Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/ETSTlsBXY2VkGZrqQtk9eIGTNjA.roa
File: ETSTlsBXY2VkGZrqQtk9eIGTNjA.roa (raw, json)
Hash identifier: IyHVXk2CxvJr9XMkk99cOYuPmtctXMMyVas4mwEwnlo=
Subject key identifier: 11:34:93:96:C0:57:63:65:64:19:9A:EA:42:D9:3D:78:81:93:36:30
Certificate issuer: /CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Certificate serial: 018CC56EDDF7DF37E105407E62344C9ED396
Authority key identifier: 7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/ETSTlsBXY2VkGZrqQtk9eIGTNjA.roa
Signing time: Mon 01 Jan 2024 14:30:26 +0000
ROA not before: Mon 01 Jan 2024 14:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199797
IP address blocks: 45.151.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 16:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:dd:f7:df:37:e1:05:40:7e:62:34:4c:9e:d3:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Validity
Not Before: Jan 1 14:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11349396c057636564199aea42d93d7881933630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:97:35:ca:e7:a6:e3:10:f1:22:bd:9f:1e:2d:
36:fc:11:ae:16:13:e5:21:9c:b6:63:c2:b6:5e:a1:
f5:4b:99:87:09:75:07:d9:cb:1b:97:c5:06:f8:f5:
50:85:0a:c7:b0:1e:76:d8:18:78:f8:46:42:2b:2f:
f1:73:18:f4:1f:64:32:5e:b8:4a:cd:3c:c2:ad:d3:
5a:9a:3a:ee:10:0a:41:72:41:c3:36:7c:cd:62:61:
9a:f2:ad:5d:7c:a0:85:77:c1:2d:e4:6a:3e:95:ef:
32:2e:44:b1:ca:bb:ef:d3:b0:c0:14:8b:63:f6:84:
d8:1b:f5:54:74:1d:86:14:df:f4:90:dd:bc:2e:94:
02:74:ae:40:5e:ce:ca:35:28:f2:49:d8:f6:8d:4e:
c4:9b:b5:db:26:27:87:91:71:be:2c:74:0b:57:e1:
35:53:9e:98:b8:6d:dd:12:02:19:7e:6f:55:f5:43:
5b:f2:83:2c:3c:59:5a:32:02:04:f8:e4:f6:61:37:
d4:ee:25:7b:30:1e:6c:02:85:8c:d0:70:bf:6d:a9:
14:fa:55:10:15:94:19:52:44:60:b1:de:87:25:0d:
9d:8a:ff:02:39:64:6e:c7:78:e7:f6:52:f6:87:c6:
77:d0:2e:75:90:fa:2e:b0:b7:95:9e:4e:79:e5:a9:
d8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:34:93:96:C0:57:63:65:64:19:9A:EA:42:D9:3D:78:81:93:36:30
X509v3 Authority Key Identifier:
keyid:7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/ETSTlsBXY2VkGZrqQtk9eIGTNjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/f6P5nbqUowe2zS4dkPZ42sBWgfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.141.0/24
Signature Algorithm: sha256WithRSAEncryption
10:22:2c:05:9f:9e:f4:af:46:b7:8e:e8:d7:85:52:b3:14:05:
3e:61:55:08:e3:15:6c:f1:99:7a:39:25:35:8a:0d:87:94:ce:
3a:74:50:3f:4a:4d:71:f1:1d:86:70:7d:9b:48:7a:8f:1a:46:
da:af:6c:08:ec:60:66:d7:6c:31:22:07:64:6e:38:c7:61:1e:
65:b8:8d:59:0e:d7:94:11:84:60:be:47:1e:eb:6e:15:9b:2c:
ec:7c:be:12:1b:03:53:aa:b0:88:7b:05:b7:e1:de:4e:17:14:
7b:5f:e5:d7:8a:ae:63:84:34:92:2e:95:51:a4:fe:1b:81:31:
d8:1a:21:a0:01:dc:ea:35:d5:ea:a2:fa:98:59:63:ca:5a:3e:
d3:ea:38:d8:ea:d6:1e:a1:b4:3a:4f:93:eb:05:a3:d6:71:90:
8f:4b:44:42:29:a0:49:04:7a:e3:96:62:da:df:5e:27:bc:58:
98:36:b8:89:35:f1:a7:21:49:d6:f2:96:89:37:53:db:d7:47:
00:0c:82:a0:bd:d2:be:27:32:fe:0a:f5:ea:38:9a:d3:ea:b3:
aa:24:94:a4:7d:db:ac:38:1f:5d:d9:12:f0:21:c5:c1:70:14:
62:24:49:b7:72:6a:ae:f3:89:d4:4e:5e:61:fe:c3:c5:c9:93:
e6:59:39:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:21 2024 by rpki-client on console-fra.rpki-client.org