Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/8dDkylj164cwdXeCLFDN1bGX224.roa
File: 8dDkylj164cwdXeCLFDN1bGX224.roa (raw, json)
Hash identifier: Oeh3D0CZSJSnm3tgK9WQIo46gpO5jyAsGrWIPU6bWao=
Subject key identifier: F1:D0:E4:CA:58:F5:EB:87:30:75:77:82:2C:50:CD:D5:B1:97:DB:6E
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018CC425773CC247D8BE217A4E78C4502D30
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/8dDkylj164cwdXeCLFDN1bGX224.roa
Signing time: Mon 01 Jan 2024 08:30:38 +0000
ROA not before: Mon 01 Jan 2024 08:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216456
IP address blocks: 45.81.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Mar 2024 15:38:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:77:3c:c2:47:d8:be:21:7a:4e:78:c4:50:2d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 08:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1d0e4ca58f5eb87307577822c50cdd5b197db6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:40:d8:a5:b1:d7:ed:7f:79:2c:f5:0c:d1:31:
de:c4:c0:a8:dd:9c:aa:82:27:70:a8:76:86:6a:82:
6c:88:88:fb:b8:d3:b7:f2:43:a6:cf:28:e9:f8:13:
56:01:5c:29:54:58:bc:14:2a:48:13:04:de:bf:71:
54:cc:7e:8b:bf:ae:2c:0f:d4:e7:46:14:5b:53:ef:
4b:2a:24:d7:20:3f:f0:fd:2a:13:15:06:52:29:bd:
49:dd:d8:25:41:de:5a:c8:10:79:9f:df:97:13:5c:
c7:1f:bb:29:62:42:a5:ac:ca:2f:7e:a3:12:eb:4d:
77:0f:ad:21:da:5f:f5:18:dc:68:56:45:47:ef:32:
b9:ec:5d:93:7c:08:39:f9:39:8f:fb:b9:89:cc:d0:
21:9a:21:c1:61:84:bc:71:ab:df:b4:b2:46:22:dd:
0b:b3:15:a9:f1:14:d7:d5:f4:6b:6b:90:d7:03:91:
d4:b1:5d:49:28:c7:a3:eb:43:75:78:3b:55:cf:5f:
e3:b2:76:38:c9:9b:92:28:78:17:ec:c5:47:f6:55:
69:e7:e4:3e:38:95:76:94:69:87:8c:51:f9:6b:b4:
9b:46:2a:77:3c:0d:47:2c:53:15:c1:c2:63:f9:fe:
dd:00:df:49:57:25:91:9a:78:d8:33:af:3b:24:7d:
fe:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D0:E4:CA:58:F5:EB:87:30:75:77:82:2C:50:CD:D5:B1:97:DB:6E
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/8dDkylj164cwdXeCLFDN1bGX224.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.20.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:ed:c0:1e:26:29:67:7a:9a:db:91:4a:af:6c:9e:dd:c8:55:
62:5d:68:98:ac:23:7d:ea:ce:8b:ce:b1:68:9a:61:87:1f:cf:
38:99:1a:23:8a:22:22:df:6f:31:d9:3a:41:93:13:76:fb:b1:
d0:3d:05:66:03:71:58:85:e6:cf:c7:cf:c6:fd:50:cd:0c:d7:
12:b8:d0:79:96:ba:9f:49:a9:a2:f2:72:e1:52:0e:f0:c9:46:
6c:74:1b:84:10:75:d1:07:cb:70:26:a6:d9:25:af:4b:41:25:
44:d0:4b:1b:35:7e:72:7f:5f:a8:d9:a4:61:e5:22:96:42:be:
08:c6:57:d0:0d:e0:31:a2:eb:f3:43:4e:a7:50:39:da:59:84:
9b:5b:d6:49:3a:e6:f3:71:cb:42:0b:64:86:06:e2:23:c6:87:
ce:3a:77:5c:0c:92:70:fc:f4:c6:cf:13:9c:c9:ff:90:31:48:
8d:9a:ca:c7:b0:40:ec:0b:c3:da:66:c6:37:d2:11:7b:01:fb:
ba:2f:f7:cb:36:d6:51:e7:d7:de:ec:93:91:e4:ca:c5:97:18:
fe:cc:e5:7f:be:6f:ba:17:93:61:a8:73:d1:eb:15:7f:88:9a:
bf:1b:02:23:67:8e:5d:e7:38:e2:07:98:88:82:1a:e6:c1:96:
30:b2:69:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 4 19:50:27 2024 by rpki-client on console-ams.rpki-client.org