Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/jiptXzF65N_qupUyhQwZjw-jSiI.roa
File: jiptXzF65N_qupUyhQwZjw-jSiI.roa (raw, json)
Hash identifier: facA2IfqSGcS35BcdJChxR5D131ZZ9ZSloJHvLsy3BM=
Subject key identifier: 8E:2A:6D:5F:31:7A:E4:DF:EA:BA:95:32:85:0C:19:8F:0F:A3:4A:22
Certificate issuer: /CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Certificate serial: 018B8F5E7C5538F06CC8C3AE2F607910F46B
Authority key identifier: 7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/jiptXzF65N_qupUyhQwZjw-jSiI.roa
Signing time: Thu 02 Nov 2023 09:30:15 +0000
ROA not before: Thu 02 Nov 2023 09:30:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 45.151.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8f:5e:7c:55:38:f0:6c:c8:c3:ae:2f:60:79:10:f4:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Validity
Not Before: Nov 2 09:30:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e2a6d5f317ae4dfeaba9532850c198f0fa34a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:52:d0:73:ae:bf:b6:2c:1e:77:80:70:ef:1a:
2f:02:0c:51:d3:09:3d:b0:23:b7:a0:28:e7:6d:d3:
e6:ff:03:f8:6e:19:ff:e4:f8:18:3f:70:58:1b:2a:
82:d8:b2:a6:85:f0:a8:5c:af:a4:29:3a:9c:be:80:
39:ae:3f:e8:d9:05:90:55:67:45:a2:30:de:ea:1b:
69:a7:10:d8:b7:1d:8c:2e:b4:b5:29:df:9a:d6:80:
e7:ee:e8:9d:cd:0b:d8:9a:bb:fd:f5:80:06:46:61:
fd:e5:90:ab:23:51:d2:b8:42:fc:91:b1:11:3f:76:
a3:39:9c:f7:98:b9:72:e7:0f:1b:a7:b1:be:ed:80:
c0:76:ec:7c:f0:1f:10:56:8b:a7:49:31:48:9f:ce:
13:6d:0b:3c:3e:dc:33:50:16:11:37:bc:f6:1c:40:
c0:2e:ad:4b:48:eb:4d:8b:f0:3f:47:31:5c:60:34:
da:b7:ce:6c:ca:3d:eb:ae:e9:cb:48:eb:da:ea:e0:
6e:34:28:4c:16:6d:7d:d5:e5:99:f7:8e:7f:62:4a:
69:b6:cf:97:e2:86:d2:70:66:78:d3:26:b0:df:eb:
30:56:5e:b1:7d:05:18:ec:87:eb:82:94:34:8a:fa:
a2:e6:6e:d2:c2:74:08:e1:4f:15:5b:91:ff:33:91:
8b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:2A:6D:5F:31:7A:E4:DF:EA:BA:95:32:85:0C:19:8F:0F:A3:4A:22
X509v3 Authority Key Identifier:
keyid:7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/jiptXzF65N_qupUyhQwZjw-jSiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/f6P5nbqUowe2zS4dkPZ42sBWgfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.140.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:49:2a:80:ec:c8:bc:28:75:dd:bb:8f:03:d8:ad:8e:b7:cd:
9f:fd:eb:21:61:6c:1b:1c:cb:26:23:78:ea:53:5e:0d:de:56:
56:d1:8a:a2:27:d2:46:90:22:fe:61:85:d3:cb:f4:02:f3:1c:
f6:ad:3c:2c:fc:d5:49:cd:0b:ee:88:03:18:4d:a9:37:21:1c:
a5:55:f4:2f:0f:9d:ab:f6:2e:0e:d1:2f:8f:ab:e8:7f:ce:5c:
92:6a:bc:0b:ab:67:37:ec:ed:1c:5e:a0:79:8c:e6:1b:32:d1:
a1:05:0f:15:c9:87:05:36:0f:e6:d2:fb:36:e0:fd:12:a1:e6:
70:35:85:d5:c6:ed:6b:bf:1e:44:cf:f0:c7:ed:64:39:5c:43:
60:4b:94:c8:e9:4d:b2:e1:7a:eb:e3:0d:95:f7:94:e7:25:d6:
25:33:fc:f2:13:33:66:da:91:c0:d2:87:8d:10:64:b0:7f:4c:
b1:d9:62:d3:e0:e6:32:71:3a:68:d9:6c:57:9a:b9:63:86:f1:
49:a8:41:9b:10:b5:eb:cd:ce:18:47:02:df:ae:02:d2:05:f7:
2a:bb:3e:9b:90:07:e8:d1:dc:54:30:bc:08:e5:0e:ea:90:cf:
ac:47:65:26:83:8e:c9:75:1c:80:b9:d9:10:67:b6:0a:d1:d0:
cb:4c:75:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:03 2024 by rpki-client on console-ams.rpki-client.org