Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/_0Izoy_4KgObGlgBffvoUUXYcpg.roa
File: _0Izoy_4KgObGlgBffvoUUXYcpg.roa (raw, json)
Hash identifier: LU7yxNkhkisYwytypOd6mhzVt8NA512GqSzTrYlL3E8=
Subject key identifier: FF:42:33:A3:2F:F8:2A:03:9B:1A:58:01:7D:FB:E8:51:45:D8:72:98
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0191557643C6E95AD27004664C23D157571F
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/_0Izoy_4KgObGlgBffvoUUXYcpg.roa
Signing time: Thu 15 Aug 2024 09:54:59 +0000
ROA not before: Thu 15 Aug 2024 09:54:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55154
IP address blocks: 45.9.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Aug 2024 08:58:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:55:76:43:c6:e9:5a:d2:70:04:66:4c:23:d1:57:57:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Aug 15 09:54:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff4233a32ff82a039b1a58017dfbe85145d87298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9a:6a:7e:73:2c:8c:4f:e9:c8:45:d7:fe:4d:
91:dc:38:4f:1b:b3:f1:fd:9c:4b:fb:17:b8:95:97:
8b:b2:d4:3b:79:a1:95:31:21:83:39:65:52:7b:e7:
ed:7b:e6:bc:bf:f2:ae:45:63:a2:50:16:e0:c8:68:
b1:47:95:12:0b:7a:00:af:71:91:ff:96:92:f3:f8:
54:bd:81:e9:82:5a:71:db:58:48:55:f3:7f:da:52:
e4:7d:9e:fa:76:b4:e5:52:b7:4b:5b:cd:77:bd:0c:
29:21:24:97:5c:c1:dd:1a:34:3d:c3:ff:8a:bb:28:
89:61:84:98:59:2e:46:52:3e:77:4f:49:c7:3b:6a:
be:eb:44:07:2b:bd:e1:f5:19:1d:02:c9:e8:d9:99:
b6:94:9c:dc:87:0b:13:2c:e7:f4:68:23:6e:12:bc:
36:d1:43:db:0a:89:83:74:e5:8d:4f:10:27:03:69:
da:1c:68:70:e5:7f:b8:a1:69:f0:bc:b6:3f:86:dc:
68:73:41:3c:79:ac:af:10:37:b3:ef:5b:f9:b5:91:
58:1f:25:6f:23:83:4e:97:32:0b:72:e1:a9:c9:42:
4f:f7:ff:43:23:95:f2:83:50:57:8f:75:0e:6a:b7:
95:92:21:d7:99:f8:7a:9e:9d:41:58:a1:a3:e8:55:
7e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:42:33:A3:2F:F8:2A:03:9B:1A:58:01:7D:FB:E8:51:45:D8:72:98
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/_0Izoy_4KgObGlgBffvoUUXYcpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.30.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:55:cb:62:b4:a8:36:2e:c7:5a:0a:66:45:e1:a5:4c:83:3b:
a4:8f:7a:0c:b5:90:83:29:f4:17:0b:a1:f5:86:ae:78:0a:c3:
2e:b7:f2:f7:c3:8f:05:48:c0:17:cd:b3:28:cd:1d:79:b6:ab:
38:1d:05:18:22:b8:b3:cf:3b:66:1e:9c:b1:cb:44:64:fa:87:
71:a9:f7:e5:56:7c:e5:ab:9d:c3:b4:cd:f6:6d:db:13:c3:89:
68:3f:24:ee:c1:87:f3:84:66:49:de:12:48:d9:85:0a:d6:cc:
e1:6a:e2:80:46:c7:08:f8:30:bf:73:fb:2b:74:1d:af:20:95:
e7:ff:d2:0f:87:5f:d3:5b:73:5b:83:de:bb:65:28:0e:3d:8c:
e4:f4:9f:d1:a9:09:cc:34:0c:15:b3:05:61:56:2f:e1:66:40:
c6:60:7c:ae:1b:1b:30:f5:43:cf:ad:43:bf:fa:38:a8:a4:4c:
0a:eb:a3:d2:29:56:c7:05:af:7c:45:01:b8:75:1e:56:4f:a1:
b5:72:ae:74:a2:36:68:25:a5:ef:49:ac:37:0c:4d:a4:3f:8d:
4a:f2:fd:47:43:91:f2:35:71:f8:c2:b9:dd:c3:f0:5b:28:a5:
11:e3:7e:09:b9:c9:8e:cd:0c:11:b7:34:2a:fd:56:5c:eb:43:
c2:02:1c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 19 10:52:57 2024 by rpki-client on console-fra.rpki-client.org