Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/DBb9SEsEUGPEzA3VAaVpNpnIx6o.roa
File: DBb9SEsEUGPEzA3VAaVpNpnIx6o.roa (raw, json)
Hash identifier: CVuR4ffHNZ8Po9Q4BOAhW2tVDWeMwP+vfLsTTavhJAo=
Subject key identifier: 0C:16:FD:48:4B:04:50:63:C4:CC:0D:D5:01:A5:69:36:99:C8:C7:AA
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 0186FFEC15156E44E4333BDD92AE16419500
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/DBb9SEsEUGPEzA3VAaVpNpnIx6o.roa
Signing time: Mon 20 Mar 2023 16:48:27 +0000
ROA not before: Mon 20 Mar 2023 16:48:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 45.140.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ff:ec:15:15:6e:44:e4:33:3b:dd:92:ae:16:41:95:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Mar 20 16:48:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c16fd484b045063c4cc0dd501a5693699c8c7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d3:43:af:47:36:ee:a8:12:fa:cb:68:b1:92:
03:94:c5:2f:0f:79:2b:94:7b:e6:36:39:15:50:71:
15:5a:1d:7e:1f:a7:5f:e0:3c:96:95:39:0f:82:8e:
cc:af:05:8e:cf:82:01:eb:d6:31:a5:18:6e:38:8d:
68:24:fb:09:d7:11:f2:e6:f6:8f:df:17:58:2e:0b:
84:da:60:ed:ef:5e:2d:dc:88:0a:7b:aa:10:4a:3b:
3a:a3:98:65:8c:5e:92:d5:cb:13:d4:ea:b2:4b:4c:
f8:ec:27:28:58:1c:bb:1e:65:f1:74:2e:88:4d:24:
41:f6:b0:ca:78:d5:21:3c:7c:94:9d:af:91:59:2b:
d3:44:94:d3:ab:d2:4c:9b:af:43:7b:87:3d:28:05:
bf:63:26:b8:30:01:a1:bd:a9:2a:ce:05:b5:82:ca:
96:5f:fc:80:f1:dd:17:8b:d1:f5:00:ce:63:f8:94:
4a:1e:ff:af:12:8f:45:05:a1:a4:73:43:ff:16:9e:
0b:4d:b1:57:fb:b8:31:28:ff:b8:b4:c3:9e:51:13:
ba:8a:91:56:04:bf:ed:f1:1f:60:c4:48:af:6a:6b:
7e:53:67:07:38:ef:d0:78:54:c4:f2:9e:c6:4f:d1:
dd:5c:83:10:88:77:b4:73:0e:07:14:17:56:ec:47:
5f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:16:FD:48:4B:04:50:63:C4:CC:0D:D5:01:A5:69:36:99:C8:C7:AA
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/DBb9SEsEUGPEzA3VAaVpNpnIx6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.246.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:30:2a:86:d7:22:6f:fc:7c:f1:01:51:9b:5e:ad:ad:4e:b5:
08:0c:d6:82:e2:64:ff:1e:a3:9e:40:3f:e2:ef:b5:a8:7f:01:
ee:d2:af:03:7b:7a:2d:30:14:28:36:a3:11:8a:c8:34:ac:1f:
80:b3:80:9c:3a:46:31:d7:03:7c:f3:47:ee:d3:71:98:9b:f8:
40:4a:35:4c:8c:d3:6d:97:58:d2:7a:2e:ec:0b:57:b0:43:47:
b9:41:c5:90:23:77:e2:f8:cd:3f:7b:48:ec:e0:0c:ae:f5:bc:
fd:db:80:e3:a6:fb:9c:8c:7d:54:29:94:e2:7c:4e:bd:f5:7d:
f3:0d:47:3e:97:73:6f:d9:1e:07:4b:75:c5:1a:d1:c2:96:e8:
ff:0f:9d:74:50:5e:6c:cf:9b:43:81:e5:95:b1:f5:79:e4:62:
0a:64:8c:e8:ed:34:fe:75:0d:75:24:d4:b7:6e:d9:82:27:7b:
b9:ce:46:c5:eb:db:29:91:b4:df:fa:38:87:5a:a0:31:c8:a1:
b9:72:7a:3c:53:29:7a:0e:93:4c:2b:ae:ac:55:b9:9d:42:22:
59:63:07:44:c3:78:e0:38:10:90:1b:7e:67:11:e8:d7:d7:79:
7b:35:b9:67:2b:d7:6f:51:ba:ec:d9:b7:cb:99:34:b6:e2:bb:
2e:33:11:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:57 2024 by rpki-client on console-ams.rpki-client.org