Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/t4nk54YxTN-EQ7ql9GisRuaFfyU.roa
File: t4nk54YxTN-EQ7ql9GisRuaFfyU.roa (raw, json)
Hash identifier: K0EV8I8q/VGgwPci6avueVG9hE7XC1XxXnN84ruLQsQ=
Subject key identifier: B7:89:E4:E7:86:31:4C:DF:84:43:BA:A5:F4:68:AC:46:E6:85:7F:25
Certificate issuer: /CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Certificate serial: 0188D88D15FA7F408BD1DCD3AF3F54DD8D8F
Authority key identifier: 7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/t4nk54YxTN-EQ7ql9GisRuaFfyU.roa
Signing time: Tue 20 Jun 2023 11:25:04 +0000
ROA not before: Tue 20 Jun 2023 11:25:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397563
IP address blocks: 45.151.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Aug 2023 07:28:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d8:8d:15:fa:7f:40:8b:d1:dc:d3:af:3f:54:dd:8d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Validity
Not Before: Jun 20 11:25:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b789e4e786314cdf8443baa5f468ac46e6857f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5c:6b:d1:38:1d:f0:49:0d:c7:fe:8a:3e:49:
a1:38:2f:15:f6:41:08:34:3f:fe:2d:bc:f0:71:04:
0e:e0:59:ae:c1:d6:70:f3:d3:53:e9:89:95:1e:0c:
cd:32:26:ae:80:9b:e8:b5:d9:c8:73:7b:fd:11:5b:
f8:f1:f3:a1:24:38:13:db:01:bd:da:3a:38:4f:ce:
3b:0c:7b:bd:65:c5:d4:22:81:c8:a1:ec:d2:67:14:
f4:58:11:0d:e1:ab:e0:41:cd:b4:83:d2:9d:e4:b6:
d9:5b:c7:01:84:0b:2e:42:4a:29:ec:15:bd:64:cb:
b8:ca:1a:1e:ce:7d:fe:7a:d5:6b:d2:74:17:d6:ab:
c0:99:f6:b2:ac:18:82:d7:09:55:bf:a4:2a:4a:d9:
8e:6e:38:13:bb:ff:b2:5b:1f:00:e7:c1:15:0f:90:
4d:2e:39:d2:cb:19:9d:9d:4d:f9:95:3e:3f:63:4d:
53:96:ce:d1:9b:fb:ec:6b:36:75:dd:8e:e8:fd:71:
30:5b:03:8d:d1:57:c6:bd:ad:a9:f1:62:91:7f:61:
f5:9c:ef:ab:97:56:0f:18:f3:5c:84:1b:6e:37:24:
1c:00:be:12:89:4f:91:fc:b9:75:c2:82:13:75:4b:
8e:66:e0:70:b9:bc:5f:43:05:af:21:71:f6:1e:11:
a2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:89:E4:E7:86:31:4C:DF:84:43:BA:A5:F4:68:AC:46:E6:85:7F:25
X509v3 Authority Key Identifier:
keyid:7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/t4nk54YxTN-EQ7ql9GisRuaFfyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/f6P5nbqUowe2zS4dkPZ42sBWgfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.142.0/24
Signature Algorithm: sha256WithRSAEncryption
38:9e:11:c5:92:cf:1f:5e:c3:29:14:f1:d8:39:f2:9a:ae:17:
6e:64:42:91:63:b7:c4:55:c1:0b:94:4f:01:67:fd:47:7b:51:
cc:e7:45:76:66:d2:96:c6:cd:58:55:f6:c2:e1:ad:6e:e6:73:
4b:b2:3f:06:39:c0:52:d5:3a:90:92:5c:ad:9e:2f:67:66:28:
79:97:32:50:8d:22:83:d7:4a:c1:a9:84:c1:c2:20:1f:4e:34:
2c:d8:97:5e:6b:fa:dc:1f:9f:86:62:52:e6:63:94:23:7d:33:
9d:31:fb:64:37:99:6e:5c:20:75:56:a1:92:a4:2e:e0:45:8b:
be:c1:ab:b6:66:b5:d0:be:8a:d5:8e:21:75:6d:7e:c8:9d:92:
40:0b:a5:0f:45:93:29:d1:d2:72:33:6e:5f:f0:21:4f:a2:08:
33:a3:0b:5d:cf:0c:2d:78:ff:39:66:37:4c:24:cd:3f:5b:42:
b9:4c:19:6a:d4:ff:51:6f:1b:42:dd:88:23:3e:33:ce:0f:18:
e0:48:c8:08:0e:fe:f6:a6:82:04:c2:26:71:26:d2:c9:9e:2b:
a4:eb:b1:84:d0:31:70:ad:d2:eb:44:27:70:91:52:93:19:82:
59:0b:36:5a:64:42:4e:39:92:0b:35:22:fe:be:c2:7f:0b:cb:
ad:45:86:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:21 2024 by rpki-client on console-fra.rpki-client.org