Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/840683-519c-4a4d-ae46-069ad3d6e5b0/1/8fQQ6pjWFR9DTRMppo6I9bh_c00.roa
File: 8fQQ6pjWFR9DTRMppo6I9bh_c00.roa (raw, json)
Hash identifier: o8T+u0cgus7NbT7iOkvEFE734QFZ/CveuqkqXxOSv+8=
Subject key identifier: F1:F4:10:EA:98:D6:15:1F:43:4D:13:29:A6:8E:88:F5:B8:7F:73:4D
Certificate issuer: /CN=df83cc17f26bc6a97c44d8a2436a95c72a94bff1
Certificate serial: 0185708CAA5B8B3BA7BEEE3957BD76E75EAA
Authority key identifier: DF:83:CC:17:F2:6B:C6:A9:7C:44:D8:A2:43:6A:95:C7:2A:94:BF:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34PMF_Jrxql8RNiiQ2qVxyqUv_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/840683-519c-4a4d-ae46-069ad3d6e5b0/1/8fQQ6pjWFR9DTRMppo6I9bh_c00.roa
Signing time: Mon 02 Jan 2023 03:35:44 +0000
ROA not before: Mon 02 Jan 2023 03:35:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396982
IP address blocks: 45.159.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:aa:5b:8b:3b:a7:be:ee:39:57:bd:76:e7:5e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df83cc17f26bc6a97c44d8a2436a95c72a94bff1
Validity
Not Before: Jan 2 03:35:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1f410ea98d6151f434d1329a68e88f5b87f734d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:84:7d:6c:71:21:52:9a:0d:da:80:56:53:b6:
e4:4f:ef:79:bb:43:6d:3c:ab:1a:3e:13:6c:cf:a5:
1a:84:47:78:c0:79:75:3a:f8:35:19:e2:39:a2:38:
73:55:88:0c:2c:40:10:cd:5e:7d:c8:95:61:22:12:
ed:b9:f3:ac:e8:29:cd:ec:bd:e9:88:53:40:55:07:
d3:d1:cc:b6:ee:05:c5:a7:34:fa:1a:2a:9b:c4:9b:
94:23:42:de:dc:c9:98:aa:58:bb:ce:dd:60:b7:15:
c0:50:a6:f3:15:cd:0c:26:1d:b1:bd:4c:3b:b8:03:
28:63:92:2d:70:e6:f7:08:cd:80:16:fb:70:19:c0:
18:7d:d6:53:b0:d1:82:23:fe:a4:22:1f:29:d4:2b:
9e:13:33:87:ce:f5:2c:5c:d9:85:03:d4:ab:af:29:
f6:cc:69:b9:d5:b0:13:b1:01:4d:ee:e4:79:c4:c0:
43:15:24:8d:af:51:0a:22:7a:2b:b3:a0:56:0b:ed:
5e:a4:14:64:5b:ec:39:55:bc:4e:23:07:12:77:4c:
ea:d5:2f:a5:64:e8:b2:fb:5d:99:89:16:fe:06:18:
6f:5b:28:cd:b7:1b:a7:21:2c:da:75:81:a9:81:38:
25:93:c6:36:b7:4e:fe:8e:8b:65:35:90:15:35:a7:
f4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F4:10:EA:98:D6:15:1F:43:4D:13:29:A6:8E:88:F5:B8:7F:73:4D
X509v3 Authority Key Identifier:
keyid:DF:83:CC:17:F2:6B:C6:A9:7C:44:D8:A2:43:6A:95:C7:2A:94:BF:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34PMF_Jrxql8RNiiQ2qVxyqUv_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/840683-519c-4a4d-ae46-069ad3d6e5b0/1/8fQQ6pjWFR9DTRMppo6I9bh_c00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/840683-519c-4a4d-ae46-069ad3d6e5b0/1/34PMF_Jrxql8RNiiQ2qVxyqUv_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.34.0/24
Signature Algorithm: sha256WithRSAEncryption
34:a6:84:51:3e:b0:f0:a1:47:f9:33:34:cb:48:3e:45:0d:b9:
36:92:48:9b:5e:90:17:6c:8a:3b:69:51:94:4d:e5:8c:9c:6a:
b4:30:f8:cb:e6:4a:b5:72:9c:32:5f:7f:39:80:e2:21:1e:97:
6b:8b:af:93:bc:bc:d1:09:f2:68:21:41:17:27:74:67:c9:3d:
dd:7b:02:03:cb:7c:3f:f0:40:b2:23:a2:f1:12:8f:25:7f:16:
0f:79:a5:5b:5e:b1:32:57:29:94:b1:6e:ab:91:69:25:20:6d:
19:8a:a1:87:b3:f4:32:d8:21:4b:ee:f3:e6:23:8c:fe:63:9c:
75:92:86:63:ee:49:c8:da:4c:36:f9:4b:97:39:7d:bf:93:bc:
79:c6:93:9f:c4:2c:cc:ce:74:ff:6c:b2:1a:c4:45:bd:b6:19:
5c:88:c2:b2:ba:9c:6b:2b:7f:62:17:ec:65:50:f6:15:83:d8:
3b:33:07:ef:16:59:9b:ac:1d:a1:e9:c6:b6:09:98:0a:90:45:
c5:ac:35:95:d7:bb:35:68:e4:2a:d2:dd:54:10:73:c0:39:7f:
5c:32:91:0e:f4:a5:c6:1e:83:5f:5c:70:7e:98:f2:60:a3:51:
c2:e8:c9:64:4b:a1:c4:a6:41:6f:07:be:a2:41:13:75:db:45:
08:4e:8e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:01 2024 by rpki-client on console-ams.rpki-client.org