Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/XNZvHZHG8_-yV-15A9Ar4PwBHww.roa
File: XNZvHZHG8_-yV-15A9Ar4PwBHww.roa (raw, json)
Hash identifier: ry007BUkLReCrv8z//4HLCYC/NluGQFNelSO5f0wHK4=
Subject key identifier: 5C:D6:6F:1D:91:C6:F3:FF:B2:57:ED:79:03:D0:2B:E0:FC:01:1F:0C
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018CEE99B861741324483F73CCC2FE8AD944
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/XNZvHZHG8_-yV-15A9Ar4PwBHww.roa
Signing time: Tue 09 Jan 2024 14:21:40 +0000
ROA not before: Tue 09 Jan 2024 14:21:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215826
IP address blocks: 147.45.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Apr 2024 13:55:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:99:b8:61:74:13:24:48:3f:73:cc:c2:fe:8a:d9:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 9 14:21:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5cd66f1d91c6f3ffb257ed7903d02be0fc011f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9a:4f:4b:1d:82:02:03:41:e8:34:2e:11:0b:
aa:91:bc:ee:e1:7e:f4:26:38:96:c1:13:42:73:3e:
37:2b:48:7f:c0:88:67:6e:6e:d9:1c:5e:46:aa:a1:
01:c7:1a:aa:8d:0c:46:1d:17:e7:74:00:7c:bb:f3:
8a:75:f5:71:9b:35:5e:29:d8:20:1b:3c:35:c9:44:
35:43:39:fb:df:5f:a6:83:b4:21:21:3f:e8:70:fc:
62:f2:3d:02:9b:dc:27:c2:ca:94:5d:c1:82:cd:10:
5b:89:23:ea:a5:74:54:a0:ae:c7:a8:86:ee:2d:4d:
fc:34:99:55:68:f2:f3:66:4b:10:f8:6c:1e:bf:bb:
e1:3f:bd:12:ea:7c:a0:ad:ea:cd:a7:16:a6:57:07:
4c:f4:ee:c6:cf:87:e5:38:23:e7:fc:94:20:14:71:
90:cf:c7:9f:fc:7c:87:95:8e:80:9a:a0:05:ff:36:
ba:6f:fd:1d:ca:65:4e:47:94:47:e7:85:2b:a3:47:
39:84:80:43:b0:9f:f0:89:f9:06:29:99:bc:97:c9:
85:f0:c8:f6:6b:4a:81:d9:e2:af:bd:f7:27:12:e7:
b4:ef:c0:76:36:54:ee:f2:a9:d1:f5:4d:86:7b:79:
99:90:eb:c4:f2:2d:f0:e5:3a:69:61:1c:51:e3:ca:
f6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D6:6F:1D:91:C6:F3:FF:B2:57:ED:79:03:D0:2B:E0:FC:01:1F:0C
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/XNZvHZHG8_-yV-15A9Ar4PwBHww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.45.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:09:12:d4:c6:66:0b:e8:31:f4:01:c6:c7:c8:b6:c7:3b:fa:
80:87:82:3d:c0:72:70:e2:ad:64:96:64:31:f5:b1:ef:ff:e3:
75:0c:fc:12:3b:68:f0:e0:b6:65:7f:61:a6:35:25:54:82:93:
4b:a4:91:b2:e6:d7:6b:db:2b:19:ac:41:f4:8d:05:e8:53:9b:
c3:0e:96:0e:83:60:3c:a2:71:d7:cd:11:67:2c:b4:61:12:aa:
e8:06:d4:20:d4:c1:51:01:40:bd:a8:9c:dd:70:ec:d4:2d:9b:
29:0c:9c:22:6b:76:2b:97:4d:89:41:f6:9d:db:1b:98:45:4b:
96:1e:90:9f:21:06:66:10:00:cc:bb:50:bd:0a:f4:83:75:21:
ad:1b:0b:29:9b:9c:01:d6:9f:c3:45:82:ae:74:4f:28:cb:fe:
ea:91:13:53:55:7a:19:43:76:c0:42:fa:c6:da:90:06:2e:f0:
e5:20:bc:b5:b4:eb:28:2f:cd:25:46:ec:72:d7:06:76:78:59:
42:ca:77:df:dd:bd:68:94:df:b4:ce:1b:85:21:e6:cd:ba:22:
f2:84:77:29:3b:c7:51:07:b2:c4:9b:ec:1b:cd:b9:47:e1:f5:
64:00:11:01:c7:02:96:be:61:3c:eb:f1:82:3b:09:d8:01:ae:
fa:98:c7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 17:23:12 2024 by rpki-client on console-ams.rpki-client.org