3q-C0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/eadacb-e4a4-41f9-89ed-c5718bde6751/1/mvTxImIvw7tvuDt8gmkDbtpiRm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.176.0/22
Signature Algorithm: sha256WithRSAEncryption
85:86:d6:00:91:6b:15:22:a3:17:13:7c:cd:7d:ae:ff:9d:78:
69:96:79:fd:b8:19:6e:c9:55:5e:a2:97:02:ca:6e:19:3a:17:
a9:30:c8:04:6b:a3:41:4c:9f:f2:76:f1:10:a2:29:78:22:7e:
06:7d:c0:67:b7:7d:93:34:39:6e:24:f9:26:19:f1:6d:ca:bf:
4f:7e:25:f3:27:e4:bb:f8:c8:49:ad:4f:25:3e:50:c1:12:1c:
2f:df:27:40:5f:c4:81:2f:51:c9:d2:51:ae:6f:18:42:e9:d1:
22:db:d1:bd:05:bd:c0:a8:4e:d7:74:97:ed:ff:80:12:d9:36:
65:b3:94:f2:64:2e:83:d4:92:96:54:af:17:fc:70:e8:af:5d:
fe:d7:97:28:c3:16:58:be:1f:eb:34:11:69:c1:d0:da:c9:ec:
14:60:49:f1:27:55:1b:18:89:84:62:1c:45:e2:3c:c7:23:39:
da:20:5a:ae:71:7f:cd:3d:03:1c:e6:42:53:17:d4:7d:56:aa:
bc:8d:6b:c2:b0:f4:c7:e6:19:d3:ed:d1:b5:9a:14:88:0e:d5:
db:65:ac:c8:84:95:c7:49:88:ea:95:8f:bb:5e:3e:8e:47:80:
8a:1d:1e:71:aa:6a:a2:d2:52:55:cb:89:99:6d:3c:b9:5b:06:
7e:c3:89:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 15:20:43 2024 by rpki-client on console-ams.rpki-client.org