Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/rKR7zleFYd231WNG__4Ac_f0_F4.roa
File: rKR7zleFYd231WNG__4Ac_f0_F4.roa (raw, json)
Hash identifier: e9E+iae7jRxWgDsK3l80ZuoKYqbo3QkDLnHqb/X6i7Q=
Subject key identifier: AC:A4:7B:CE:57:85:61:DD:B7:D5:63:46:FF:FE:00:73:F7:F4:FC:5E
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 01859DE579733EAB600063264097F5E289BB
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/rKR7zleFYd231WNG__4Ac_f0_F4.roa
Signing time: Tue 10 Jan 2023 22:55:39 +0000
ROA not before: Tue 10 Jan 2023 22:55:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212001
IP address blocks: 45.152.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Jan 2023 10:59:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9d:e5:79:73:3e:ab:60:00:63:26:40:97:f5:e2:89:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 10 22:55:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aca47bce578561ddb7d56346fffe0073f7f4fc5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8d:67:b8:f8:c2:63:01:ad:ee:31:af:b8:34:
e8:b7:de:6a:51:e9:e8:d8:84:89:78:24:64:a9:1f:
9f:9f:61:ba:a8:c2:a8:0b:cf:48:02:e4:b9:2c:bb:
14:17:5d:74:00:76:49:66:ec:a1:3c:f5:08:8a:ba:
85:36:a8:87:56:38:76:7c:0d:bd:dd:8a:2b:3a:bd:
04:ee:02:89:7f:fc:be:71:cc:75:95:7e:b0:aa:66:
58:49:e5:b1:78:ae:b9:81:75:2f:3a:a3:54:73:ab:
e0:79:ea:5d:5d:54:d1:63:c0:d7:0a:46:d8:93:b9:
61:52:52:f3:4a:da:ed:2e:7a:55:eb:28:80:0f:2c:
25:a6:14:6d:6c:98:94:62:23:98:43:78:16:87:25:
1b:88:97:a1:88:34:e1:3a:42:1f:f8:68:b4:46:e8:
d6:aa:d0:06:12:3e:6f:fc:9e:5d:58:5e:c2:01:e4:
6d:d9:2f:b9:77:d2:10:4b:2d:ef:82:ce:bd:39:e0:
c9:27:73:5d:ef:7c:d3:bc:17:6b:08:d7:0e:5e:20:
3e:f2:78:46:76:6c:f8:5c:ea:e0:d5:e7:3d:c0:28:
bc:0d:4f:93:70:95:f6:43:af:14:8e:8c:15:12:d1:
b3:62:7f:77:84:a2:45:15:dc:ec:14:cd:82:58:12:
0f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A4:7B:CE:57:85:61:DD:B7:D5:63:46:FF:FE:00:73:F7:F4:FC:5E
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/rKR7zleFYd231WNG__4Ac_f0_F4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.57.0/24
Signature Algorithm: sha256WithRSAEncryption
17:c3:f3:f6:95:f8:24:04:10:5b:19:74:dd:ae:3a:a9:f6:03:
3a:ad:18:a3:46:c6:28:4b:73:db:9c:16:6a:50:43:34:e7:ab:
cc:ff:42:38:3a:c2:6e:bf:26:71:cf:03:81:76:bc:62:80:0a:
2d:14:7f:96:b5:86:94:5b:03:f3:fa:9a:f3:6b:12:0f:96:55:
7c:a1:14:88:41:c4:81:e6:14:74:3c:af:2e:01:47:ce:df:89:
cf:4a:cc:a2:d5:17:2b:04:69:4a:26:76:dd:2d:0a:54:be:32:
9f:aa:c6:1b:a5:96:5c:1d:f0:9d:7e:00:bd:43:37:51:61:6a:
06:3c:7f:e5:c0:8c:75:48:b7:ab:61:4e:a6:88:93:cc:e5:0f:
11:3e:80:9e:1a:e5:8d:b5:53:94:9a:0d:f7:ea:26:a7:ce:c0:
56:c0:4b:76:d2:de:ec:c9:4a:00:3c:17:04:9a:11:3a:b4:d8:
93:1b:93:68:e1:e9:c2:08:78:e2:a2:72:0e:55:f6:fb:c5:8c:
38:74:81:63:53:46:d8:c5:e0:03:f5:d9:10:94:e5:09:dd:6e:
fb:11:d3:45:c3:14:3c:e6:dc:a8:1f:ee:88:9c:83:bd:fc:9c:
f0:e0:4d:4a:57:94:5c:74:70:66:c5:88:84:d3:a0:ef:36:56:
09:d8:e2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:25 2024 by rpki-client on console-fra.rpki-client.org