Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1-rj567gpANp45I4qkKnpODhr5eo.roa
File: 1-rj567gpANp45I4qkKnpODhr5eo.roa (raw, json)
Hash identifier: ZTg7uO8dpFPZSNKa3GwWg/nmc8JJAof2D5FaIn+L5P0=
Subject key identifier: FA:B8:F9:EB:B8:29:00:DA:78:E4:8E:2A:90:A9:E9:38:38:6B:E5:EA
Certificate issuer: /CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Certificate serial: 01856E14553112CB825E62D1A434AA576B56
Authority key identifier: D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1-rj567gpANp45I4qkKnpODhr5eo.roa
Signing time: Sun 01 Jan 2023 16:05:04 +0000
ROA not before: Sun 01 Jan 2023 16:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 45.81.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:55:31:12:cb:82:5e:62:d1:a4:34:aa:57:6b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Validity
Not Before: Jan 1 16:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fab8f9ebb82900da78e48e2a90a9e938386be5ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:84:9a:cb:ae:3b:87:d5:d4:4e:23:42:80:84:
64:fb:fe:c8:2f:da:9a:e6:ab:1c:86:f1:e8:19:5b:
00:ad:ce:80:c4:da:d4:f4:da:82:f9:a1:81:24:a4:
3a:b3:6b:52:68:3a:f1:07:43:e4:5c:98:b4:d2:22:
e1:9d:06:ee:1d:8c:4d:dd:46:6e:a8:86:e7:31:dd:
79:07:e0:82:34:4c:05:ad:ec:0e:de:c0:47:d6:2a:
99:8e:b0:b3:ac:b7:01:07:5f:48:60:59:ca:ab:ee:
43:9d:be:5e:40:2c:a1:57:fa:f5:ac:bc:51:5c:ae:
97:b1:37:db:20:1b:17:83:e2:6e:3f:0e:c1:7c:2e:
31:a6:c4:0c:50:c0:20:85:15:52:8b:08:48:ad:45:
f2:2b:f1:23:b9:80:ad:10:fc:51:45:93:ce:9f:7e:
a3:de:37:38:a0:a3:2c:71:29:5d:fe:5c:43:9d:a5:
af:a9:93:ac:64:3f:d1:be:56:ac:69:f8:30:3f:78:
23:06:b1:99:9b:8c:76:cc:2b:04:42:29:02:2e:10:
1f:19:e5:af:de:22:ac:85:18:00:7c:3a:57:97:d9:
21:59:d7:81:74:12:89:07:70:34:fa:6f:31:53:ef:
26:ce:7e:19:5f:67:35:e1:75:ad:de:34:00:c0:b6:
b8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B8:F9:EB:B8:29:00:DA:78:E4:8E:2A:90:A9:E9:38:38:6B:E5:EA
X509v3 Authority Key Identifier:
keyid:D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1-rj567gpANp45I4qkKnpODhr5eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.255.0/24
Signature Algorithm: sha256WithRSAEncryption
62:ca:f1:d6:41:ad:5a:f9:ac:10:12:1f:d8:ee:64:60:5b:ec:
5d:94:e5:9e:1e:6f:85:2b:6a:5b:42:fd:99:cd:eb:58:c5:bf:
54:7e:de:1d:8d:e1:2b:94:92:0d:55:38:56:41:35:55:01:0a:
3a:87:4a:ea:54:d6:9a:f4:b0:7b:f3:00:4f:07:ad:21:f9:78:
67:07:d5:b1:91:8f:95:73:18:8f:1e:67:e5:df:6a:78:94:62:
3e:e8:ae:a5:96:41:45:2f:30:2d:ba:e5:72:9c:d2:24:cf:91:
35:fb:08:10:f0:85:47:c7:6f:ea:74:f0:73:28:cc:f4:3c:a0:
ae:18:5e:cd:12:5d:18:f1:69:be:2d:a6:97:01:47:58:46:19:
75:c3:f8:37:cc:c7:86:71:32:f7:be:2c:c1:72:fc:41:29:96:
1b:c0:fe:f7:aa:71:9e:1c:69:8e:be:7b:ac:33:ae:9a:ac:7f:
a2:e9:e0:a3:78:f7:0a:1d:f0:04:c3:6f:c0:8b:8e:ef:4b:71:
86:ca:26:28:e9:f8:92:c3:ad:2f:0b:b5:83:d9:d7:56:38:de:
f7:2b:ff:4b:1d:c1:ee:77:b0:56:00:31:a0:a1:4d:fc:8b:be:
b5:8e:52:e1:96:5e:1e:48:e7:03:39:62:99:b3:c8:b1:61:b0:
25:f5:06:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:15 2024 by rpki-client on console-fra.rpki-client.org