Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/MQu9ZJgRZ-xcjHs2DVyIHmjkd-I.roa
File: MQu9ZJgRZ-xcjHs2DVyIHmjkd-I.roa (raw, json)
Hash identifier: m271yAartbRPdHWeTBPGvCKkC+GRf+fa62t/PR7dx74=
Subject key identifier: 31:0B:BD:64:98:11:67:EC:5C:8C:7B:36:0D:5C:88:1E:68:E4:77:E2
Certificate issuer: /CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Certificate serial: 01865062671C3F59B79F00F4555228EA59E6
Authority key identifier: 7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/MQu9ZJgRZ-xcjHs2DVyIHmjkd-I.roa
Signing time: Tue 14 Feb 2023 14:44:31 +0000
ROA not before: Tue 14 Feb 2023 14:44:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208068
IP address blocks: 45.151.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 May 2023 07:50:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:50:62:67:1c:3f:59:b7:9f:00:f4:55:52:28:ea:59:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Validity
Not Before: Feb 14 14:44:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=310bbd64981167ec5c8c7b360d5c881e68e477e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:74:f1:8c:f8:b6:cc:c0:4d:a2:68:f5:a3:dd:
31:86:ac:ac:ef:45:2d:5c:7b:15:57:cf:97:63:28:
95:3b:af:c2:10:fd:b1:c3:0c:1d:0e:85:1d:64:48:
6a:00:0f:81:a5:52:82:0e:dc:29:28:88:15:21:de:
98:b0:1a:88:c8:2b:e5:fa:40:19:09:6b:23:ff:94:
e4:0e:bf:ba:bf:42:e2:08:9b:a0:4f:b2:04:8e:24:
e7:d4:00:aa:4d:5c:2a:f9:65:9c:36:dc:8d:61:34:
78:17:52:fd:e7:4f:8f:2e:db:cd:a3:4e:18:0a:63:
aa:35:d4:66:2c:f1:81:12:53:7b:b3:83:28:9f:d1:
30:e3:39:0f:4b:6b:7f:eb:81:ef:6c:4c:28:27:3f:
ba:ea:91:03:65:86:09:da:39:03:23:e3:03:75:20:
a6:8d:a4:df:83:99:b1:ef:13:68:54:04:f3:15:8f:
80:f6:c1:53:c8:fd:7c:7e:c2:fb:2e:d0:8e:59:f3:
8f:fa:69:48:cd:70:62:40:e6:22:de:ad:b2:f8:50:
6d:de:4c:be:84:f5:1d:6f:51:0c:71:f4:1e:92:40:
3d:6b:fe:19:11:a3:d6:df:e3:63:3f:da:b6:30:e0:
85:fe:9b:56:e0:95:12:00:d3:b7:06:56:7f:a7:7d:
d3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0B:BD:64:98:11:67:EC:5C:8C:7B:36:0D:5C:88:1E:68:E4:77:E2
X509v3 Authority Key Identifier:
keyid:7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/MQu9ZJgRZ-xcjHs2DVyIHmjkd-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/f6P5nbqUowe2zS4dkPZ42sBWgfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.142.0/24
Signature Algorithm: sha256WithRSAEncryption
76:ad:91:6c:55:09:83:c7:e5:29:db:30:08:b4:0c:26:da:0e:
f3:8a:3d:a8:9a:6b:82:69:e7:d0:3d:0b:fc:14:60:dd:4c:e6:
65:0f:8e:8f:e8:82:69:c0:24:08:dc:1e:05:f0:ec:07:9e:46:
70:41:b4:6c:fa:95:95:ee:3e:ef:d3:f7:f1:4f:e0:3d:4a:28:
c1:08:c8:e8:c4:3f:ed:4d:14:08:89:54:14:98:57:e3:e2:0b:
58:08:96:a9:ba:78:f0:40:d1:18:8a:ae:48:0b:39:79:2c:53:
de:36:2a:e6:cd:e0:d9:87:f8:12:a7:5f:25:10:1d:1f:8a:68:
e9:18:31:6e:18:1e:f4:dd:3c:8a:c5:7f:ad:a0:44:1d:87:5d:
02:69:41:c2:2f:25:bf:ea:0b:78:72:b8:69:f4:18:77:3f:19:
b4:84:c2:44:59:74:b3:8b:b3:9b:c2:b2:26:31:20:1e:15:51:
de:c9:48:f8:2a:de:ff:a8:aa:f2:9d:ee:77:91:d2:e5:4c:d9:
9d:9c:f5:3b:f0:41:09:3d:81:b9:d1:7b:4d:97:2d:6d:de:35:
51:5b:b9:2f:9e:bf:aa:30:d1:ea:13:c4:06:6a:df:9d:3c:ea:
5a:4e:fa:c3:02:22:95:05:b7:ef:6c:8a:de:96:aa:d2:8d:4f:
9f:b6:8d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:03 2024 by rpki-client on console-ams.rpki-client.org