Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/p_84FeJPoTHvFkk28fx0SUb7zfY.roa
File: p_84FeJPoTHvFkk28fx0SUb7zfY.roa (raw, json)
Hash identifier: 7Dm9PE9eoQybkMhW7JUd8UzGF3DV1MvFVknzVWQPgVk=
Subject key identifier: A7:FF:38:15:E2:4F:A1:31:EF:16:49:36:F1:FC:74:49:46:FB:CD:F6
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018C3F2ABD9135131391222201AB9188AF6D
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/p_84FeJPoTHvFkk28fx0SUb7zfY.roa
Signing time: Wed 06 Dec 2023 12:46:54 +0000
ROA not before: Wed 06 Dec 2023 12:46:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212685
IP address blocks: 45.137.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3f:2a:bd:91:35:13:13:91:22:22:01:ab:91:88:af:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Dec 6 12:46:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7ff3815e24fa131ef164936f1fc744946fbcdf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f9:57:1e:e8:0d:b9:fb:e8:85:92:c0:35:c9:
a8:60:4f:0b:8a:60:1d:22:39:32:4d:5e:c5:a5:e8:
5f:28:52:01:b8:0d:9e:c7:75:29:56:57:e1:09:35:
bd:13:27:97:ec:8d:2a:e0:7c:f8:cd:b4:c1:4b:94:
b0:3b:4d:f6:73:0b:ac:ed:57:fc:b6:40:31:14:77:
7a:fa:0e:ac:63:88:73:1f:29:5e:dd:d6:70:ed:07:
50:9b:8a:b1:b5:52:b0:cc:a7:38:ae:92:8a:7e:86:
f8:4e:49:ac:3e:0f:c2:fc:90:fe:13:83:82:23:8b:
41:13:94:2b:81:15:fd:54:78:b8:8f:d2:8e:64:82:
d9:d7:ab:99:7d:55:f9:e3:a5:3e:3b:01:be:e2:33:
0e:92:8e:c9:57:0f:71:4d:58:f9:b3:c2:0f:e9:5f:
9a:d9:b7:6e:e6:d6:84:bb:e7:58:47:4a:74:c2:66:
60:3a:82:28:e0:86:ba:bf:e3:54:6a:59:a6:cb:ed:
bd:3e:8f:09:ed:e5:65:d7:70:c3:72:ec:86:86:11:
66:e3:78:4a:15:de:3f:73:9d:c7:8a:fa:49:53:7c:
f5:19:eb:09:14:7d:23:a2:02:7d:55:71:97:bd:d5:
e7:f2:66:aa:8e:a3:37:ae:a4:86:5b:dc:74:c7:ab:
c6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FF:38:15:E2:4F:A1:31:EF:16:49:36:F1:FC:74:49:46:FB:CD:F6
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/p_84FeJPoTHvFkk28fx0SUb7zfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.68.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:15:c2:27:6a:0f:ef:73:57:ea:af:39:86:75:76:ca:7f:6e:
36:2c:ad:4a:fd:d1:ae:6d:f9:34:cc:33:50:82:d8:5c:c0:17:
e2:f7:b5:7c:bc:e7:ec:b1:17:b4:12:5a:d6:20:76:bc:0c:63:
3f:60:f0:08:c1:13:1b:55:58:7b:0b:47:3c:32:e8:42:0b:71:
5f:dc:a4:cc:bf:1f:69:ed:d0:c7:10:5d:09:51:3f:27:79:35:
7e:4e:a4:7a:b2:af:01:f0:40:12:9b:18:dd:a3:c3:e0:7d:ea:
aa:f4:60:64:3e:de:bf:69:08:fc:b3:e8:19:ed:ec:c4:27:05:
83:71:fa:8f:52:44:a3:97:ab:c7:24:82:48:6a:d7:90:95:00:
36:f5:15:5a:54:ab:54:d3:e9:c3:2f:74:31:86:06:2f:a9:20:
64:8e:be:c1:8f:31:08:5d:49:4d:2b:7f:e2:af:8e:9a:6c:27:
1f:3c:c2:38:7b:02:62:8f:4f:d6:23:e5:1e:88:9f:6d:ce:f1:
c6:ec:32:da:f4:df:05:59:c5:63:e1:f1:ce:f3:98:93:7d:28:
4a:30:79:62:16:9f:14:04:57:c1:58:7d:ce:e7:d7:79:e9:8f:
ab:4f:f3:68:d4:55:be:cf:fa:fd:7e:30:af:5d:74:cc:97:f0:
8d:ec:a9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:13 2024 by rpki-client on console-ams.rpki-client.org