Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/oDYE0P6rut4TOSjL52EZMUK4yyU.roa
File: oDYE0P6rut4TOSjL52EZMUK4yyU.roa (raw, json)
Hash identifier: B1WondlyZ0RM+x2fPd5wDaXoVZco0gw6nnhFlreiOJg=
Subject key identifier: A0:36:04:D0:FE:AB:BA:DE:13:39:28:CB:E7:61:19:31:42:B8:CB:25
Certificate issuer: /CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Certificate serial: 0186735024F1B4BA9A158260DF124ABADD19
Authority key identifier: 7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/oDYE0P6rut4TOSjL52EZMUK4yyU.roa
Signing time: Tue 21 Feb 2023 09:31:17 +0000
ROA not before: Tue 21 Feb 2023 09:31:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199797
IP address blocks: 45.151.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:73:50:24:f1:b4:ba:9a:15:82:60:df:12:4a:ba:dd:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Validity
Not Before: Feb 21 09:31:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a03604d0feabbade133928cbe761193142b8cb25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8d:ce:ba:38:6a:2a:b9:96:60:61:c9:0c:53:
a6:d9:1e:e1:fd:04:6e:3b:a1:3c:a7:5b:c5:a7:49:
03:6a:9a:f4:81:ff:42:e4:61:89:d9:74:3d:bd:ed:
e2:b0:b7:58:7a:d7:3e:ba:72:ac:ab:c9:9a:8b:9f:
7d:5b:69:c8:0b:d8:db:76:46:ab:f8:49:7d:4b:1a:
82:0e:e7:e6:9f:e3:ef:17:d2:79:a8:cd:be:7b:a5:
fe:b9:bd:5d:5b:90:f5:f3:d2:f5:0a:6c:5b:e3:67:
6b:17:bb:1c:97:cf:95:30:03:42:09:f6:10:09:41:
51:94:4b:73:5f:e4:a9:64:58:f3:d8:5c:b5:76:23:
bf:87:5e:b1:db:7e:4a:67:69:b9:6d:69:d0:d8:73:
53:7f:19:a1:fc:e5:73:6c:80:65:25:7a:8d:19:74:
25:06:b8:ff:98:ca:76:cc:f8:71:c1:0f:9b:c1:b6:
79:dc:a9:2a:e5:89:11:de:ac:27:99:a0:15:44:ba:
1c:e8:44:1f:43:91:9b:93:cd:83:8c:78:10:dd:36:
5e:f8:9a:a0:6a:8f:29:c8:df:4b:3d:a3:0b:71:79:
4a:4d:d4:7e:3c:26:42:05:22:5b:30:ba:b3:39:35:
cd:64:f8:5e:1d:76:a2:ec:df:dc:73:c7:9a:e1:0f:
4d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:36:04:D0:FE:AB:BA:DE:13:39:28:CB:E7:61:19:31:42:B8:CB:25
X509v3 Authority Key Identifier:
keyid:7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/oDYE0P6rut4TOSjL52EZMUK4yyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/f6P5nbqUowe2zS4dkPZ42sBWgfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.141.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:e9:b0:92:2f:eb:6c:f6:9f:52:df:64:f6:c4:52:b9:a5:4f:
7c:18:5f:71:0a:11:82:58:f6:51:52:68:08:c0:25:17:85:b9:
c9:72:6b:83:c6:4c:80:59:96:f6:9c:cc:c9:bc:6b:0c:63:a0:
18:02:26:12:d1:aa:22:64:f7:bc:4b:a3:1e:e9:1b:db:da:3e:
41:7c:19:83:14:f5:1b:fe:43:06:71:8c:7e:8f:36:5f:19:2b:
93:f6:94:02:fa:4c:e5:5e:cb:e2:11:48:10:4d:22:16:77:8e:
0c:32:51:c0:1c:a7:1f:e5:64:8e:8d:1d:a1:3b:ec:2e:93:6a:
87:68:1b:ef:b6:f0:44:be:33:93:bd:67:2d:1f:71:d9:63:50:
46:d4:79:79:b1:75:60:5e:55:d9:2b:3c:0b:b6:03:93:10:74:
68:6e:ec:9e:6e:38:32:77:70:e4:fd:1b:fe:31:58:2a:0e:d8:
4d:5e:d1:d8:69:fb:a4:ac:36:98:31:e4:ac:8d:7c:58:c5:c3:
d3:6b:01:a5:73:99:68:e3:52:50:8e:3d:91:ae:01:02:0f:f7:
9f:3a:66:a3:7c:d4:a9:24:be:29:fc:13:b4:75:2a:02:e2:cf:
b0:68:b9:9b:79:d6:25:c8:3f:c3:8f:20:96:d2:62:ec:a4:fb:
e3:29:2e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:21 2024 by rpki-client on console-fra.rpki-client.org