Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/tGPTLGDApvOZ7X-aJ93qRhGsJFY.roa
File: tGPTLGDApvOZ7X-aJ93qRhGsJFY.roa (raw, json)
Hash identifier: lophnpf/1+GviuvOB5zVieZDqrCxdGxBPf45goq9OXE=
Subject key identifier: B4:63:D3:2C:60:C0:A6:F3:99:ED:7F:9A:27:DD:EA:46:11:AC:24:56
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018DEB18D24C201D3EB3288545AB8829D718
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/tGPTLGDApvOZ7X-aJ93qRhGsJFY.roa
Signing time: Tue 27 Feb 2024 15:04:48 +0000
ROA not before: Tue 27 Feb 2024 15:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216068
IP address blocks: 147.45.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Mar 2024 18:07:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:eb:18:d2:4c:20:1d:3e:b3:28:85:45:ab:88:29:d7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Feb 27 15:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b463d32c60c0a6f399ed7f9a27ddea4611ac2456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0e:7c:c2:a0:ed:44:01:b9:ef:40:67:04:0c:
fe:b2:f6:b1:bd:79:36:20:81:28:b1:59:0a:5f:35:
a2:f4:c3:81:c5:00:88:b1:7c:e0:c7:c6:86:d5:82:
43:73:91:99:17:58:06:11:fd:4a:41:89:35:2c:37:
01:5e:c7:de:6a:32:60:76:e5:e9:27:b6:83:3b:88:
60:ac:89:c1:b4:a9:f1:a5:0b:f9:a1:ca:23:9e:10:
27:53:9d:8d:8f:35:ae:44:74:81:45:8b:b3:5f:ae:
b2:69:2e:bd:e0:30:d8:1d:64:33:23:dc:20:58:23:
4a:de:3a:90:23:8c:c9:b8:d3:d6:0a:f1:58:47:7b:
c4:bc:18:73:2a:02:cc:db:8a:d9:6b:1a:3c:20:df:
b7:7b:a3:70:83:27:ad:c1:20:3c:c4:4f:ba:bf:12:
be:a6:18:75:a9:5d:83:e3:a3:f4:cc:86:8e:86:00:
1b:6c:07:78:4d:3a:d8:d1:90:48:fe:e8:b5:7b:62:
86:0b:3c:cd:af:06:1f:34:b8:3a:9c:e8:a4:d0:24:
cf:41:a6:25:1d:e9:ce:20:2f:0a:0b:16:28:67:93:
42:61:67:ad:79:c1:fd:0e:04:41:42:6a:62:79:b6:
52:7c:42:50:7e:a7:5e:4d:bc:11:ad:00:2e:89:3c:
41:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:63:D3:2C:60:C0:A6:F3:99:ED:7F:9A:27:DD:EA:46:11:AC:24:56
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/tGPTLGDApvOZ7X-aJ93qRhGsJFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.114.0/24
Signature Algorithm: sha256WithRSAEncryption
06:b4:0a:fc:78:3a:18:96:7e:24:cb:34:dc:59:75:97:45:74:
3b:f4:c0:0c:6a:0b:1f:9b:fc:a3:7d:96:a3:b4:14:cf:29:35:
54:09:b0:7e:25:7e:ca:af:db:a1:61:86:ca:d4:a3:a5:c1:38:
b3:ff:08:07:f0:72:7b:ac:9c:0c:88:6f:d3:5d:04:58:41:78:
bd:36:62:60:45:29:bd:36:d5:c4:f3:15:7a:74:af:96:f0:48:
04:1c:6d:ee:0e:cd:54:5c:ea:a4:bb:f7:97:bb:6b:91:4a:19:
b1:ab:ad:67:1d:04:b9:44:f1:f1:c4:4d:62:48:b6:f0:61:5b:
fc:8d:58:77:c6:7b:64:50:98:67:37:50:2b:4e:8c:68:fe:36:
af:cc:86:a2:00:01:d9:10:75:43:cb:6c:95:45:a1:e8:aa:6d:
3c:c2:ca:a9:57:90:c9:ed:44:82:8d:67:fc:53:db:45:28:6f:
8c:0f:d5:0f:47:94:ce:2a:6d:76:87:23:f7:69:2b:23:97:bf:
ad:0a:9c:58:a8:13:b3:56:6e:1c:76:35:39:55:f7:39:b4:19:
ac:c3:26:9c:b8:05:f5:cd:36:9e:b2:13:fd:7f:ee:d5:49:20:
24:68:d1:9d:5b:0f:95:22:1e:42:2f:2b:52:f4:24:6b:f9:4d:
2f:3f:fe:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 12 21:11:41 2024 by rpki-client on console-ams.rpki-client.org