Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/KPlIvfFfgolCTWei1JREMQIe54I.roa
File: KPlIvfFfgolCTWei1JREMQIe54I.roa (raw, json)
Hash identifier: vHf8UjUrqkk1qdydOwFxZmjk8z0ZuoeSwRijusCg6QA=
Subject key identifier: 28:F9:48:BD:F1:5F:82:89:42:4D:67:A2:D4:94:44:31:02:1E:E7:82
Certificate issuer: /CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7
Certificate serial: 018CC5012649900EADB96F692CB86442810D
Authority key identifier: F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/KPlIvfFfgolCTWei1JREMQIe54I.roa
Signing time: Mon 01 Jan 2024 12:30:36 +0000
ROA not before: Mon 01 Jan 2024 12:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206494
IP address blocks: 45.159.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jan 2024 08:18:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:26:49:90:0e:ad:b9:6f:69:2c:b8:64:42:81:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7
Validity
Not Before: Jan 1 12:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28f948bdf15f8289424d67a2d4944431021ee782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a3:81:29:2c:86:19:e7:1c:11:12:bf:7a:6a:
64:48:af:e1:09:fd:b9:be:bc:33:69:7b:43:e9:01:
7f:55:09:1f:4a:72:bf:21:47:4e:ed:bb:22:1f:ff:
40:6c:1d:5a:79:3b:72:ec:a7:5f:a8:9a:1c:5a:54:
6f:8d:1e:d9:64:ea:3f:84:9b:54:01:43:ad:9f:90:
f1:8c:37:d6:c0:a6:2f:ef:3d:11:b8:8d:1b:53:95:
15:68:74:25:c4:79:12:41:50:50:ce:9e:e4:91:7f:
39:b8:be:76:54:8a:11:1a:42:3f:84:f4:50:f7:55:
58:9f:67:14:24:cc:ec:fc:61:5c:6a:9b:de:e9:3e:
09:2f:6a:48:7a:2d:e7:5c:fa:9f:4d:21:b3:ed:45:
05:c4:32:be:9d:1b:5e:5d:77:16:19:9c:de:3b:76:
6b:55:0b:2d:ef:af:d9:4e:e2:a2:35:fb:b9:c6:8c:
a5:01:ad:c8:60:d2:d1:db:b9:24:a2:6a:c3:6a:f4:
40:74:46:38:65:cc:42:c5:3f:29:29:3a:f0:0c:eb:
15:f0:92:19:29:e4:d6:80:f9:a8:05:13:4e:bc:af:
af:3c:ad:6c:60:5e:80:b6:24:32:9d:6c:70:06:c7:
7e:46:44:17:48:c3:65:6d:6d:e3:8a:e2:b1:e6:7d:
f5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F9:48:BD:F1:5F:82:89:42:4D:67:A2:D4:94:44:31:02:1E:E7:82
X509v3 Authority Key Identifier:
keyid:F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/KPlIvfFfgolCTWei1JREMQIe54I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.187.0/24
Signature Algorithm: sha256WithRSAEncryption
12:5a:cb:58:66:81:9a:87:05:f1:00:ae:58:8e:4d:02:f2:d3:
73:bb:e4:fc:88:58:42:f6:9a:8d:31:70:14:bf:04:3d:6a:86:
f8:1d:1e:9d:16:84:3d:c8:cc:51:ff:77:e3:15:06:da:d6:36:
d1:32:b4:de:8b:27:3d:b7:c0:4b:c1:8b:41:89:71:53:26:b9:
21:c4:b6:eb:d2:0c:19:d7:fa:57:42:35:e7:27:61:40:94:74:
ad:cc:88:10:bb:2e:65:f6:bc:24:99:75:ee:d2:7b:12:f7:21:
f7:51:96:f8:59:f9:04:11:16:69:6e:80:7d:4e:f9:e8:c6:6d:
a9:b7:a5:dc:55:a9:7e:34:ac:15:43:7f:24:a2:65:4d:1e:d7:
25:e7:ec:54:1b:fc:a1:56:d4:08:08:20:40:af:71:d6:61:7a:
58:ac:da:45:66:38:ab:72:8d:1c:ae:ad:ed:25:6c:29:f4:67:
29:3d:eb:67:03:1a:8d:2e:f0:4a:4d:c6:af:51:02:5e:95:a3:
87:ba:02:69:35:1f:65:6b:f6:6b:12:4c:b0:c6:1b:be:06:0d:
81:33:3f:a5:c7:be:c2:18:57:b1:1b:6f:e7:b3:d6:f0:ef:ed:
08:cd:e1:1b:fb:ac:51:af:73:12:2f:83:92:5a:ef:44:8d:45:
dc:3d:8d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 23 12:11:39 2024 by rpki-client on console-ams.rpki-client.org