Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/5z42NjZ7sw6kMXn1AdD00hvkC9U.roa
File: 5z42NjZ7sw6kMXn1AdD00hvkC9U.roa (raw, json)
Hash identifier: 5yZHrJMhAUgdO3uQ2gaSIzYAT9GEa99FZyLNFbTx1Z4=
Subject key identifier: E7:3E:36:36:36:7B:B3:0E:A4:31:79:F5:01:D0:F4:D2:1B:E4:0B:D5
Certificate issuer: /CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Certificate serial: 018A4659CBC2255600087B15EA77C897ED61
Authority key identifier: 7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/5z42NjZ7sw6kMXn1AdD00hvkC9U.roa
Signing time: Wed 30 Aug 2023 12:10:04 +0000
ROA not before: Wed 30 Aug 2023 12:10:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36113
IP address blocks: 45.151.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Sep 2023 20:37:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:46:59:cb:c2:25:56:00:08:7b:15:ea:77:c8:97:ed:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Validity
Not Before: Aug 30 12:10:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e73e3636367bb30ea43179f501d0f4d21be40bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f1:b8:69:16:fa:f7:d6:47:0b:13:4a:73:91:
22:27:91:71:fd:12:e3:9f:db:e1:52:41:73:cb:7b:
4d:bf:d4:49:94:b8:6f:df:54:b9:6d:9e:a9:3c:f1:
3b:59:17:8f:e0:37:b1:c2:a5:1c:6c:c5:e9:01:24:
e8:bd:11:cf:03:c9:75:fd:35:57:0e:3d:1e:c2:d3:
89:a2:cb:37:dd:de:a3:e6:1b:02:0c:34:ec:41:ae:
f0:09:84:6c:ae:05:23:a7:d8:42:47:c6:e8:26:2e:
6a:56:46:bc:d6:b6:5b:c4:2e:78:52:20:d8:b6:fa:
61:47:16:09:3a:7a:05:4b:94:9b:fe:a0:a9:29:00:
95:04:c6:12:7e:a8:b3:f1:2a:c7:70:e8:1e:4a:1b:
d0:23:b8:44:7a:fc:77:2f:9c:92:7a:59:cc:1c:d4:
ed:d4:6c:04:a5:80:1f:88:ce:9e:46:97:3b:1f:0f:
a2:71:57:e5:bd:d3:9c:a1:7d:9b:46:96:af:32:86:
c7:07:16:75:b2:c4:87:b0:66:03:ab:d7:c3:61:6c:
fc:30:cf:20:30:60:aa:4c:a2:41:20:11:72:4b:4b:
52:73:51:47:5a:19:ac:e9:6e:6e:80:ea:c5:e6:2d:
af:69:9e:a7:e9:74:0b:99:af:d7:42:68:1e:62:06:
f0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3E:36:36:36:7B:B3:0E:A4:31:79:F5:01:D0:F4:D2:1B:E4:0B:D5
X509v3 Authority Key Identifier:
keyid:7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/5z42NjZ7sw6kMXn1AdD00hvkC9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/f6P5nbqUowe2zS4dkPZ42sBWgfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.140.0/24
Signature Algorithm: sha256WithRSAEncryption
36:37:84:60:fa:d1:cb:a1:0c:da:86:97:5b:de:19:22:ce:52:
6c:ac:ca:a6:df:10:da:72:06:10:c6:e9:43:28:66:e6:56:a3:
f3:01:cf:21:c6:f6:63:a0:4f:f3:b9:0e:fb:bb:f4:8e:af:89:
0e:18:40:d7:cf:a6:2d:b3:bc:c7:ec:76:9e:4a:5d:ea:56:b4:
b4:d9:32:e1:51:96:4b:b2:28:ca:dc:41:a4:14:47:d7:c6:67:
6e:0f:30:59:c7:08:48:63:75:d4:24:2e:ac:d5:a6:94:34:5f:
00:98:f7:8c:a5:d1:a4:ce:82:bf:15:c1:e6:9d:46:62:d4:ed:
12:ed:00:d3:d1:48:06:dc:8f:69:d2:3b:37:ec:6f:9e:d5:e6:
3b:2f:64:97:83:d6:3e:ad:10:33:34:f6:e6:f5:34:af:36:8a:
6e:03:42:4c:c1:02:88:87:3e:96:2b:5e:bc:e3:2a:3e:df:72:
3e:0b:40:5e:88:d3:6d:f0:e0:55:f6:c3:d1:ae:ac:18:0a:90:
0c:84:5a:7b:49:35:ad:60:97:c0:c7:03:cd:9d:07:5a:9b:ba:
df:08:a2:b5:70:fd:4b:3a:ac:be:97:d6:43:78:02:dc:ff:99:
db:2a:ae:3e:ec:78:15:13:26:46:11:75:ab:d7:bd:95:cf:bf:
76:e5:fb:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:03 2024 by rpki-client on console-ams.rpki-client.org