Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/KkpipRhUXO4H05ijVKt45xFOV3w.roa
File: KkpipRhUXO4H05ijVKt45xFOV3w.roa (raw, json)
Hash identifier: 0QFDcVp9J6ByAY6RL+NIcxUDfSItui78z2CqxfalVsQ=
Subject key identifier: 2A:4A:62:A5:18:54:5C:EE:07:D3:98:A3:54:AB:78:E7:11:4E:57:7C
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01856CE62A64981C12A24EA99F9AEECD026E
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/KkpipRhUXO4H05ijVKt45xFOV3w.roa
Signing time: Sun 01 Jan 2023 10:35:01 +0000
ROA not before: Sun 01 Jan 2023 10:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213143
IP address blocks: 45.84.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Jan 2023 11:16:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:2a:64:98:1c:12:a2:4e:a9:9f:9a:ee:cd:02:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 1 10:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a4a62a518545cee07d398a354ab78e7114e577c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4c:6f:a7:b2:a6:92:c5:59:06:5a:8c:6d:e0:
bf:84:fe:29:8a:65:09:a9:f2:13:42:d3:37:98:a8:
99:5d:d6:b7:9b:94:3f:4b:3d:4b:45:f0:b8:9c:b9:
ca:0e:19:5d:11:77:86:9f:9d:14:50:42:71:96:2f:
8e:74:0d:83:1d:63:9d:7c:0b:fc:a1:b1:bc:23:dc:
de:29:19:eb:bf:9c:f8:6e:c5:e4:6d:ee:2d:bb:1c:
21:62:f0:ed:c3:9a:bc:a7:6c:fb:9f:6a:78:9a:7e:
1f:c7:bc:ef:5e:13:0f:f4:b5:41:67:63:7d:a9:76:
60:fd:3c:20:34:b2:24:b8:44:02:e1:9d:8e:b0:cf:
06:64:9f:68:87:aa:a9:a7:9c:7b:ca:ea:cd:d1:76:
e0:0d:c0:33:d5:f6:46:29:d9:3e:11:e2:23:d7:c1:
a3:6d:d3:b4:14:28:90:00:30:04:a3:9b:12:87:b6:
0a:10:b4:19:fc:ae:c6:3a:1a:7c:20:da:3a:f8:3a:
eb:f2:8a:f3:50:4b:8c:c3:02:23:c5:8e:14:79:d1:
2e:13:89:48:1f:d8:03:b8:a4:14:b8:27:1a:17:7b:
cc:d4:45:cd:80:1c:81:8a:7f:e3:76:0e:e6:41:11:
3c:24:d7:2b:f4:48:0e:b2:5c:08:34:58:f6:b1:09:
8c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4A:62:A5:18:54:5C:EE:07:D3:98:A3:54:AB:78:E7:11:4E:57:7C
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/KkpipRhUXO4H05ijVKt45xFOV3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.196.0/24
Signature Algorithm: sha256WithRSAEncryption
19:a9:54:d7:d9:cf:eb:e7:6e:4f:eb:0a:48:cc:aa:d0:05:85:
c2:76:c1:19:23:97:b9:f1:0c:ad:cf:1d:9a:98:4f:74:17:16:
28:43:14:80:ab:e9:ce:83:68:19:60:47:21:f6:22:29:1a:27:
b2:73:4d:48:9b:d6:e6:c5:8c:c7:c9:e3:87:de:57:49:6a:3c:
52:33:e9:3f:41:fe:af:f9:0c:8d:91:9e:53:2e:03:5d:58:e0:
50:26:2b:a9:3d:a9:f0:b1:4d:32:15:db:12:6b:84:a1:eb:7e:
f4:e8:63:cd:f1:27:37:d0:32:c9:25:6b:ce:e5:9d:a1:57:af:
56:ec:9a:17:18:b2:aa:50:08:77:63:6a:f3:e8:b5:db:73:6e:
1b:5f:1a:5b:bb:14:89:40:c0:5e:12:f8:a4:80:f6:91:ab:06:
ea:36:da:d0:28:f1:1a:d5:b5:df:5e:c0:2a:dc:66:25:f8:d1:
8c:84:1c:2f:38:21:13:92:cf:ae:c9:15:6e:81:95:83:71:31:
b9:55:ad:6a:50:cc:c5:d7:f4:e7:92:5f:c8:42:45:86:d8:19:
eb:9a:f4:38:3a:7a:c9:3d:37:c9:29:29:c7:42:a8:26:50:32:
7d:e2:c7:7c:da:79:a8:e6:c7:24:03:c1:fb:8a:07:f5:72:d4:
67:9c:c8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:13 2024 by rpki-client on console-ams.rpki-client.org