Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f50b96-630e-4379-95ca-71aedbaef48b/1/45C_1fWaiRENHJ2MCz35rpnQJkQ.roa
File: 45C_1fWaiRENHJ2MCz35rpnQJkQ.roa (raw, json)
Hash identifier: apFK0XXhE/Lb8McQqlChILTQXZZsbhREOXKvgUuW15U=
Subject key identifier: E3:90:BF:D5:F5:9A:89:11:0D:1C:9D:8C:0B:3D:F9:AE:99:D0:26:44
Certificate issuer: /CN=c867f46624d481bea9d1ba8beb0c0189c9b44b5e
Certificate serial: 0187938B7542D201B49AD828907ED1E3BD50
Authority key identifier: C8:67:F4:66:24:D4:81:BE:A9:D1:BA:8B:EB:0C:01:89:C9:B4:4B:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGf0ZiTUgb6p0bqL6wwBicm0S14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/f50b96-630e-4379-95ca-71aedbaef48b/1/45C_1fWaiRENHJ2MCz35rpnQJkQ.roa
Signing time: Tue 18 Apr 2023 08:46:42 +0000
ROA not before: Tue 18 Apr 2023 08:46:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198926
IP address blocks: 87.236.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Apr 2023 01:10:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:93:8b:75:42:d2:01:b4:9a:d8:28:90:7e:d1:e3:bd:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c867f46624d481bea9d1ba8beb0c0189c9b44b5e
Validity
Not Before: Apr 18 08:46:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e390bfd5f59a89110d1c9d8c0b3df9ae99d02644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:97:d8:73:3f:af:c6:86:08:ef:19:10:b5:d1:
29:6a:ba:71:f9:71:8a:d3:60:a3:c9:b8:5c:c0:16:
8e:13:41:1b:7b:7a:ae:be:4b:e7:91:79:71:79:8f:
cc:d0:a9:94:df:7d:46:cf:0a:6f:35:76:06:00:4f:
37:25:ba:78:43:0b:86:7e:12:dc:c8:72:7a:f1:68:
48:41:4d:d9:d5:f7:a7:a3:a5:7d:ea:3e:a1:d6:69:
f0:5b:3a:fb:f2:de:f7:fe:fd:3f:f5:73:54:55:34:
b8:d2:f7:ed:e9:d9:f9:05:f1:40:47:34:59:ba:39:
1a:2e:ec:b0:83:5e:75:08:1f:e1:6e:43:41:da:44:
11:1e:bf:83:99:3b:56:7d:fa:32:89:7e:e3:16:9e:
5d:a8:f6:a3:77:41:39:35:70:79:a6:81:62:ce:1c:
e4:97:0d:ba:aa:ba:13:70:a6:cc:62:04:cc:4f:a3:
b5:7f:f0:d6:2e:e5:e9:f6:9b:04:f1:62:1a:2f:67:
68:3c:bd:39:07:96:eb:f8:50:b5:bc:b2:61:ad:74:
8a:e3:89:9c:09:cf:63:b6:7a:65:57:8f:72:6c:dd:
92:a3:98:9f:3b:9a:1d:f7:db:5b:b6:28:c6:62:1a:
c7:3b:59:04:fd:a1:fd:21:a8:75:86:89:cb:c7:b8:
22:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:90:BF:D5:F5:9A:89:11:0D:1C:9D:8C:0B:3D:F9:AE:99:D0:26:44
X509v3 Authority Key Identifier:
keyid:C8:67:F4:66:24:D4:81:BE:A9:D1:BA:8B:EB:0C:01:89:C9:B4:4B:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGf0ZiTUgb6p0bqL6wwBicm0S14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f50b96-630e-4379-95ca-71aedbaef48b/1/45C_1fWaiRENHJ2MCz35rpnQJkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f50b96-630e-4379-95ca-71aedbaef48b/1/yGf0ZiTUgb6p0bqL6wwBicm0S14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.38.0/24
Signature Algorithm: sha256WithRSAEncryption
17:06:ee:82:0c:22:70:5c:fe:47:c6:f1:e0:0c:25:0f:4b:15:
6b:26:b3:17:16:fc:05:39:73:6a:c0:ce:a3:1e:8a:7a:90:52:
88:ce:31:dd:fc:fd:bb:ca:fe:17:41:82:e9:f1:b1:a8:06:f3:
db:4d:6e:4c:d7:3f:72:13:ce:a8:c8:b1:e4:0c:b9:5f:92:ba:
3a:fa:12:08:97:4b:92:24:28:21:8d:ca:5c:53:78:b2:8a:8e:
36:4a:ba:22:9c:ed:8c:47:d6:00:01:47:e2:d7:92:ce:db:e5:
04:dd:40:19:ea:84:3e:c8:c1:e2:55:d0:d8:44:0a:0a:ef:40:
23:ac:13:28:4f:fe:08:73:56:8b:0f:f7:bc:58:17:73:6c:ac:
01:38:20:11:61:4f:78:72:a9:d7:51:39:6e:87:a7:b6:99:db:
95:8d:6e:63:0e:82:0b:3f:c4:ac:a2:bc:34:df:15:32:d4:c8:
95:12:67:bf:0d:f8:1e:f2:3a:71:10:ab:37:3b:46:1f:66:d9:
27:4e:9d:30:f0:d7:fb:4c:e6:d9:21:78:b5:7c:b3:c5:36:4b:
62:2a:cc:7e:e8:6a:ff:44:b8:7b:92:79:4a:e7:a2:df:53:e3:
45:40:34:65:d1:86:04:a4:bb:cb:01:84:f5:dd:79:45:8d:d8:
53:d9:b6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:07 2024 by rpki-client on console-fra.rpki-client.org