Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/IRsqAmSd7EggHW73yQaLJB5xR-E.roa
File: IRsqAmSd7EggHW73yQaLJB5xR-E.roa (raw, json)
Hash identifier: AKMJtWAU7PFqVpMNT2gl6CnTaPzJQuNPhR2RuQqUihg=
Subject key identifier: 21:1B:2A:02:64:9D:EC:48:20:1D:6E:F7:C9:06:8B:24:1E:71:47:E1
Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Certificate serial: 0189D09AE0FA1BE3F57672E4D30BCC3521EF
Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/IRsqAmSd7EggHW73yQaLJB5xR-E.roa
Signing time: Mon 07 Aug 2023 15:25:58 +0000
ROA not before: Mon 07 Aug 2023 15:25:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210122
IP address blocks: 45.8.176.0/24 maxlen: 24
45.142.0.0/24 maxlen: 24
45.142.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Sep 2023 15:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d0:9a:e0:fa:1b:e3:f5:76:72:e4:d3:0b:cc:35:21:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Validity
Not Before: Aug 7 15:25:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=211b2a02649dec48201d6ef7c9068b241e7147e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d9:15:a4:5e:ed:7e:76:8d:a4:e2:cb:c4:c1:
e3:34:ef:fb:40:27:36:e7:af:0a:ba:19:63:19:cb:
ba:3e:e4:26:23:c7:80:1c:19:b8:6b:ad:9d:6f:1e:
0f:9d:b3:34:4d:d7:db:30:2b:dc:87:7d:9f:6d:a8:
a4:ee:48:8c:78:aa:bc:b0:3f:dc:ef:14:60:7b:2e:
5a:84:9d:ee:e2:86:04:a6:32:9c:2c:0f:df:6b:c6:
8f:8c:4b:8d:53:fc:eb:ec:7e:a1:3f:39:07:a3:44:
68:b4:2b:06:fe:fb:18:a8:1f:73:d7:ba:92:60:7d:
a8:d5:c4:df:f2:01:2a:00:cd:00:ce:63:d3:92:df:
4b:83:19:3c:a6:5b:45:f8:46:ec:ef:6f:b3:8d:01:
a9:2b:d1:67:19:42:24:ad:1a:07:cc:1b:a7:5e:47:
92:72:81:68:dd:4c:7c:04:42:34:04:3b:e1:87:a5:
d5:4c:57:af:d0:ae:bf:ea:c5:81:10:19:9e:70:39:
11:ba:11:c5:cd:f6:e4:dd:79:36:33:2e:45:d6:00:
67:2f:f5:0d:0a:cb:ea:24:27:c5:ad:11:51:66:ef:
4d:57:3a:d1:d3:53:07:46:8d:4f:8c:68:1a:9a:30:
6f:96:42:a0:69:14:94:ff:ab:b4:ee:2b:d0:ac:55:
cd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:1B:2A:02:64:9D:EC:48:20:1D:6E:F7:C9:06:8B:24:1E:71:47:E1
X509v3 Authority Key Identifier:
keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/IRsqAmSd7EggHW73yQaLJB5xR-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.176.0/24
45.142.0.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:cf:f2:87:e8:50:98:c8:52:e4:8a:5e:5e:30:2f:a0:47:f5:
32:50:33:6d:47:e4:2f:23:e2:bd:77:21:d1:cd:78:b8:df:17:
23:d0:61:86:9c:dd:60:bf:3f:54:bd:4f:9e:58:aa:a5:59:22:
86:c3:84:54:1f:3b:67:43:a8:ea:d9:58:fc:0d:ee:61:d0:b6:
c8:53:06:ad:7f:5d:15:e3:5d:21:b2:fa:4f:7e:e8:6a:34:e0:
87:b6:d2:39:99:b5:2f:73:a2:25:65:a4:22:bf:5d:cd:70:8e:
99:63:b8:39:95:80:2e:e9:43:fa:db:06:dd:bb:32:bb:20:ca:
7d:00:81:ed:81:cb:44:6b:d6:e5:24:98:87:6c:a7:87:dc:4e:
5e:88:06:59:40:3f:19:e2:b7:95:20:52:32:3d:b7:94:65:c8:
c1:97:2c:4c:c6:65:c7:4b:1b:39:dd:c3:b6:57:2d:26:43:d0:
91:5f:18:4a:26:22:38:dd:4b:e5:fb:74:74:ae:0f:8e:a5:7c:
cd:61:bc:28:49:55:65:13:d2:e2:55:de:cb:a8:63:d8:d6:55:
f8:ce:53:08:d5:ee:65:b0:12:fc:23:e9:3b:f3:09:98:e7:93:
e6:b0:c0:26:0d:00:0e:2f:f9:30:f9:f1:2e:15:80:da:72:96:
2b:81:00:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:08 2024 by rpki-client on console-fra.rpki-client.org