Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/q67Tws0FTFJ68_cKW_SGC8m5DD0.roa
File: q67Tws0FTFJ68_cKW_SGC8m5DD0.roa (raw, json)
Hash identifier: Hz7f43R1fY0txvZbDQLks2vqTf1R0/SkhqCaDk/04+s=
Subject key identifier: AB:AE:D3:C2:CD:05:4C:52:7A:F3:F7:0A:5B:F4:86:0B:C9:B9:0C:3D
Certificate issuer: /CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7
Certificate serial: 018CC5012591150B733394FC96FB250D1186
Authority key identifier: F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/q67Tws0FTFJ68_cKW_SGC8m5DD0.roa
Signing time: Mon 01 Jan 2024 12:30:35 +0000
ROA not before: Mon 01 Jan 2024 12:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43824
IP address blocks: 45.159.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jan 2024 08:16:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:25:91:15:0b:73:33:94:fc:96:fb:25:0d:11:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7
Validity
Not Before: Jan 1 12:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=abaed3c2cd054c527af3f70a5bf4860bc9b90c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:53:d3:d3:0d:20:a5:13:3f:64:fd:07:fe:f2:
3d:f2:30:76:6a:5b:fc:b0:5d:79:75:eb:f4:92:28:
cd:80:bd:61:2b:8e:d7:ff:5a:46:06:95:38:5a:51:
dc:36:dd:73:18:72:c1:ba:22:42:10:53:65:15:d4:
58:64:83:74:02:72:07:cf:fb:a2:c6:fa:47:71:12:
57:6f:cf:2a:bc:0f:15:0c:45:ec:b3:6e:57:5e:58:
55:5f:21:df:20:b4:be:89:ca:36:74:78:1e:bd:e7:
5a:c3:0d:e8:7f:15:41:93:94:c4:f5:40:21:3b:4d:
c6:0e:e4:ff:44:ac:f8:7d:37:c9:cc:57:4c:c1:34:
b4:de:72:7f:8b:b8:a8:71:ba:37:fc:e6:83:12:7e:
4c:e8:42:62:1b:98:f5:13:37:2d:01:51:b3:65:f5:
e4:3e:11:6c:2a:28:b9:3c:61:7e:1f:dc:20:d9:8e:
5c:b5:b9:a7:f0:6d:d3:2e:f5:67:1d:9c:d6:db:b4:
35:8b:f4:89:fc:1d:16:77:69:7d:a6:cc:93:19:94:
bd:f0:d8:45:7f:76:45:dc:89:df:ff:22:d3:07:29:
18:45:1f:87:1a:d1:45:d0:df:4b:39:ce:cd:e5:b9:
da:b4:94:a2:60:0f:62:bb:ed:a6:e0:a7:d1:94:84:
51:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AE:D3:C2:CD:05:4C:52:7A:F3:F7:0A:5B:F4:86:0B:C9:B9:0C:3D
X509v3 Authority Key Identifier:
keyid:F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/q67Tws0FTFJ68_cKW_SGC8m5DD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.187.0/24
Signature Algorithm: sha256WithRSAEncryption
14:68:76:6e:13:76:c0:3e:a5:7d:ce:12:9a:01:16:fb:81:40:
23:95:08:b4:9e:b1:e0:66:f1:f9:ba:80:30:70:0d:1e:9c:24:
62:cd:f3:6a:23:81:dd:05:53:82:48:a5:dc:7e:9c:af:37:f6:
e8:08:09:74:4d:35:51:98:c9:1a:25:6f:16:d2:d7:b7:7c:5e:
f1:ad:77:58:cc:5b:44:84:a3:ca:4e:d7:3c:d0:72:11:c0:c4:
3d:89:83:cf:fe:df:82:fd:a0:f2:c0:a9:1c:12:f2:4e:c3:ff:
68:d1:71:f9:8e:be:bf:be:97:56:7a:35:38:f3:bf:e7:39:1d:
19:e7:af:e3:3c:8d:f8:59:e5:c2:3c:84:fd:3a:8b:ac:01:7a:
76:8f:97:f5:20:77:c6:ab:0c:44:da:b5:d7:97:30:a6:13:e7:
a8:34:d1:82:3d:0d:a0:5a:00:2a:ff:ec:a7:b2:ed:7c:0c:a4:
df:1c:1f:40:62:13:97:d3:d5:9c:5a:be:7c:c0:08:44:b1:7c:
97:85:62:be:0d:63:fa:a3:d3:62:5b:b7:9a:7f:d4:c9:2a:8a:
a6:7d:b8:2e:68:cc:30:0f:90:5a:ad:6f:e9:a9:06:15:6c:f7:
89:b1:6d:d7:ab:74:c0:73:9d:8e:88:5e:25:c1:fa:e7:39:ff:
d1:2b:2e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 23 12:08:01 2024 by rpki-client on console-fra.rpki-client.org