Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/1-dvvBgOHyvtT12d0jBljuJY5Um4.roa
File: 1-dvvBgOHyvtT12d0jBljuJY5Um4.roa (raw, json)
Hash identifier: x6YxwF9m4UEk4EmB0pIeu3cWSLKAOnJOnMVg1df4aOg=
Subject key identifier: F9:DB:EF:06:03:87:CA:FB:53:D7:67:74:8C:19:63:B8:96:39:52:6E
Certificate issuer: /CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1
Certificate serial: 018A900485E775414298591722513F688E2B
Authority key identifier: 87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/1-dvvBgOHyvtT12d0jBljuJY5Um4.roa
Signing time: Wed 13 Sep 2023 19:28:50 +0000
ROA not before: Wed 13 Sep 2023 19:28:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 45.158.224.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:90:04:85:e7:75:41:42:98:59:17:22:51:3f:68:8e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1
Validity
Not Before: Sep 13 19:28:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9dbef060387cafb53d767748c1963b89639526e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bd:11:ba:4e:f0:27:41:42:27:9f:1d:35:99:
b5:17:76:7c:8e:44:5d:41:11:cb:36:d8:6d:18:8f:
6a:13:3d:dc:6b:d5:f7:5b:8d:c5:cd:72:ca:08:dc:
00:a0:ca:c6:5a:48:ae:cb:45:a1:f3:aa:ff:7f:12:
95:88:f7:21:a4:05:32:35:59:0e:fd:15:b9:69:a9:
40:41:39:ee:74:28:46:a7:8a:0f:3f:d8:d8:4a:79:
53:38:2e:78:d4:82:d5:8c:3f:c5:8b:55:12:73:2c:
c6:eb:f5:99:0a:3d:71:20:d2:81:0e:6f:6d:b9:9d:
03:19:cc:32:ca:b0:22:21:4a:e2:59:55:f2:80:59:
22:28:e5:fb:d4:31:f4:d7:f4:6e:18:76:4c:c3:0a:
8a:54:75:b2:00:83:5b:a8:58:81:c5:d7:0a:00:15:
80:13:4f:3b:94:78:ee:bd:f2:84:2c:0b:cd:62:d3:
8e:e5:6c:aa:93:9e:e3:1b:7f:d4:ba:a6:d4:6f:fb:
c3:15:98:6f:fd:92:14:32:ea:1a:c2:56:a6:71:f6:
34:ee:38:75:2b:64:8d:b3:0c:16:22:8a:a0:da:9c:
65:f7:23:33:14:68:da:b5:37:a8:8c:45:03:7c:10:
e7:46:04:e6:ed:cd:b7:b3:f3:dd:25:58:17:7e:9f:
fb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DB:EF:06:03:87:CA:FB:53:D7:67:74:8C:19:63:B8:96:39:52:6E
X509v3 Authority Key Identifier:
keyid:87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/1-dvvBgOHyvtT12d0jBljuJY5Um4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.224.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:e0:3e:23:c8:0a:41:ab:7f:62:c5:b1:ae:86:0a:1a:87:02:
26:12:ba:0e:0e:e3:65:94:ff:de:0d:43:6a:95:0c:1a:a4:d9:
9f:14:e5:2b:d1:1d:e7:cd:7b:eb:66:94:93:f4:36:23:9f:f2:
15:5f:fe:e1:50:c7:48:8b:29:46:ca:65:8d:47:43:95:1b:ce:
f7:bc:1b:e4:99:26:6c:3d:39:82:87:be:28:f4:c1:82:7d:bf:
43:e6:a8:96:1b:90:f1:04:fd:09:2e:94:79:e4:1d:8c:93:b1:
42:1b:05:15:37:c6:ae:9a:89:e0:b2:fb:a6:62:78:60:d6:7d:
8b:5c:50:46:ab:65:2c:86:43:27:0a:82:65:91:5d:c3:b0:e7:
d2:70:8d:7d:92:dd:88:6e:b8:07:b8:28:ba:4d:6b:b4:f8:b2:
c8:3d:6f:03:03:14:2e:2d:e8:b1:35:26:07:c0:60:be:46:a3:
99:89:b6:0e:73:40:0e:90:cc:d0:a6:c2:5c:4f:e9:a8:a7:b3:
aa:89:87:22:1b:68:6f:52:fb:bc:21:1e:cd:ae:e5:b8:af:fb:
31:f4:57:dc:f4:cd:57:fc:c3:66:dd:42:1f:67:a6:93:c0:99:
db:b2:cf:7a:c2:e1:8f:ee:3f:99:15:60:70:00:b0:42:6b:e1:
cb:e4:98:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:59 2024 by rpki-client on console-fra.rpki-client.org