Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/sBCUSZVkVWQGvXZV3VoZ3zhuH7o.roa
File: sBCUSZVkVWQGvXZV3VoZ3zhuH7o.roa (raw, json)
Hash identifier: k1VWpmSvf7+nWTP97cGz3SC1Pfip+MsQGilHeN2OoTk=
Subject key identifier: B0:10:94:49:95:64:55:64:06:BD:76:55:DD:5A:19:DF:38:6E:1F:BA
Certificate issuer: /CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Certificate serial: 018B002FF2AE43A463C31F6FB1CD7CC22757
Authority key identifier: 7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/sBCUSZVkVWQGvXZV3VoZ3zhuH7o.roa
Signing time: Thu 05 Oct 2023 14:13:44 +0000
ROA not before: Thu 05 Oct 2023 14:13:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211936
IP address blocks: 45.151.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:00:2f:f2:ae:43:a4:63:c3:1f:6f:b1:cd:7c:c2:27:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Validity
Not Before: Oct 5 14:13:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b01094499564556406bd7655dd5a19df386e1fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:98:0b:e0:a9:0d:8f:c3:f7:80:35:99:ad:bb:
63:01:68:53:fa:bd:e8:06:3c:e4:ea:7d:b9:68:c3:
d7:58:d6:67:b0:7b:a4:be:f3:71:f1:58:f3:44:cc:
e6:dd:70:8e:40:b3:50:74:ee:02:a6:6a:44:17:40:
b9:a2:12:11:b3:0d:71:72:d5:d4:be:4b:56:72:69:
5e:8d:64:e7:e3:21:81:af:bb:2e:0a:f6:4a:f7:28:
80:bd:ac:c8:2c:c4:d5:e1:f9:a2:7b:f9:85:d8:e3:
d8:ec:aa:e6:91:e9:d8:42:ae:04:91:f8:34:dd:ee:
2d:13:c1:45:b0:06:94:53:8c:84:93:53:09:31:34:
11:f1:a0:d2:31:87:50:88:c6:b8:4f:be:99:60:f0:
0c:6c:a8:c1:b6:85:e3:27:0f:8d:3c:a0:ec:4d:09:
eb:6d:58:35:e1:8d:fc:c0:00:25:44:0a:fb:a7:ba:
2a:cc:b6:3e:36:16:9d:7b:d2:03:5f:b5:58:ab:d0:
c0:ec:f6:01:1c:8a:e8:66:e5:3b:4c:a0:1e:c0:61:
80:17:2a:e0:e5:40:87:3f:e3:84:4d:cb:cc:4a:df:
ad:c1:27:2e:f3:00:a6:6e:48:64:33:82:39:09:92:
6d:e9:23:61:d6:a1:2c:38:60:71:5b:88:c8:12:f2:
b1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:10:94:49:95:64:55:64:06:BD:76:55:DD:5A:19:DF:38:6E:1F:BA
X509v3 Authority Key Identifier:
keyid:7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/sBCUSZVkVWQGvXZV3VoZ3zhuH7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/f6P5nbqUowe2zS4dkPZ42sBWgfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.142.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:53:27:cf:7d:18:59:23:80:b6:56:33:5b:6a:a2:11:5c:aa:
e2:d2:11:31:89:f9:d6:6f:bb:51:4b:d6:13:fb:26:c3:b6:42:
25:06:98:98:5e:ea:aa:5d:fd:5f:ff:3f:ec:74:da:49:a0:75:
7c:41:42:57:0d:a2:64:aa:f4:1a:f9:7d:d2:6d:c3:4f:21:05:
8e:8e:ff:03:0e:5f:31:8a:56:77:5d:9d:fd:06:c8:5a:bf:65:
71:73:f0:e4:ca:61:8f:90:5e:e9:30:9f:be:a9:d7:5e:11:81:
4d:a2:9c:bc:b5:82:e0:b0:bf:c8:7d:57:95:0f:20:9a:42:7f:
4f:2e:91:ec:37:a9:20:5d:17:44:75:ab:83:f4:fe:53:45:32:
42:b7:12:0b:3b:ec:88:35:83:92:10:e7:9f:2e:62:43:0b:bd:
6c:e8:f1:94:02:bb:03:84:64:c0:42:53:8c:2f:76:b9:fe:ba:
2a:31:88:9e:f1:3c:c7:8e:b1:a9:84:54:54:cf:7d:48:98:a9:
79:a8:3f:b5:be:f4:ad:21:ec:71:1d:77:7a:c3:b6:4a:c5:52:
b1:d7:6b:b6:66:95:94:dc:7c:0a:6d:06:5a:bf:0e:58:ac:ca:
f9:9d:16:2a:2d:39:3a:38:bc:55:07:6f:25:d3:b9:00:6a:ce:
d0:8f:b4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:03 2024 by rpki-client on console-ams.rpki-client.org