Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/fI9d97y-GiJNykjhm_bSK3JLx-Y.roa
File: fI9d97y-GiJNykjhm_bSK3JLx-Y.roa (raw, json)
Hash identifier: bAi/G5UPsXMQul9zoWNmih8CsNyozWVw4m35v2v/Cno=
Subject key identifier: 7C:8F:5D:F7:BC:BE:1A:22:4D:CA:48:E1:9B:F6:D2:2B:72:4B:C7:E6
Certificate issuer: /CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Certificate serial: 018CDBA2CAE49400E01DBBD3CB8908691B4E
Authority key identifier: 7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/fI9d97y-GiJNykjhm_bSK3JLx-Y.roa
Signing time: Fri 05 Jan 2024 21:58:48 +0000
ROA not before: Fri 05 Jan 2024 21:58:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 45.151.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 May 2024 00:55:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:db:a2:ca:e4:94:00:e0:1d:bb:d3:cb:89:08:69:1b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Validity
Not Before: Jan 5 21:58:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c8f5df7bcbe1a224dca48e19bf6d22b724bc7e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:58:df:cb:77:7a:fa:fe:f4:48:77:d1:c1:4c:
60:2d:bf:9d:37:eb:5e:f5:b3:a3:51:f6:26:b1:fe:
c5:8c:8d:05:26:36:6d:84:04:20:d2:ca:76:14:6e:
05:52:7b:5e:5f:ae:ef:0d:36:a1:82:71:45:30:c9:
cb:cf:4d:cf:77:ac:7e:6c:61:fc:84:f4:f5:c3:c2:
0a:04:9f:87:86:6f:88:d6:17:32:36:17:ea:b9:05:
70:dc:c4:80:12:63:f2:64:ab:02:71:69:ce:05:25:
91:06:09:2f:e7:d8:e6:85:db:93:cb:e0:14:29:6e:
2c:b7:80:23:e2:67:d9:e3:64:e7:78:eb:b0:ed:fd:
3f:3e:ba:14:0b:bc:a0:3d:0c:99:43:6d:a1:79:0d:
6f:20:51:e8:3d:96:3f:2d:a4:32:79:40:41:a2:26:
95:38:42:2b:c9:43:a3:29:c6:d9:5f:ac:b0:bd:f5:
4e:93:28:2a:9f:dc:bf:97:a9:72:0f:d1:5d:10:10:
1d:c3:af:7b:77:29:c8:6f:22:b4:09:ff:f8:ad:d4:
3c:3c:55:07:66:19:06:57:f1:01:1e:ce:c4:6c:bd:
7d:53:18:bf:5e:13:04:8a:73:b9:11:a1:ec:9d:7e:
7c:02:62:b4:51:9d:ff:d1:c9:5f:61:b8:e2:f4:b4:
11:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8F:5D:F7:BC:BE:1A:22:4D:CA:48:E1:9B:F6:D2:2B:72:4B:C7:E6
X509v3 Authority Key Identifier:
keyid:7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/fI9d97y-GiJNykjhm_bSK3JLx-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/f6P5nbqUowe2zS4dkPZ42sBWgfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.140.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:1d:94:74:69:f4:dd:92:0c:2e:2a:b6:45:6a:b2:9e:f2:56:
23:ff:d0:7d:f6:5e:1a:6e:cb:b3:4f:bf:1e:df:fd:69:de:4a:
b3:a0:cd:b2:15:a3:50:2c:74:e4:af:5b:13:24:28:70:b9:d2:
72:86:4f:15:e9:04:0e:42:d1:76:6f:34:07:d4:ca:57:37:53:
2f:68:57:89:af:42:76:68:33:26:ba:85:1b:e6:c5:8d:a9:4d:
59:8b:e9:cb:e0:9e:7b:74:2d:95:a5:6c:2b:7b:86:61:f9:6e:
81:b6:5e:93:96:4c:b3:fe:68:71:49:8b:d6:40:62:6b:0f:23:
78:59:cd:23:44:3d:ef:f2:7a:43:88:0a:28:e7:14:e6:fa:e1:
45:94:08:36:64:4e:95:12:a6:6c:c7:36:e5:05:a6:db:8c:43:
1d:75:97:7a:18:e9:b5:15:f9:45:fb:58:e8:45:00:35:c9:b6:
a9:bf:20:b5:68:ed:a9:24:42:80:4e:34:56:3a:3c:72:8b:67:
5a:d3:89:45:f0:2a:46:e8:d1:a3:69:6c:9e:36:ac:9c:15:dc:
15:36:13:71:85:a6:fd:4c:2f:68:3a:8f:86:71:7a:6f:b9:d5:
10:47:e8:f4:74:89:a4:b3:75:2f:97:fa:d8:f6:64:f2:bb:bb:
33:c3:1c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:15:34 2024 by rpki-client on console-fra.rpki-client.org