Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/7XVVV-WBK3HB0cHejMbe6ueoO9k.roa
File: 7XVVV-WBK3HB0cHejMbe6ueoO9k.roa (raw, json)
Hash identifier: rIYnQyvmDEZ4SO/5LGId3kuxl5iOxMnD0Nvu0nUnxGg=
Subject key identifier: ED:75:55:57:E5:81:2B:71:C1:D1:C1:DE:8C:C6:DE:EA:E7:A8:3B:D9
Certificate issuer: /CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
Certificate serial: 01857271337B92667F788FA5B8672FDF4811
Authority key identifier: 38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/7XVVV-WBK3HB0cHejMbe6ueoO9k.roa
Signing time: Mon 02 Jan 2023 12:24:59 +0000
ROA not before: Mon 02 Jan 2023 12:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41290
IP address blocks: 45.147.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Aug 2023 09:08:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:71:33:7b:92:66:7f:78:8f:a5:b8:67:2f:df:48:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
Validity
Not Before: Jan 2 12:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed755557e5812b71c1d1c1de8cc6deeae7a83bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:51:eb:fa:a2:ce:1f:08:b2:b8:4c:35:ae:41:
cd:ce:42:bb:a1:4a:46:b0:3a:6e:d5:4e:47:75:0b:
97:f0:c4:82:2b:0e:48:74:a1:f5:7f:10:5e:82:5e:
0e:93:73:58:f7:56:e0:77:05:34:25:6d:32:21:1c:
3d:56:d9:ed:56:fa:19:d9:31:5f:d7:2c:4c:86:52:
b8:3f:19:da:72:3a:02:5d:0e:3f:36:3b:dd:4a:03:
2f:46:3e:fd:19:81:d3:d6:f0:37:3a:2c:a2:02:67:
46:99:e4:ac:35:cf:69:ac:c6:af:e9:3c:56:6b:10:
55:90:a1:e1:cd:8d:4b:50:39:14:30:43:51:e6:3c:
45:df:df:80:cb:1c:cb:e1:95:28:32:a1:79:3a:68:
90:2b:79:5e:9f:1c:da:b0:98:b6:93:98:90:19:40:
ed:a2:aa:7e:de:1a:d6:95:09:9f:d8:c6:78:40:22:
5f:4b:56:60:1b:f4:00:aa:62:e6:e0:42:dd:24:20:
c2:17:cd:48:80:ba:e3:63:38:68:3e:69:f9:24:89:
37:86:05:6c:61:8f:7f:14:de:4e:f1:2f:71:d0:61:
64:e9:e3:ad:ae:bc:77:4e:01:59:fe:5c:f9:e7:d0:
24:d0:12:39:ef:fd:8a:f7:dd:35:d5:9e:f8:19:8f:
6d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:75:55:57:E5:81:2B:71:C1:D1:C1:DE:8C:C6:DE:EA:E7:A8:3B:D9
X509v3 Authority Key Identifier:
keyid:38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/7XVVV-WBK3HB0cHejMbe6ueoO9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.40.0/24
Signature Algorithm: sha256WithRSAEncryption
30:90:22:e5:7b:a7:23:27:31:b5:e0:df:bb:79:7d:06:85:94:
18:31:9f:85:be:b2:bb:9b:bf:5e:7e:fa:ad:6e:6f:6d:88:c5:
2b:92:28:72:32:fa:16:86:30:fe:01:7f:a1:ad:2f:87:0b:42:
b0:d9:b2:6d:87:5b:ed:c5:cb:f7:0b:eb:41:75:d2:ae:b8:90:
0d:4c:6f:8d:d7:a3:30:94:f9:ce:a0:55:33:aa:64:67:f3:2b:
f9:e1:98:60:97:b0:59:69:8f:54:44:96:93:21:51:8e:66:29:
f6:58:2b:6f:6b:ff:d5:e6:08:83:d2:9e:38:bb:7c:9e:d5:1a:
ed:84:03:05:ab:6d:51:1e:ac:fa:2a:a5:77:91:1f:d0:55:50:
7e:ba:1a:3d:4c:49:db:b8:06:35:3c:76:14:de:84:3b:5f:0b:
b7:60:bd:db:7b:90:8d:ef:f3:54:cd:46:ef:d6:75:c8:5a:19:
b9:b5:5d:77:d3:31:a9:c3:3b:f4:73:26:18:d9:64:f3:3a:5f:
58:f8:91:f8:de:74:fb:f2:2e:1e:d6:d2:00:0e:22:0f:ac:a4:
68:e0:53:4d:d3:34:35:8d:58:e9:5d:0e:1a:73:a5:5c:18:da:
a0:c3:0e:64:1c:5a:90:7f:50:68:c9:95:8b:b3:72:f3:ea:23:
6f:ed:be:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:05 2024 by rpki-client on console-fra.rpki-client.org