Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/e5YAqSDV8pppXj5wfUzz7dSB4wI.roa
File: e5YAqSDV8pppXj5wfUzz7dSB4wI.roa (raw, json)
Hash identifier: InDlRA3HaKLsIZYQJXFWQY3thuqPZBIbhP8otF6wBRQ=
Subject key identifier: 7B:96:00:A9:20:D5:F2:9A:69:5E:3E:70:7D:4C:F3:ED:D4:81:E3:02
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018DACEAD12423E9A3FBFEC74992AFD71E6D
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/e5YAqSDV8pppXj5wfUzz7dSB4wI.roa
Signing time: Thu 15 Feb 2024 13:18:06 +0000
ROA not before: Thu 15 Feb 2024 13:18:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204916
IP address blocks: 147.45.112.0/24 maxlen: 24
147.45.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 17:39:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ac:ea:d1:24:23:e9:a3:fb:fe:c7:49:92:af:d7:1e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Feb 15 13:18:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b9600a920d5f29a695e3e707d4cf3edd481e302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:75:32:4e:01:5f:d2:b7:34:d1:42:da:4b:15:
ac:e9:03:97:9c:f1:08:bc:ef:64:c7:8e:81:a2:cc:
13:0a:5a:c3:c8:13:d2:3e:6d:d0:39:9a:e3:5e:41:
a0:87:43:88:a0:06:63:93:b7:70:f4:4b:55:89:16:
d9:a1:3f:55:e8:8f:4f:2a:cb:d4:b9:cf:37:b0:75:
ef:2e:89:b5:b0:12:75:2c:c1:30:7d:8c:a2:ad:f5:
0d:4d:79:98:35:cb:e0:11:43:02:ef:49:42:10:20:
14:3f:fe:27:36:2c:b5:fb:56:f8:d4:e1:b4:52:62:
57:c1:7b:6f:90:e0:90:90:15:20:0d:31:17:bb:f0:
0c:66:85:8c:93:44:b8:c2:fc:d9:18:76:a3:db:00:
19:5c:5c:80:0e:40:cc:e8:1c:24:c5:5c:6d:64:81:
b3:48:c9:6e:66:d1:41:82:3b:f3:5f:a6:43:6a:de:
6f:de:b1:d6:c5:bd:6a:5a:16:da:12:3b:19:bd:0e:
1f:71:86:b0:5a:f5:0e:1b:89:02:a6:0b:44:a5:83:
14:b4:bb:bf:07:20:f5:db:b5:0b:27:70:b2:6b:3e:
64:0c:2b:90:21:fd:77:a0:b9:c3:95:25:cd:df:f9:
c3:88:b3:01:e2:1c:32:a9:26:8c:44:bf:68:82:47:
07:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:96:00:A9:20:D5:F2:9A:69:5E:3E:70:7D:4C:F3:ED:D4:81:E3:02
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/e5YAqSDV8pppXj5wfUzz7dSB4wI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.112.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:52:7a:3c:4f:f8:cc:26:08:dd:0e:59:7f:6d:9f:cd:1d:10:
03:e2:0c:87:e8:62:c0:28:ff:10:ac:6b:29:8a:ea:c9:6b:7e:
62:d4:89:91:76:da:54:ef:97:91:0d:51:89:1a:0f:5f:57:7c:
7c:ec:f3:85:00:a4:27:8e:38:ba:37:1b:df:4c:81:6e:e9:ff:
b5:62:8a:8c:69:a6:08:e2:08:20:d4:91:6b:b8:4b:1c:32:0e:
83:78:ee:f5:40:b9:c7:fc:0d:d5:10:15:7e:16:22:3b:44:55:
d2:d9:27:35:70:25:2d:b5:ca:b5:2d:24:46:da:06:bf:53:98:
27:fd:9c:78:9d:24:27:7d:65:27:4a:1e:2b:e9:e8:ed:c8:51:
67:31:aa:6a:5c:30:de:e2:46:72:88:c7:76:6a:8f:87:35:9a:
cc:24:52:e8:9d:10:87:32:53:3a:f1:1f:bf:0f:e7:81:b3:cd:
42:11:c3:aa:81:e9:40:3f:5d:c4:2d:54:b1:ee:b0:68:30:71:
2e:7e:60:d3:86:a5:5b:af:7c:d9:da:f5:1c:1a:1e:ed:80:ca:
80:21:29:3c:27:53:b1:c2:3f:b3:4b:c2:9d:67:bb:61:01:d7:
91:36:2f:9e:a1:93:29:60:18:41:7b:22:52:7b:63:1f:4d:d1:
a8:e9:9d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 26 22:58:35 2024 by rpki-client on console-fra.rpki-client.org