Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/8nWR-t2SXcf271XYUx7N7tLQmgQ.roa
File: 8nWR-t2SXcf271XYUx7N7tLQmgQ.roa (raw, json)
Hash identifier: +Zn4sSZMFWWPTYOoF78Xi2J2x7FUWx9qUFTQC3kDqkw=
Subject key identifier: F2:75:91:FA:DD:92:5D:C7:F6:EF:55:D8:53:1E:CD:EE:D2:D0:9A:04
Certificate issuer: /CN=e7c07db9880133c5cdce005bca111b552cd14c53
Certificate serial: 018B9454527FFD61CA3F9E3937A338A002C8
Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/8nWR-t2SXcf271XYUx7N7tLQmgQ.roa
Signing time: Fri 03 Nov 2023 08:37:15 +0000
ROA not before: Fri 03 Nov 2023 08:37:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209347
IP address blocks: 45.12.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:94:54:52:7f:fd:61:ca:3f:9e:39:37:a3:38:a0:02:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53
Validity
Not Before: Nov 3 08:37:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f27591fadd925dc7f6ef55d8531ecdeed2d09a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ed:5f:50:81:4f:98:19:3a:38:ae:e8:c1:66:
49:b3:37:df:22:67:8d:13:11:68:1c:10:94:5c:5c:
3f:e9:44:8b:6e:45:1e:1b:d5:0d:61:5e:81:46:d6:
5f:2b:93:dc:9e:9f:e2:c7:bc:50:06:2c:66:3e:ac:
fd:80:04:0a:89:64:24:f0:e8:98:56:c2:60:2c:47:
8f:52:50:1e:80:19:fc:eb:75:fa:9b:2d:ab:1d:f1:
46:e8:52:8e:6a:27:ee:72:c2:0f:b3:38:a7:bf:c1:
31:68:68:eb:8e:aa:f0:b1:36:d0:23:28:31:23:b4:
d6:06:f8:4e:36:89:ac:d2:db:b8:bd:b7:2f:6c:44:
c6:d4:b2:08:a1:e1:53:95:52:cf:be:cf:9a:ac:34:
85:58:67:18:6e:1e:12:ab:db:69:78:3f:cd:9b:8b:
99:84:ee:31:e2:b3:7b:a2:3e:a1:7d:cf:0c:09:76:
c6:5c:38:c5:b5:d8:03:7e:d7:36:26:1c:c9:a7:7d:
c5:83:ca:69:a6:b9:42:26:3e:78:61:ea:05:27:2b:
07:40:c8:5d:ea:91:66:0f:8e:db:f3:2e:98:f0:8c:
38:bb:55:62:96:d0:7c:42:ca:e9:84:82:8c:82:03:
74:43:a5:0b:e9:35:34:99:a2:43:43:e5:79:f5:e5:
3a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:75:91:FA:DD:92:5D:C7:F6:EF:55:D8:53:1E:CD:EE:D2:D0:9A:04
X509v3 Authority Key Identifier:
keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/8nWR-t2SXcf271XYUx7N7tLQmgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.203.0/24
Signature Algorithm: sha256WithRSAEncryption
52:67:c8:d3:a3:8a:e5:37:91:5c:a9:55:da:8f:39:82:4b:fb:
99:8c:e0:93:3b:6c:60:d9:7c:52:23:41:bd:d4:ba:51:ce:20:
2a:56:92:02:fb:65:15:62:31:a6:e8:96:aa:34:8a:af:00:22:
86:a0:e7:a7:ff:5b:7b:a8:11:bb:4f:b8:f6:b2:ab:e1:a5:36:
40:51:8c:05:9f:9e:aa:81:2d:34:4a:68:6a:74:10:5b:88:2c:
55:72:24:6b:3a:5a:6a:c2:13:f4:a6:17:ce:b4:57:ed:42:4d:
d5:fc:db:0b:4f:c1:09:85:68:e5:84:8c:af:9d:92:57:20:09:
6f:73:5d:91:ba:33:31:03:98:42:c8:3f:60:ec:1c:9d:2f:d4:
d9:af:28:d3:d7:a7:5d:52:dc:70:02:a6:2a:81:cf:76:e1:06:
9e:b9:ff:3c:3c:cf:58:52:87:73:9c:6a:64:14:9d:30:a9:65:
7c:11:3d:18:f3:fd:f9:4a:4b:47:c0:93:e9:ff:e0:60:e6:6d:
53:e9:bc:27:61:8b:b2:fa:6d:fe:9a:81:d6:a7:4b:75:03:fc:
33:1d:40:40:0b:29:9d:10:8d:cf:48:2c:ce:dd:c4:c2:c5:2f:
94:d1:f9:99:10:2b:ad:65:bd:fe:ff:cf:57:a7:26:00:0e:b4:
64:e5:01:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:52 2024 by rpki-client on console-ams.rpki-client.org