Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/jMTfM506nrF0NDpi7BPej3-PKsg.roa
File: jMTfM506nrF0NDpi7BPej3-PKsg.roa (raw, json)
Hash identifier: 3E6R2VhcAMP8l5wHQTMUTyNw5Lzad4Saf0sJiw3vy/c=
Subject key identifier: 8C:C4:DF:33:9D:3A:9E:B1:74:34:3A:62:EC:13:DE:8F:7F:8F:2A:C8
Certificate issuer: /CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Certificate serial: 0186DCBEC0B78331AB1B0C40B37307C26984
Authority key identifier: 7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/jMTfM506nrF0NDpi7BPej3-PKsg.roa
Signing time: Mon 13 Mar 2023 20:52:14 +0000
ROA not before: Mon 13 Mar 2023 20:52:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 45.11.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Apr 2023 13:42:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:dc:be:c0:b7:83:31:ab:1b:0c:40:b3:73:07:c2:69:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Validity
Not Before: Mar 13 20:52:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8cc4df339d3a9eb174343a62ec13de8f7f8f2ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ba:f0:7f:c3:27:77:86:23:e5:48:b4:9d:d2:
29:1e:73:55:d2:d3:65:d2:ea:57:99:f2:a3:1d:cc:
79:2e:8f:63:03:d0:99:74:8e:f1:4e:5f:6a:9c:f8:
ee:8b:1b:4a:eb:5f:65:1d:4a:b9:bd:e2:1d:a4:6c:
f3:72:ef:e1:b5:92:7b:f4:9d:d9:59:9b:5a:f2:45:
a3:de:19:6c:4b:b0:5c:00:3a:38:62:4a:a9:de:f5:
9b:b5:e4:85:28:91:ac:58:21:e9:30:c0:01:82:72:
a2:01:9e:06:72:92:a4:26:0f:45:11:ae:21:00:ec:
5f:4e:88:46:a2:aa:ff:cd:c9:ad:cd:c4:0c:d5:55:
72:22:90:34:44:fa:79:52:58:39:be:6f:1d:60:5f:
5b:ca:fc:1d:14:73:09:16:12:df:1d:09:a7:47:70:
df:b2:d2:9b:05:1b:73:69:d9:96:8a:68:68:00:b1:
ab:51:f6:8b:a3:94:3f:d2:90:60:42:4f:33:80:10:
08:4a:3b:03:95:1f:81:2c:dc:0c:f6:05:6c:94:59:
87:79:fd:b1:88:bc:8e:a4:0b:3e:97:4f:40:b0:8c:
0a:ca:7e:45:b1:27:b4:b8:e1:9d:63:48:d7:43:ed:
6e:cb:3a:9f:8a:fa:67:1d:17:12:8f:95:a8:e0:63:
db:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C4:DF:33:9D:3A:9E:B1:74:34:3A:62:EC:13:DE:8F:7F:8F:2A:C8
X509v3 Authority Key Identifier:
keyid:7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/jMTfM506nrF0NDpi7BPej3-PKsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.174.0/24
Signature Algorithm: sha256WithRSAEncryption
83:aa:50:6d:98:31:5f:ff:d4:0b:b5:bc:69:75:37:24:b4:82:
93:77:2b:5a:ad:82:32:35:c8:9f:db:0b:d4:fc:38:d9:22:3b:
cb:ac:80:00:62:07:44:dc:a0:ed:97:e6:b3:b7:ae:d1:9d:f8:
12:5f:3c:6d:f5:38:60:26:bf:0a:fe:51:31:65:9a:75:64:1f:
e6:50:df:71:5f:09:1e:0e:e4:12:c6:a2:3e:b7:68:19:2c:5d:
bf:e8:5b:6e:06:fe:b1:bf:f1:d7:91:0d:96:f7:ba:c2:db:89:
a1:70:21:db:df:7a:36:ca:74:47:f9:98:08:23:e2:80:09:21:
93:37:7f:37:39:5c:01:22:af:35:5f:c8:ae:4a:68:ce:e2:33:
c3:db:50:50:d0:95:8a:0d:d2:af:c0:9d:c9:eb:80:b2:e4:b2:
5d:9e:3b:6e:b7:c7:d5:9d:13:2a:c9:99:2f:de:e8:bc:c6:ae:
dc:df:58:b9:2b:99:d8:dc:28:a3:6e:84:82:fd:c2:e9:b7:31:
d5:cd:cc:d0:50:a6:79:7c:ec:e7:af:d8:07:bc:5b:82:0d:f1:
11:bb:2f:e0:3b:c8:fd:66:3b:a3:70:bc:1d:5e:de:80:ea:60:
80:22:af:9f:ec:8a:24:e7:b2:3f:eb:2e:36:9f:02:52:11:db:
e0:86:94:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:42 2024 by rpki-client on console-ams.rpki-client.org