Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/y-5A5Qv0Kn4A7sOvidMaZAE5H_g.roa
File: y-5A5Qv0Kn4A7sOvidMaZAE5H_g.roa (raw, json)
Hash identifier: 5O5ZCv1NOCdCzJKRjZuymIKt7osoHVmm2N0yFtZ5SYo=
Subject key identifier: CB:EE:40:E5:0B:F4:2A:7E:00:EE:C3:AF:89:D3:1A:64:01:39:1F:F8
Certificate issuer: /CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Certificate serial: 018A945EB83733F28372459D188B6D4226EC
Authority key identifier: 7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/y-5A5Qv0Kn4A7sOvidMaZAE5H_g.roa
Signing time: Thu 14 Sep 2023 15:45:50 +0000
ROA not before: Thu 14 Sep 2023 15:45:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.151.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Sep 2023 20:37:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:94:5e:b8:37:33:f2:83:72:45:9d:18:8b:6d:42:26:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Validity
Not Before: Sep 14 15:45:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cbee40e50bf42a7e00eec3af89d31a6401391ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b9:54:a9:5f:2a:74:58:8f:78:63:65:e2:cf:
4a:69:75:33:d9:02:f9:26:2f:9f:91:93:19:f0:32:
81:45:5e:d9:d0:50:5c:5d:33:3f:45:de:f5:28:90:
ea:44:56:00:67:3e:70:4a:c2:1e:bc:5e:30:da:65:
f2:59:ea:bd:0a:8d:e5:2c:d7:3f:44:42:f4:08:81:
c6:11:19:db:88:79:3b:d7:6f:ca:1e:2d:49:3b:cf:
be:a5:27:3c:da:27:f4:35:4a:cf:ac:91:89:2d:6e:
9b:ed:09:f5:a5:ce:75:10:77:b1:f7:49:d0:1d:40:
0c:16:75:0b:b1:c1:dd:af:6e:a8:c9:0a:f6:da:00:
d7:74:ff:30:c5:bc:40:83:3d:86:f2:e2:d8:57:1e:
a6:87:3b:7d:c1:63:22:ed:1a:e2:f8:e8:d5:c2:00:
ef:a8:7b:1a:6d:6d:b0:ae:5e:02:0e:5d:bd:bf:e3:
18:65:69:b0:da:37:c7:be:81:f2:cc:fc:ba:e1:98:
d6:18:85:cb:e0:a9:65:48:ef:73:88:68:92:87:c6:
5b:22:b9:06:80:f6:14:97:f3:00:62:9f:55:7c:93:
61:00:45:41:74:18:f9:d7:c1:09:c8:bc:f1:d1:39:
a5:95:a9:9e:72:e0:6d:f8:b1:97:eb:33:dc:98:f5:
6d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EE:40:E5:0B:F4:2A:7E:00:EE:C3:AF:89:D3:1A:64:01:39:1F:F8
X509v3 Authority Key Identifier:
keyid:7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/y-5A5Qv0Kn4A7sOvidMaZAE5H_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/f6P5nbqUowe2zS4dkPZ42sBWgfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.142.0/24
Signature Algorithm: sha256WithRSAEncryption
02:ca:3f:5e:ff:fb:0c:03:69:0a:73:f9:fc:33:d5:32:c1:1c:
00:08:33:4d:d9:30:14:8f:82:4a:9b:c0:c2:c7:66:fb:cc:b6:
69:c4:f9:10:c8:fd:6c:c6:89:bb:20:b2:05:d5:9f:df:dc:b6:
1a:5f:19:4f:83:c0:c0:41:06:e6:d9:fa:ef:d8:7f:cf:c3:96:
e9:16:46:47:a6:10:a3:8b:69:7a:16:30:a3:e2:e0:4b:a1:3e:
80:85:28:39:fb:c7:e3:4b:8c:94:2f:be:7a:e6:84:7e:1d:75:
4c:4b:d2:5c:1f:a2:98:59:51:a9:16:9e:92:37:d0:3a:ff:f9:
36:50:25:7c:5b:e5:ef:4a:79:dd:42:9f:f7:90:dd:99:64:e1:
9e:4e:be:15:fe:9f:9d:e6:34:43:c5:96:d2:a4:22:cd:62:8b:
b3:af:a5:55:b5:78:65:b2:13:b8:80:72:90:e5:c1:3b:9e:49:
56:e7:05:27:d1:fa:cb:44:8b:76:ee:19:9a:e9:d8:8b:b6:56:
b3:f2:3a:ad:fd:bb:91:02:ab:29:6e:90:67:c3:e2:ea:6e:96:
9e:ab:5a:0f:b9:92:c3:8a:5b:7b:44:eb:5f:ca:e9:93:5e:c1:
f7:98:73:79:19:ff:9b:75:fa:e5:35:fc:9f:24:b8:e3:01:42:
4d:06:25:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:21 2024 by rpki-client on console-fra.rpki-client.org