Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/pre_KRSMqoT7klNbYU2DXIuKt3M.roa
File: pre_KRSMqoT7klNbYU2DXIuKt3M.roa (raw, json)
Hash identifier: S+ivvmmMRD1Qqs6vBdgGK/9JhUENLFAvvGDeDj/aGyo=
Subject key identifier: A6:B7:BF:29:14:8C:AA:84:FB:92:53:5B:61:4D:83:5C:8B:8A:B7:73
Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial: 018D02B965A6EE552908CCA2F572827FEA79
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/pre_KRSMqoT7klNbYU2DXIuKt3M.roa
Signing time: Sat 13 Jan 2024 12:08:41 +0000
ROA not before: Sat 13 Jan 2024 12:08:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47430
IP address blocks: 45.139.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jan 2024 21:05:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:02:b9:65:a6:ee:55:29:08:cc:a2:f5:72:82:7f:ea:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
Validity
Not Before: Jan 13 12:08:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6b7bf29148caa84fb92535b614d835c8b8ab773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a6:22:93:8b:62:ea:36:47:1a:0b:91:cf:2c:
8d:05:8f:a6:34:1d:cb:6b:34:b5:8a:f1:a0:91:e3:
99:7a:9b:1b:1f:db:b8:38:07:f3:43:0a:73:1b:1e:
8f:e5:8d:cf:76:06:5e:5b:64:53:16:6f:91:63:d6:
e4:69:4f:f5:f7:ca:b4:87:8c:eb:c5:75:f5:95:35:
94:a1:b8:93:b1:a3:89:65:52:a7:4b:0c:48:e3:ad:
90:41:db:e4:6e:a3:5f:23:15:c3:41:e5:4a:44:d3:
2f:b2:a8:5e:50:f8:07:9a:1d:a8:d0:61:44:89:d7:
67:dd:c1:be:29:38:39:ee:7c:74:07:d3:7c:ee:6f:
a1:b2:2e:f3:75:10:24:e5:b7:c8:6e:b4:95:0c:d1:
39:8d:b5:66:6e:bd:54:3d:16:6e:0b:4d:e7:9d:7e:
e9:85:ed:2c:54:fd:96:40:01:ca:7f:a7:08:0c:35:
3a:15:33:2f:05:02:d4:85:25:bd:c7:f2:8e:4e:f5:
d4:17:c8:8e:41:ca:75:9f:71:65:e4:8c:52:d0:3d:
e0:d0:fc:2c:08:31:61:7e:67:14:a5:07:8e:24:70:
76:2d:38:5e:8d:2f:71:6a:0b:9e:a4:c8:ff:1a:1d:
87:6c:e1:a2:5b:73:f7:bb:8a:5b:ca:86:92:94:06:
d9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B7:BF:29:14:8C:AA:84:FB:92:53:5B:61:4D:83:5C:8B:8A:B7:73
X509v3 Authority Key Identifier:
keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/pre_KRSMqoT7klNbYU2DXIuKt3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.8.0/24
Signature Algorithm: sha256WithRSAEncryption
02:7d:9f:1d:23:83:33:cc:16:a0:0a:b4:f9:1c:ca:be:9a:ac:
79:3a:10:a8:d8:ce:cb:bb:44:a5:72:a0:f7:26:e8:25:3c:02:
73:3c:0f:12:d3:51:6d:5e:12:b7:79:46:48:21:34:e5:3c:bc:
5a:74:03:9f:9f:f0:1c:c6:cd:27:d2:9f:33:22:20:e1:73:b4:
67:59:d4:58:a3:61:53:71:23:eb:cf:91:15:19:da:c7:39:94:
97:94:8e:ee:29:1c:67:74:76:98:b3:34:b2:7a:16:00:cd:c0:
d7:65:5e:6f:97:0d:ea:ec:52:8f:e0:1f:4b:b3:8a:78:c1:c9:
db:c0:6d:11:a1:d8:99:9d:ae:8e:ef:0b:57:c5:97:52:5d:8e:
c0:b3:93:d4:0b:81:1b:a2:3d:c9:d9:30:0a:9a:a9:20:35:5a:
4c:b8:45:cb:d5:9d:be:28:8a:2b:41:fe:ad:32:68:d7:51:c7:
98:3c:b0:c4:e0:d4:5f:4e:9a:5a:4b:8c:c2:7e:3d:d0:e0:77:
32:8b:bb:ad:a1:58:d0:61:96:19:8d:fe:d1:53:85:d6:84:94:
08:95:4f:b2:4d:a4:1f:21:2e:ee:0c:29:8f:cc:9a:43:a2:c0:
28:a8:81:cc:8c:e1:4d:e7:84:ca:eb:38:e8:0b:bd:5f:df:52:
51:29:7c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 01:03:56 2024 by rpki-client on console-ams.rpki-client.org