Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/qRY2hKNwy9dRbNECd5TwFZ28jC0.roa
File: qRY2hKNwy9dRbNECd5TwFZ28jC0.roa (raw, json)
Hash identifier: Eg1BABvmQszz3Q82QDgONaECX06T70cVcPyuL6GtwZM=
Subject key identifier: A9:16:36:84:A3:70:CB:D7:51:6C:D1:02:77:94:F0:15:9D:BC:8C:2D
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 018B619A7C00333BE5D7E13763B406167C9D
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/qRY2hKNwy9dRbNECd5TwFZ28jC0.roa
Signing time: Tue 24 Oct 2023 12:13:16 +0000
ROA not before: Tue 24 Oct 2023 12:13:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41745
IP address blocks: 45.144.232.0/24 maxlen: 32
45.144.233.0/24 maxlen: 32
45.144.235.0/24 maxlen: 32
45.144.234.0/24 maxlen: 32
Validation: Failed, certificate revoked on Tue 05 Dec 2023 13:37:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:61:9a:7c:00:33:3b:e5:d7:e1:37:63:b4:06:16:7c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Oct 24 12:13:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9163684a370cbd7516cd1027794f0159dbc8c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a1:52:43:32:7a:cd:67:71:65:a8:6a:3a:77:
d1:b9:00:de:ef:86:45:0a:18:9f:e3:46:90:c8:9e:
34:44:e2:65:95:fe:6c:02:9c:e4:6c:18:84:9d:b6:
22:35:d5:e1:4b:21:62:33:f2:81:86:57:90:2c:83:
cd:43:a1:52:0c:96:7a:e9:f2:ec:f4:26:33:a1:96:
bd:a0:3d:14:c6:0f:d0:7b:fe:f6:f4:4c:8f:8d:66:
be:f8:70:ae:3b:c7:d3:7e:d0:f7:ef:cb:2e:51:e4:
51:81:66:87:e7:fc:f7:34:36:14:6d:96:fc:be:e6:
0a:ed:89:d6:2f:9e:90:ad:66:5b:9f:cf:b4:f6:2c:
38:26:e8:0d:28:6f:e1:d7:96:19:54:b5:90:17:63:
df:e5:62:0f:f6:1b:e3:a7:39:d4:e8:01:e0:34:ff:
e9:64:10:8b:34:b6:6f:1e:46:a7:ce:f1:e6:8f:a1:
ca:35:bd:77:1d:95:0a:fd:56:cb:fd:79:1f:00:91:
f6:4c:90:cc:84:ca:08:f0:1f:7c:27:0f:bf:ad:1f:
ef:24:0f:ce:b5:8e:0f:78:59:28:cc:ba:25:67:a4:
ef:d4:b7:32:05:37:04:05:c8:ca:dd:96:5e:0c:a3:
93:36:aa:6e:a1:20:2b:03:69:38:88:8e:b6:04:75:
e2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:16:36:84:A3:70:CB:D7:51:6C:D1:02:77:94:F0:15:9D:BC:8C:2D
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/qRY2hKNwy9dRbNECd5TwFZ28jC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.232.0/22
Signature Algorithm: sha256WithRSAEncryption
79:d1:ab:92:e4:fa:04:72:32:d1:70:af:a2:f9:0e:e6:8f:d0:
c6:c4:99:a9:07:e9:ff:ce:58:10:d0:09:7d:2c:f5:fe:72:80:
30:69:78:66:52:1e:34:9a:c5:da:6e:1f:46:59:cf:5a:5c:ac:
f6:92:50:d4:f9:a1:d9:17:83:1f:ef:0a:ae:31:56:3f:53:92:
a2:17:03:7c:d4:5b:b4:49:6b:f8:96:e9:f1:e8:d3:3b:ca:d4:
be:08:26:84:b2:85:ff:fd:5a:14:bb:4d:db:9f:2a:50:ec:be:
9c:8c:8b:62:77:c3:71:bf:2b:b7:d4:e6:ff:78:b0:00:57:31:
11:cf:8c:e0:e2:41:a1:3c:12:64:c2:ad:61:63:d3:ca:3e:c6:
c1:79:58:1e:73:8d:27:11:f7:2a:5b:f0:18:c4:cd:bf:f8:e4:
c9:a8:3e:fe:f4:dc:42:a4:62:7b:26:7d:4c:a5:1a:77:f3:aa:
ae:8d:83:23:2f:06:43:ee:36:97:0f:d4:60:4b:21:9d:2e:f5:
79:b7:bb:ae:a6:be:83:ea:aa:17:33:58:64:89:dc:af:ff:1f:
c1:af:e1:b3:18:dc:10:3e:e1:e9:d1:31:cd:dd:d8:33:95:95:
fd:57:24:b5:62:5f:e8:dc:5a:2b:0e:a8:e1:21:9b:5b:03:4d:
55:94:7a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:38 2024 by rpki-client on console-fra.rpki-client.org