Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/xz1MPzTSFwgdHi9wBfqtnbcXDuo.roa
File: xz1MPzTSFwgdHi9wBfqtnbcXDuo.roa (raw, json)
Hash identifier: 1/T9l2+2wNu+O7gy0gq5XwssrP7+zNiYta0AM4xDNFc=
Subject key identifier: C7:3D:4C:3F:34:D2:17:08:1D:1E:2F:70:05:FA:AD:9D:B7:17:0E:EA
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0190B7AA115649F78A4A5C1247639F9F63AA
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/xz1MPzTSFwgdHi9wBfqtnbcXDuo.roa
Signing time: Mon 15 Jul 2024 18:31:34 +0000
ROA not before: Mon 15 Jul 2024 18:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49217
IP address blocks: 45.151.3.0/24 maxlen: 24
146.19.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 17 Aug 2024 08:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b7:aa:11:56:49:f7:8a:4a:5c:12:47:63:9f:9f:63:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jul 15 18:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c73d4c3f34d217081d1e2f7005faad9db7170eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a4:d8:69:e6:10:30:8e:76:da:75:2c:fd:87:
91:72:e4:5d:8a:01:89:93:b5:75:7a:a3:f7:9a:df:
47:cf:05:f5:e7:d2:79:9c:d2:a9:07:45:a3:fa:18:
bc:c1:cc:ce:78:5d:6f:56:aa:2d:63:2c:26:d5:c7:
7c:20:d1:89:75:1d:98:22:48:93:51:3a:41:be:f0:
63:d5:86:c0:ce:c1:20:f5:16:b7:72:f1:4b:da:08:
3d:f7:b5:ef:02:21:eb:80:63:4e:47:b4:66:bf:89:
d5:b3:5e:5a:33:ce:c7:eb:d2:6e:16:3a:0d:c8:14:
69:3f:90:b2:02:4e:5f:97:32:92:48:36:22:9f:cc:
c5:13:0d:e2:a8:12:22:84:1d:f2:23:de:d6:65:49:
77:23:5e:21:97:26:80:8a:6b:cf:60:3f:9d:49:0c:
fe:42:2a:f2:4a:04:e2:f1:48:87:8f:18:e1:0b:40:
9a:60:ea:e5:4e:cb:cf:3b:39:1b:17:70:9b:2b:de:
67:79:e8:c7:11:f7:bf:58:7e:d1:b4:ec:c0:ca:6d:
b7:9e:2b:28:b8:61:c4:67:ae:b0:df:ea:61:e4:42:
62:4c:c5:03:3e:cd:39:61:4f:14:39:b1:f0:e6:60:
5c:8f:bf:09:a2:34:de:55:db:c8:1a:34:9e:3b:4e:
22:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3D:4C:3F:34:D2:17:08:1D:1E:2F:70:05:FA:AD:9D:B7:17:0E:EA
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/xz1MPzTSFwgdHi9wBfqtnbcXDuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.3.0/24
146.19.125.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:e5:0d:54:7a:31:37:3b:19:27:93:17:22:5b:4e:2d:63:ca:
bc:56:ba:82:f6:f5:e8:fc:0c:02:ca:cd:77:80:c6:7a:aa:e4:
c9:ef:ca:63:30:97:73:7c:d6:e9:b5:41:a2:f5:3d:ee:11:eb:
17:fb:31:d9:95:34:23:47:a8:c0:6b:95:f0:39:9e:dc:95:c6:
88:ea:f2:36:02:0e:d1:04:a5:4f:30:31:bc:ba:92:e8:91:29:
89:47:79:67:64:90:dd:e9:ea:a9:1a:f4:3f:4f:ae:fa:60:e3:
53:0e:dd:4e:5e:c5:83:48:4c:46:79:8c:20:3d:d0:5f:72:0e:
3e:39:c6:c6:61:58:1f:74:c1:53:52:fb:c6:2d:fa:1d:a6:ab:
7c:6d:14:15:c9:30:dd:80:6b:d9:67:d0:78:f7:e3:c4:09:3d:
6b:11:ea:69:a4:46:d5:3c:78:e1:70:5f:60:7f:f2:3b:af:a9:
06:46:06:c3:6d:75:6e:a6:bd:1d:1d:6d:ec:6f:76:11:04:39:
6d:a9:a5:51:d0:69:a7:42:06:72:49:82:3d:77:1f:f1:15:4e:
d5:3b:1a:17:79:d1:79:84:e4:f8:af:e0:b8:d8:e1:14:0b:d3:
00:bd:56:2d:1b:43:dd:56:63:23:d2:18:88:f0:e4:7b:d4:1d:
0e:43:65:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 12:40:44 2024 by rpki-client on console-ams.rpki-client.org