Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/VQnpk2fnR_V1ai4cUkFXGbt_g2c.roa
File: VQnpk2fnR_V1ai4cUkFXGbt_g2c.roa (raw, json)
Hash identifier: iTLpK5m4PTxfniWeoslILypVa7cl7btNC6NyFJz2WKk=
Subject key identifier: 55:09:E9:93:67:E7:47:F5:75:6A:2E:1C:52:41:57:19:BB:7F:83:67
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 01856EAA262AD10983863416CEAD7F2CE2E6
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/VQnpk2fnR_V1ai4cUkFXGbt_g2c.roa
Signing time: Sun 01 Jan 2023 18:48:42 +0000
ROA not before: Sun 01 Jan 2023 18:48:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 45.150.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Jan 2023 16:40:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:aa:26:2a:d1:09:83:86:34:16:ce:ad:7f:2c:e2:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jan 1 18:48:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5509e99367e747f5756a2e1c52415719bb7f8367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f5:51:be:45:e7:8b:2d:b9:33:f5:30:21:c4:
e7:c5:de:64:55:18:47:69:35:c2:f4:a4:2d:75:fe:
0b:3e:14:5e:3e:62:9d:6a:8a:65:25:a3:5a:5c:99:
17:c4:ed:b7:d7:62:21:cc:2a:a3:fd:c2:e0:3b:8b:
44:f9:21:e5:49:1f:f3:61:15:c0:10:d6:2a:8c:60:
00:84:d6:ce:d0:15:dd:9d:6e:a6:bf:19:b0:d5:2b:
8e:99:5d:27:04:3e:e4:2c:0f:1e:7f:a6:77:35:ce:
9e:60:7b:eb:50:03:33:11:17:ee:a3:41:18:8f:48:
54:4b:db:16:8e:21:89:a7:f9:7f:bc:fb:e4:4a:bb:
0d:c7:1a:84:34:07:02:1c:54:fa:c4:c8:b7:16:9b:
d6:a9:1b:7f:29:e8:40:f6:00:dc:29:27:bf:e1:c6:
b7:ed:f0:b4:93:9d:91:51:aa:30:ed:77:be:39:60:
33:07:a3:b8:ed:ae:d6:c7:90:3c:45:be:15:68:44:
58:95:fa:0a:8f:2b:39:da:b1:0a:2f:74:56:9e:44:
d1:df:b0:28:0d:4c:2e:c7:f6:b4:76:33:82:ff:85:
ca:d7:72:cf:09:f6:fe:7f:3d:30:87:9b:e9:49:7f:
7f:3f:c9:33:27:c9:d1:86:ed:68:f1:b9:b4:eb:cf:
a4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:09:E9:93:67:E7:47:F5:75:6A:2E:1C:52:41:57:19:BB:7F:83:67
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/VQnpk2fnR_V1ai4cUkFXGbt_g2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.174.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:e7:3f:7e:37:24:fa:ca:34:1f:73:04:a9:ca:8e:33:35:f7:
35:d2:86:53:22:cc:17:91:f8:3c:03:85:14:a0:6b:a6:a4:0b:
d0:75:4a:ed:0f:bf:b4:53:ef:dd:b0:ff:92:d4:ed:c5:9e:ea:
36:3b:b6:cf:8f:3f:8b:29:de:74:e5:54:01:61:13:80:0a:3a:
15:cf:32:3e:d8:07:00:71:70:de:7f:71:92:7c:e8:29:ba:4a:
b9:b5:73:9d:81:ec:e9:4b:13:5b:cf:b6:96:7e:ab:47:aa:35:
f3:e6:bf:4c:c4:84:d0:8d:4f:1d:2c:af:0b:48:2f:5f:cd:eb:
28:2d:7d:b4:09:6a:85:54:97:ec:55:ca:77:ba:c8:4d:ac:15:
de:14:ff:cd:13:98:c9:22:f7:99:7f:d0:c7:26:be:84:d7:90:
10:87:7b:58:4f:7b:fb:b3:87:5b:b4:ba:a8:a7:18:1a:96:b3:
05:11:e8:ca:a5:96:f0:d0:7b:2e:6f:3f:3f:bd:da:4a:7e:fc:
6d:85:a0:cd:06:a5:4c:8c:62:c5:c9:19:9d:f9:55:54:23:8f:
93:e8:bb:29:73:7d:ee:aa:01:12:3e:90:01:ac:14:7f:da:38:
0d:ef:06:30:11:e7:54:58:c0:30:fb:41:db:21:b9:8e:02:6d:
57:f3:0d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:43 2024 by rpki-client on console-ams.rpki-client.org