Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/H2vuJdWdh4ZEvE8qbFpNhW1B7lU.roa
File: H2vuJdWdh4ZEvE8qbFpNhW1B7lU.roa (raw, json)
Hash identifier: FhwC+omBzUrNVaE9hun1LwIaNRAR8H4YLMvAZtWGR/Y=
Subject key identifier: 1F:6B:EE:25:D5:9D:87:86:44:BC:4F:2A:6C:5A:4D:85:6D:41:EE:55
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018571DE7955769C0D8BDB059AEC00B6133C
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/H2vuJdWdh4ZEvE8qbFpNhW1B7lU.roa
Signing time: Mon 02 Jan 2023 09:44:43 +0000
ROA not before: Mon 02 Jan 2023 09:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142019
IP address blocks: 45.93.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Dec 2023 12:47:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:79:55:76:9c:0d:8b:db:05:9a:ec:00:b6:13:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 09:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f6bee25d59d878644bc4f2a6c5a4d856d41ee55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4e:79:a5:db:53:c1:0e:bb:75:21:18:db:ce:
e1:1f:43:cc:47:42:bc:93:f9:22:d9:10:e6:67:8c:
39:1e:98:ae:cb:37:54:16:21:86:6e:97:f7:7a:42:
d6:1c:45:26:00:cc:27:c0:57:49:80:58:31:f6:8a:
fa:58:7c:2d:96:36:63:ba:78:f9:ce:4a:ee:17:d5:
21:46:79:e2:63:de:17:94:31:27:cf:7c:cf:f1:de:
e1:7e:92:30:12:e8:49:26:09:fd:94:09:af:3f:2f:
ec:c0:3d:1f:90:00:b8:4b:dd:3e:41:4d:34:7a:03:
5a:55:49:27:ec:ac:52:28:5c:54:88:a9:3f:1e:6d:
21:0a:1c:4d:42:24:95:6f:86:ee:cf:e8:c6:16:b2:
f8:4f:33:85:a0:71:ac:e7:2f:b4:be:e0:19:66:00:
c4:a4:4b:da:cf:60:58:29:1d:92:81:b8:5d:59:bc:
e8:7a:3f:6f:1a:e6:20:29:85:2d:cd:b3:f2:74:59:
d5:1d:97:67:e6:71:94:ff:47:d6:61:26:00:bd:39:
45:9f:8f:57:e0:e7:d0:6d:3d:70:6e:41:c3:c1:d6:
cc:22:02:9d:5c:f2:fd:70:47:f5:43:85:66:68:46:
bb:36:39:a7:d5:7e:79:cf:1c:0a:a6:3a:0b:f9:02:
04:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6B:EE:25:D5:9D:87:86:44:BC:4F:2A:6C:5A:4D:85:6D:41:EE:55
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/H2vuJdWdh4ZEvE8qbFpNhW1B7lU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.17.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:1f:ba:ed:da:3c:01:e6:68:33:0c:64:e1:93:62:6d:dc:46:
c8:6f:b4:5b:b1:2f:a9:8c:f9:ad:cd:79:a6:b6:34:3d:cb:30:
b5:46:04:ef:a4:30:5c:ac:9b:f0:ff:eb:ac:48:fe:dd:6d:52:
e5:64:b6:83:bb:c6:cf:0f:59:6f:6b:d5:5c:86:90:6d:73:f4:
ff:ec:ba:a1:23:9e:48:e7:01:de:31:1a:e4:93:a5:75:04:64:
45:7f:5d:88:6c:2a:dd:8c:1d:fb:c2:c9:1f:8a:66:09:4a:cd:
9c:db:2d:3b:05:61:4a:af:6b:6a:48:5e:d7:75:53:b1:85:b0:
62:8f:1d:ce:7f:70:79:94:cf:72:c6:b0:60:64:a8:b0:d4:ee:
b9:bc:ca:91:dd:c4:97:e3:a3:c1:75:df:d0:8f:e6:70:31:d6:
6c:8c:1f:c8:d5:e3:de:96:0c:04:5c:65:c7:ba:8f:56:14:9f:
96:f2:13:d7:96:35:f8:74:b6:50:e8:7e:ca:0c:b8:7b:fe:b5:
1b:ce:f5:10:95:65:a0:01:81:aa:7d:d2:ec:3d:20:35:54:91:
45:99:94:5e:d8:51:fc:fc:50:52:52:2f:30:7d:fc:24:8b:30:
d6:40:09:ca:ff:33:53:06:23:71:15:a1:e9:a4:24:bc:04:ae:
91:ca:4c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:04 2024 by rpki-client on console-ams.rpki-client.org