Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/veQFNDgHAR4Vx9AzdJ_oEzE8gJU.roa
File: veQFNDgHAR4Vx9AzdJ_oEzE8gJU.roa (raw, json)
Hash identifier: gS89Cwx0sieHUwYJiY3Ef54eGOeskeSKfcMaSh1srhI=
Subject key identifier: BD:E4:05:34:38:07:01:1E:15:C7:D0:33:74:9F:E8:13:31:3C:80:95
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018CFED4620B09C70184687169A16C412490
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/veQFNDgHAR4Vx9AzdJ_oEzE8gJU.roa
Signing time: Fri 12 Jan 2024 17:59:40 +0000
ROA not before: Fri 12 Jan 2024 17:59:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9123
IP address blocks: 147.45.101.0/24 maxlen: 24
147.45.102.0/24 maxlen: 24
147.45.103.0/24 maxlen: 24
147.45.104.0/24 maxlen: 24
147.45.105.0/24 maxlen: 24
147.45.111.0/24 maxlen: 24
147.45.108.0/24 maxlen: 24
147.45.109.0/24 maxlen: 24
147.45.110.0/24 maxlen: 24
147.45.106.0/24 maxlen: 24
147.45.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 21:41:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fe:d4:62:0b:09:c7:01:84:68:71:69:a1:6c:41:24:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 12 17:59:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bde405343807011e15c7d033749fe813313c8095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:14:05:e0:ab:b4:ed:4c:92:03:36:9c:c6:7c:
df:4c:0e:71:26:a7:37:f7:e5:2a:b5:4f:3c:9b:8d:
32:e0:2e:2b:28:69:09:e2:a6:7d:86:40:e0:30:de:
69:82:16:18:de:77:0b:50:7e:17:ab:34:2c:21:d0:
c6:6e:60:e1:67:ad:6f:aa:f4:94:82:d5:88:95:3c:
b2:ce:88:7d:1b:1f:04:40:8a:93:2a:88:1c:00:ea:
2d:56:10:12:c8:42:ce:3a:51:72:0f:74:83:9c:22:
02:cb:3f:78:50:7c:4b:5a:3b:32:5c:a8:68:e7:e4:
28:d6:2d:33:3a:98:15:d1:19:78:d7:e3:d0:33:e4:
39:2f:79:fe:b5:26:52:4f:42:8e:35:24:84:88:84:
29:b4:30:73:0d:dc:5c:42:15:2e:34:6f:b0:ba:15:
a3:ef:20:61:91:90:84:73:83:5b:43:f9:97:52:ab:
55:68:25:19:7b:99:02:43:7c:f7:62:98:ec:5a:69:
78:49:f0:fc:d0:49:04:06:ad:80:19:94:72:8b:02:
ec:93:e6:f3:ea:b4:11:31:3f:99:37:2b:12:a0:ac:
d8:db:cd:2c:f9:ad:be:0c:5e:45:10:4f:ff:1b:d5:
4e:13:dd:98:29:5c:2f:5a:ec:ac:9c:8c:e5:fb:da:
cd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E4:05:34:38:07:01:1E:15:C7:D0:33:74:9F:E8:13:31:3C:80:95
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/veQFNDgHAR4Vx9AzdJ_oEzE8gJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.101.0-147.45.111.255
Signature Algorithm: sha256WithRSAEncryption
75:62:ff:49:1e:62:0d:b4:57:82:ca:39:44:97:ee:12:ec:3c:
70:10:a2:5a:98:36:2e:76:bb:de:72:da:fd:cc:6d:0e:9c:78:
73:01:d7:8c:6d:8c:b1:48:88:89:94:5f:86:dc:64:cc:c9:43:
26:43:c5:80:5b:b9:1f:7c:3a:e6:3f:1a:2b:5b:da:2a:46:0e:
b1:98:02:a9:6d:cc:9e:19:ec:38:6b:0f:a4:f0:7b:d3:61:10:
1e:ec:d4:13:77:a2:a7:b6:c9:57:44:22:7d:52:3a:45:a4:ee:
be:d8:1d:32:e8:6f:c4:e3:6d:20:92:76:02:c5:a1:43:cc:13:
4b:aa:07:76:9d:ee:9a:ac:9c:f4:32:a8:b8:c7:e4:99:cc:cd:
50:75:52:cf:71:f5:af:61:e8:e5:27:cd:47:ea:e2:b4:e0:84:
47:e2:47:5b:25:95:98:72:0d:0d:23:eb:88:c1:17:0c:cd:14:
50:64:d4:d3:56:b1:ce:1d:9c:d7:4b:a6:0d:46:f3:af:6f:df:
9c:9f:90:99:9d:1f:11:2c:49:54:14:9e:f0:cb:25:76:67:3d:
05:c6:3c:81:8c:11:67:d3:4c:88:dd:e0:c0:59:f5:f1:6d:e2:
7a:c2:bb:f6:7b:b2:95:a5:33:d8:c2:52:fa:d9:c8:24:53:e4:
ab:5e:0f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 5 23:48:47 2024 by rpki-client on console-fra.rpki-client.org