Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/1sFaa4WqUV9bsRb2DFhA5krkB2s.roa
File: 1sFaa4WqUV9bsRb2DFhA5krkB2s.roa (raw, json)
Hash identifier: Va7j3/V8F190/a6Mvx+C2hKsAb15IYISuTZ47bqWDYI=
Subject key identifier: D6:C1:5A:6B:85:AA:51:5F:5B:B1:16:F6:0C:58:40:E6:4A:E4:07:6B
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 0185B9570DFC2DCDFB7C59CDCB4592F49377
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/1sFaa4WqUV9bsRb2DFhA5krkB2s.roa
Signing time: Mon 16 Jan 2023 06:49:28 +0000
ROA not before: Mon 16 Jan 2023 06:49:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 45.140.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Mar 2023 08:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b9:57:0d:fc:2d:cd:fb:7c:59:cd:cb:45:92:f4:93:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: Jan 16 06:49:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6c15a6b85aa515f5bb116f60c5840e64ae4076b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2e:c9:70:bc:88:3c:6f:47:79:cf:98:76:21:
e0:27:8f:02:d6:58:23:c8:44:ed:f1:ca:b3:18:7c:
3c:b7:71:be:16:b6:41:19:9e:ff:62:77:89:2d:9d:
9b:34:d1:da:6d:bf:66:10:9c:01:04:98:8c:46:4e:
ae:0a:31:c7:be:47:b9:e2:c4:b6:aa:4c:40:2e:97:
20:81:6a:39:88:b8:b5:14:3d:20:9a:a2:3a:32:cd:
52:27:97:4b:ef:d8:cd:79:4c:01:66:f4:7e:ca:86:
66:dc:47:8e:5e:47:b5:61:a2:6e:b7:99:49:d4:21:
6e:c6:04:bc:62:35:70:b3:21:b2:c4:9a:b9:7c:3f:
3f:ae:9a:7c:9b:f8:d1:28:a1:58:2f:64:11:66:5c:
55:f1:5d:ed:d7:d9:49:aa:9b:1c:30:67:45:15:b7:
6b:66:f3:f1:2a:7f:e8:7b:3a:77:bc:68:dd:23:d1:
3d:69:31:5a:e6:d4:8d:37:d4:14:3e:16:4e:7a:32:
0e:af:8d:a3:5d:a8:29:bd:cb:45:9b:ca:2a:18:92:
23:74:7a:b1:80:96:8e:bb:2b:a3:f4:fd:a9:8b:e8:
63:f3:57:ab:56:c7:7c:75:30:8c:81:95:23:e7:4e:
d1:3f:28:d8:d9:c3:93:9c:9d:57:f0:b5:0a:2d:ae:
6f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C1:5A:6B:85:AA:51:5F:5B:B1:16:F6:0C:58:40:E6:4A:E4:07:6B
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/1sFaa4WqUV9bsRb2DFhA5krkB2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.210.0/24
Signature Algorithm: sha256WithRSAEncryption
01:39:05:18:27:73:81:12:23:c8:93:1f:71:ed:0f:ca:64:86:
8b:5e:6a:9d:71:67:fd:da:c5:de:37:02:14:e3:e1:59:b1:39:
a0:8c:ec:e7:8a:5a:0f:1d:40:ca:9c:9c:93:8d:ca:56:fa:db:
8d:45:53:5b:aa:4f:a9:96:bb:df:27:12:0d:b7:f2:18:de:18:
ee:3f:70:28:5c:b9:ed:28:6f:cf:ba:4c:6d:d9:25:b1:d0:04:
8c:84:20:de:72:31:d3:29:54:48:9f:92:e6:36:44:ce:6d:66:
1f:fe:d7:8d:3f:88:f8:57:08:0e:05:70:8f:5c:2a:53:1f:20:
e9:90:f7:a7:66:d4:4d:56:d5:99:34:0b:f4:8c:7f:7e:4a:a5:
33:18:30:76:46:e7:4d:24:87:39:c7:91:0c:59:de:a1:7d:c6:
29:5d:96:43:d5:f8:e6:d4:e4:55:d5:81:9c:0c:b4:57:60:7d:
64:ee:6b:59:89:d8:27:e8:db:4b:bc:47:c2:75:3c:92:6a:da:
b4:75:2d:bd:b3:55:e6:af:38:a3:1f:d0:2e:6d:85:d4:8b:88:
75:48:af:bc:62:2a:df:bd:59:4a:df:50:ac:dc:b5:2f:21:4b:
f1:49:5c:f9:1a:b0:a3:69:2a:41:c7:5e:c4:e4:88:1b:ef:ea:
e3:3f:cc:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:56 2024 by rpki-client on console-ams.rpki-client.org