Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/7jtH3Po48BRsgGRPtCGL7HzLE7U.roa
File: 7jtH3Po48BRsgGRPtCGL7HzLE7U.roa (raw, json)
Hash identifier: QrglwPOoFtgf2Y2yWsutFitYwhtETNhtX/6n/xnTR48=
Subject key identifier: EE:3B:47:DC:FA:38:F0:14:6C:80:64:4F:B4:21:8B:EC:7C:CB:13:B5
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018C59690EE7BE97898A70710816A515BF0E
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/7jtH3Po48BRsgGRPtCGL7HzLE7U.roa
Signing time: Mon 11 Dec 2023 15:05:06 +0000
ROA not before: Mon 11 Dec 2023 15:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205733
IP address blocks: 45.81.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:59:69:0e:e7:be:97:89:8a:70:71:08:16:a5:15:bf:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Dec 11 15:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee3b47dcfa38f0146c80644fb4218bec7ccb13b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:eb:40:af:1c:7a:b0:dd:95:62:6a:8b:54:d4:
a1:6e:a6:09:57:af:d6:f5:f7:ef:83:1c:71:70:4f:
76:19:aa:96:d8:a1:ac:f0:e2:ec:24:5d:c5:7e:33:
30:d3:44:37:ec:1d:f2:ac:92:94:b0:af:ac:9c:ea:
57:1d:7d:07:09:f1:84:03:65:7c:63:d9:13:20:c9:
a6:64:c7:44:8a:ea:22:a0:34:22:09:e2:a4:e9:18:
54:53:c1:40:fb:c7:8f:19:56:74:fe:ca:d8:80:6b:
dd:ed:22:6b:fc:84:91:cb:89:ed:ca:d1:4e:29:3c:
b3:01:9e:e0:ae:d2:99:4f:7f:a4:7a:da:4c:50:3b:
11:cd:52:df:d1:b8:68:69:30:65:8b:71:8d:59:51:
ea:99:a0:35:37:9b:ee:29:2e:90:68:33:38:72:ac:
c4:3b:39:fe:0c:ed:bd:88:ee:02:02:9b:2e:78:53:
77:2f:0a:29:03:87:ea:ae:cf:17:2c:53:60:d8:df:
b0:55:67:46:cf:de:b1:cc:0f:b4:2c:31:22:05:1e:
6a:6f:f7:c3:8a:9f:31:ef:76:19:08:fe:03:34:05:
60:2a:e7:3e:51:d4:95:24:16:13:6d:81:a6:4d:d7:
e6:d0:0c:f1:26:7d:ad:f7:a3:77:a4:d9:85:4d:34:
3a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3B:47:DC:FA:38:F0:14:6C:80:64:4F:B4:21:8B:EC:7C:CB:13:B5
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/7jtH3Po48BRsgGRPtCGL7HzLE7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.115.0/24
Signature Algorithm: sha256WithRSAEncryption
21:61:ef:76:55:f9:fd:a4:79:9c:47:6b:0d:4d:ae:b5:83:ae:
f9:91:36:e5:aa:a7:b7:df:c1:3f:2f:0b:5f:bb:cc:ec:2b:87:
36:1a:16:a6:8f:9b:20:b6:d0:9a:b3:f6:54:15:39:8c:5a:75:
d6:8e:02:21:5c:b7:cb:f9:d2:3c:df:c7:5a:7d:cc:f0:cd:02:
a0:ff:45:fa:e2:4d:3d:b1:56:58:a5:a5:f2:de:95:0a:ab:5c:
74:92:59:f6:85:fb:b4:0a:32:d4:7b:68:bd:8f:7b:3f:10:e3:
79:52:78:f7:0e:b3:c0:62:cd:58:3f:f7:bd:1e:90:8c:a1:b2:
25:e7:64:39:11:1a:d7:34:f0:be:a8:fe:b2:8e:df:bb:46:42:
a9:e4:49:6c:63:86:93:f1:dc:2b:b9:f1:70:ba:44:3a:dc:ec:
7d:6f:b5:fe:15:5c:97:a1:71:a8:e6:14:ae:8e:da:5d:c5:ea:
d1:0c:62:21:89:76:88:4e:2f:7b:b5:2c:c6:a9:6e:12:53:02:
08:85:18:b2:cb:e3:1f:36:4a:65:89:2c:fd:be:56:d6:35:7c:
8d:86:94:bd:86:38:84:c4:ea:4f:fc:b1:60:f6:77:78:95:16:
8b:2b:e6:3a:f8:88:04:66:69:1c:61:55:6d:82:31:e0:9e:cb:
09:5e:c7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 13 08:57:32 2023 by rpki-client on console-fra.rpki-client.org