Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/pvRq-nNhI2D-RaBaIHL4kKIXH8s.roa
File: pvRq-nNhI2D-RaBaIHL4kKIXH8s.roa (raw, json)
Hash identifier: /vjoInEHRmxm93TWmnzbOIXswZD3xVVB4rWqh8ewrMA=
Subject key identifier: A6:F4:6A:FA:73:61:23:60:FE:45:A0:5A:20:72:F8:90:A2:17:1F:CB
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 018E21C03C3EA4EA841219FFC2256EBC0654
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/pvRq-nNhI2D-RaBaIHL4kKIXH8s.roa
Signing time: Sat 09 Mar 2024 05:47:10 +0000
ROA not before: Sat 09 Mar 2024 05:47:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199529
IP address blocks: 45.150.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Mar 2024 19:31:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:21:c0:3c:3e:a4:ea:84:12:19:ff:c2:25:6e:bc:06:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Mar 9 05:47:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6f46afa73612360fe45a05a2072f890a2171fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4b:74:55:fd:8f:af:01:b4:6e:ac:e2:5a:70:
33:0d:75:bc:70:bd:53:90:ed:a9:0b:c3:1d:21:32:
6b:04:75:a6:35:0b:53:06:31:94:28:c9:92:bf:ab:
62:bb:2e:57:06:8a:c4:c0:01:c5:d7:eb:27:67:8f:
bd:2d:c1:85:31:e8:13:11:82:e4:33:2c:fb:5d:e0:
a6:cf:8d:87:2f:f8:90:7e:49:d2:a0:3f:46:6a:8e:
cb:30:f1:cc:ac:dc:07:d7:e7:36:6d:f9:53:f3:d2:
78:1d:4a:f5:90:c3:20:c2:be:b6:38:ec:c2:c2:1b:
db:b5:f8:a6:6d:6a:ac:84:52:b5:e1:74:6c:08:41:
59:9b:6d:86:88:4d:50:4f:6b:ea:c9:e4:0a:3c:fe:
b2:fa:82:d5:5e:e1:f2:18:5e:56:af:8e:c2:0c:2e:
7b:e0:5c:ec:91:0c:88:ff:f3:01:57:50:b5:9a:6c:
8f:32:42:d5:2f:d5:94:3f:ab:7f:88:c9:73:e0:6b:
16:77:8d:61:06:1b:a1:43:62:de:c1:24:11:3a:1a:
7f:1e:d1:8f:6b:17:bb:a9:36:d4:a7:bd:72:62:79:
40:23:77:92:26:ed:37:a7:cd:d0:5d:f5:07:8a:e2:
80:33:3f:28:32:1d:5f:84:ab:40:0a:e6:8f:1b:64:
e4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F4:6A:FA:73:61:23:60:FE:45:A0:5A:20:72:F8:90:A2:17:1F:CB
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/pvRq-nNhI2D-RaBaIHL4kKIXH8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.172.0/24
Signature Algorithm: sha256WithRSAEncryption
64:14:71:bd:a0:90:c6:9f:2b:2a:ef:41:31:60:d6:49:da:a3:
63:c9:7d:35:61:64:44:bd:f2:a7:a7:91:87:31:85:7d:a3:09:
23:85:6b:1b:a5:72:43:3a:4d:9e:b8:9e:e0:b2:e9:a0:45:0d:
30:a3:d4:47:6f:46:23:cf:22:27:73:76:11:38:4a:db:07:0c:
26:ad:80:0c:90:3f:65:24:86:de:57:01:94:4f:64:f3:d1:d8:
f6:c0:78:23:ee:6f:b4:82:a8:8e:f2:35:73:fa:4a:29:9f:67:
d0:c7:6b:5f:e9:31:e1:fb:c5:46:b6:34:22:6e:0f:42:80:ac:
00:41:14:53:4f:af:de:f4:0d:ea:17:00:e6:6d:79:b4:41:d8:
64:7c:45:14:53:f3:93:cc:de:e6:40:bb:2d:0b:c4:46:c2:b2:
74:4a:61:0c:01:ed:78:d5:f4:45:68:69:ef:50:a8:6e:5e:c7:
6d:ef:6c:d0:14:fe:ae:56:43:ca:4b:c1:9a:b6:67:21:2f:af:
58:a3:c5:07:5b:03:6d:e8:08:3e:fc:ef:ad:fa:db:d3:3a:32:
79:30:03:ce:47:e5:0c:58:7d:59:05:6d:ef:a7:5e:62:2a:69:
0d:45:8c:ec:6f:d5:75:ad:59:5d:2f:f3:90:d3:5b:cb:91:9a:
57:e1:d6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:43 2024 by rpki-client on console-ams.rpki-client.org