Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/TYQUrLTq1VYQqTSItcqJxq2ruV8.roa
File: TYQUrLTq1VYQqTSItcqJxq2ruV8.roa (raw, json)
Hash identifier: BZrhQqGeT5qap0gTtPUF6tkoB6MJ7G2FjapmP+lf0CI=
Subject key identifier: 4D:84:14:AC:B4:EA:D5:56:10:A9:34:88:B5:CA:89:C6:AD:AB:B9:5F
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018DC34A96D01118B388C32EA6FDBBB4E74F
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/TYQUrLTq1VYQqTSItcqJxq2ruV8.roa
Signing time: Mon 19 Feb 2024 21:34:21 +0000
ROA not before: Mon 19 Feb 2024 21:34:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.144.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 15:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c3:4a:96:d0:11:18:b3:88:c3:2e:a6:fd:bb:b4:e7:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Feb 19 21:34:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d8414acb4ead55610a93488b5ca89c6adabb95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f0:14:95:4c:f8:12:58:c3:11:70:03:33:67:
04:2f:0b:17:b9:c6:7f:da:02:9f:7f:5c:d0:6d:9f:
41:aa:fa:5f:d7:f4:eb:4f:44:30:c4:f7:93:fe:77:
a7:cb:8a:64:90:09:ce:28:52:65:4a:88:68:7f:1a:
f9:04:74:8c:b6:cc:55:6a:13:8e:de:60:64:11:ed:
1f:64:5c:c7:47:e1:4f:7b:b5:f3:12:52:61:dd:cc:
00:45:ab:e5:36:54:d3:9a:e7:30:4f:dc:d6:70:df:
a9:6e:62:b1:f7:de:5d:02:25:d0:7e:f9:e5:03:4f:
4b:7f:f1:d8:33:25:e0:88:66:f5:2a:be:93:41:5b:
0b:39:3a:ef:c9:fc:38:7f:91:47:ae:9a:0b:58:06:
6e:d9:4e:39:48:a6:eb:d5:5f:58:cf:0f:75:f9:a9:
e0:ce:27:6a:f3:72:71:f2:42:ce:d3:0b:b8:e5:a1:
07:0d:cc:a1:4e:50:7c:00:ab:1a:17:d7:e2:00:94:
69:1b:c0:39:46:b4:3e:63:b4:1e:e0:0f:d9:b6:24:
0d:a0:fe:7f:91:e2:f0:e7:44:f6:42:a7:aa:58:62:
19:cb:dd:7a:a3:15:94:76:a3:07:cb:10:f0:be:53:
dd:22:dc:bb:4f:5b:dd:ae:2c:fb:8f:56:d6:f3:bb:
a7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:84:14:AC:B4:EA:D5:56:10:A9:34:88:B5:CA:89:C6:AD:AB:B9:5F
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/TYQUrLTq1VYQqTSItcqJxq2ruV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.215.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:23:76:12:82:af:c3:ab:71:c3:e4:3f:bc:9b:d3:94:16:5d:
b3:c6:eb:b9:d1:6c:c1:8b:a1:87:f2:3a:18:61:b6:f3:67:db:
82:fd:cd:f4:50:4a:a9:e4:d8:c4:fe:db:05:86:1d:8e:9a:6d:
ac:89:b8:2e:1b:3f:d6:38:2e:1b:31:10:09:09:bd:1b:03:35:
cc:c7:3e:b0:4d:be:45:0f:65:e7:8a:1d:90:a4:76:1c:9f:f2:
41:60:bf:cc:67:ce:01:6b:20:6a:4f:7b:ec:4e:05:2b:40:68:
dd:38:63:da:55:2a:79:f2:c5:0f:bf:23:c5:a5:22:d5:1c:b7:
4a:96:cc:51:4e:0b:94:fc:58:18:ec:94:e7:38:40:81:dc:99:
36:9f:a2:67:ee:a8:53:99:6f:e8:4a:c8:c0:0e:a0:15:b9:66:
91:7d:f2:fc:7a:4a:4f:47:7d:13:44:52:8f:74:ce:f9:66:7a:
46:43:53:2e:80:b9:2c:29:3a:7f:1d:ba:50:ba:03:68:63:b7:
79:56:e9:f2:99:4b:e8:0e:77:f4:d5:d7:71:ad:2f:86:53:8a:
45:c6:42:93:32:5b:bc:d1:69:89:31:9f:8a:d2:e6:6b:f1:9f:
5f:ca:19:15:db:7e:21:26:70:cd:98:49:b8:e1:7b:f5:52:d5:
26:92:0b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 25 19:53:15 2024 by rpki-client on console-fra.rpki-client.org