Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/U7I90ELtlbGzzO0etyKOUx3a5d4.roa
File: U7I90ELtlbGzzO0etyKOUx3a5d4.roa (raw, json)
Hash identifier: NEWz0GhZJ9nI4SnOZD3ifNPsNyVDURu1yQx6yFLramg=
Subject key identifier: 53:B2:3D:D0:42:ED:95:B1:B3:CC:ED:1E:B7:22:8E:53:1D:DA:E5:DE
Certificate issuer: /CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Certificate serial: 01864B96ABA3131ED0390673647C2CA5BAD8
Authority key identifier: 7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/U7I90ELtlbGzzO0etyKOUx3a5d4.roa
Signing time: Mon 13 Feb 2023 16:23:30 +0000
ROA not before: Mon 13 Feb 2023 16:23:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211936
IP address blocks: 45.151.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Aug 2023 07:28:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4b:96:ab:a3:13:1e:d0:39:06:73:64:7c:2c:a5:ba:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Validity
Not Before: Feb 13 16:23:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53b23dd042ed95b1b3cced1eb7228e531ddae5de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a8:b9:7f:14:45:25:5c:08:42:24:c4:c1:30:
b2:a5:21:18:c9:42:6e:d2:15:bf:69:86:bc:66:76:
96:38:21:90:76:46:7b:b3:6a:b8:e3:fb:4f:72:51:
56:86:f7:e1:5a:1a:65:17:e6:32:ac:33:1e:11:45:
a5:68:7f:a1:d4:e5:88:11:d1:dc:16:09:b7:ad:48:
d7:ed:94:26:d5:e2:d9:60:8e:d1:bc:ba:bf:b4:56:
b8:9b:34:b8:7a:d3:07:52:d5:bd:9a:c5:e9:9d:b1:
e2:df:88:ec:c2:d2:90:95:84:10:4c:ce:3b:18:f4:
4d:e7:b7:7e:3c:98:39:e6:ea:7a:65:ee:82:36:40:
2c:cb:35:f3:4d:02:fe:b4:db:0b:59:15:25:04:b3:
ee:60:b7:a2:d5:92:be:74:49:25:27:e0:fb:ca:35:
79:96:3d:f5:36:f6:d4:6c:c6:eb:90:e1:17:d4:a9:
e6:ad:00:45:bd:38:0f:1b:1f:4f:b1:3e:46:36:a4:
e7:71:14:e1:fb:c8:b6:9b:51:04:b3:bb:7e:e9:8b:
1d:fe:bf:f0:dc:39:3b:73:dd:58:e6:d9:92:e1:6f:
58:d0:55:f8:01:ab:cb:42:a6:3a:ab:40:bd:5d:e4:
48:e8:30:9b:e4:d1:f4:f1:04:64:23:54:2f:84:5a:
90:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B2:3D:D0:42:ED:95:B1:B3:CC:ED:1E:B7:22:8E:53:1D:DA:E5:DE
X509v3 Authority Key Identifier:
keyid:7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/U7I90ELtlbGzzO0etyKOUx3a5d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/f6P5nbqUowe2zS4dkPZ42sBWgfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.140.0/24
Signature Algorithm: sha256WithRSAEncryption
06:57:6f:9a:fa:9b:8c:cc:95:d9:c2:1e:e2:3b:ab:04:88:5e:
c1:58:f8:21:0e:a9:95:ef:dc:92:81:3f:af:6b:f3:22:52:40:
f5:14:de:b8:3d:21:62:b1:3d:53:5e:4f:92:9c:29:83:da:41:
64:97:ce:c1:fa:fe:ee:0c:51:6c:b1:29:84:7d:7e:31:f8:70:
94:c3:81:9b:6f:15:82:c1:de:1b:3e:78:19:c3:13:45:96:77:
72:cf:87:63:fd:e7:b8:e0:50:bc:4e:51:8f:80:9b:0e:d7:31:
4f:73:42:8b:c3:4e:c5:cc:01:15:3f:b9:7e:cb:98:4a:f9:32:
18:9c:9f:30:04:59:14:e1:06:16:a2:f9:25:53:5d:e4:52:f5:
fd:04:7d:61:fb:81:65:22:c1:51:25:71:48:78:8d:74:38:bf:
85:5d:d9:b4:c1:81:f0:f9:65:24:8f:7a:ef:ce:6f:99:e4:68:
bd:b0:73:6d:09:30:a0:19:d9:e6:7b:1e:c2:9f:2c:4d:df:90:
59:10:cc:b9:4b:e3:1c:55:bb:c4:ec:d8:e3:06:5c:f6:d5:73:
ef:c4:72:d8:0b:97:50:51:ff:2c:df:f1:ce:e4:35:a3:49:72:
4b:0a:9a:48:f8:5a:22:5b:0f:bf:ad:85:f2:7a:28:19:4f:aa:
4a:de:c8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:21 2024 by rpki-client on console-fra.rpki-client.org