Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/safDiLpk9pAtcOn1fZ2SgNt0oZE.roa
File: safDiLpk9pAtcOn1fZ2SgNt0oZE.roa (raw, json)
Hash identifier: YsT/83bemgZo1XaEH3MbEhFBVz9VYH5ZeaiMmgR62HE=
Subject key identifier: B1:A7:C3:88:BA:64:F6:90:2D:70:E9:F5:7D:9D:92:80:DB:74:A1:91
Certificate issuer: /CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Certificate serial: 01864B34DC37B56A83B2600A5FE1D667ECA7
Authority key identifier: 7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/safDiLpk9pAtcOn1fZ2SgNt0oZE.roa
Signing time: Mon 13 Feb 2023 14:36:40 +0000
ROA not before: Mon 13 Feb 2023 14:36:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 45.151.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4b:34:dc:37:b5:6a:83:b2:60:0a:5f:e1:d6:67:ec:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Validity
Not Before: Feb 13 14:36:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1a7c388ba64f6902d70e9f57d9d9280db74a191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7c:ae:5a:d1:00:a1:e4:28:1e:49:ea:db:cf:
c5:43:49:9d:08:28:bb:7a:07:e8:bb:07:7d:29:1d:
b4:2c:1e:1f:c6:ae:60:b3:33:65:39:c4:8b:e2:b8:
fa:1f:35:44:a3:d4:4b:c9:4b:6a:6a:b8:eb:0a:f6:
9b:27:0e:1c:18:05:6e:d8:c2:92:73:b8:9e:77:55:
40:2a:0c:46:1a:de:c0:a2:41:ee:3c:7e:8b:48:49:
c3:ad:51:dc:3a:e8:71:2a:e1:bd:ab:a2:a2:4d:d6:
7a:fa:90:ff:c7:90:f8:0c:65:6e:ec:dd:1f:ac:08:
1a:10:de:97:8d:cb:de:dd:4b:53:1d:3c:78:54:d7:
55:dc:0a:5c:5d:39:9a:b6:85:ea:17:1a:4b:98:99:
05:c0:7f:13:b7:2a:52:19:cc:23:a9:75:0e:ee:6e:
9d:d7:52:6e:1a:f0:35:7b:d6:0d:6d:23:99:df:84:
d4:1a:42:b8:a5:91:d4:7a:07:c2:cb:90:9c:89:f4:
b2:91:46:e6:ea:fa:92:39:01:80:3b:3b:ff:2b:16:
b4:8b:8e:45:98:c6:24:bd:4d:54:5f:72:29:1f:45:
2d:ed:8d:17:35:1d:50:91:a0:26:4a:a3:d3:10:f1:
b6:f9:3e:ac:f2:bc:37:46:1f:ae:cd:7f:97:1d:06:
21:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A7:C3:88:BA:64:F6:90:2D:70:E9:F5:7D:9D:92:80:DB:74:A1:91
X509v3 Authority Key Identifier:
keyid:7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/safDiLpk9pAtcOn1fZ2SgNt0oZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/f6P5nbqUowe2zS4dkPZ42sBWgfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.143.0/24
Signature Algorithm: sha256WithRSAEncryption
31:4e:7d:9e:60:76:9f:dd:5b:0a:c3:b7:86:d4:48:76:b6:e5:
01:f6:a3:3a:29:53:b9:82:08:3d:14:09:56:67:e0:9a:65:28:
1d:5e:9d:f1:de:d1:a5:b9:81:39:7a:30:85:1e:e5:01:b4:2b:
f1:5b:19:dd:d5:a3:1a:c8:09:e5:ee:5c:ca:8d:17:57:29:0c:
a1:08:ce:f0:79:c3:e2:65:87:ed:9a:a4:aa:50:84:b7:bc:2b:
ce:ca:5e:42:28:ab:23:0e:d2:02:28:f9:b0:4a:a2:9a:45:58:
5d:f5:a2:4b:81:be:da:9b:32:88:ba:57:22:d4:bc:bb:0d:1e:
92:20:d0:ab:53:70:ae:2c:e3:f0:0c:9e:dd:ff:3f:2b:2a:73:
93:77:9b:59:50:93:be:d5:8c:d1:61:a8:c8:f1:4d:96:c0:11:
42:4d:8c:e5:f1:76:b0:d5:f5:fb:2d:84:ca:24:c3:42:d9:3a:
3e:94:39:70:a4:88:a1:f7:f0:23:2c:15:d7:64:4d:26:a5:5c:
1e:e2:0c:5f:79:83:d2:8e:8c:95:d3:09:3d:52:3c:57:25:58:
b6:50:19:55:49:fa:38:03:67:b6:60:b7:26:25:f0:d2:20:d0:
ff:40:bb:e2:f9:74:33:d8:89:9b:59:fe:69:b8:5f:02:4a:f1:
a4:a5:4b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:03 2024 by rpki-client on console-ams.rpki-client.org