Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/_I9uS4yjm1rKcA0MUNbT6bJRTmU.roa
File: _I9uS4yjm1rKcA0MUNbT6bJRTmU.roa (raw, json)
Hash identifier: xmJx1JSqM17V8l9WeSw8atwMgsyL32r7DsDETe0vGdo=
Subject key identifier: FC:8F:6E:4B:8C:A3:9B:5A:CA:70:0D:0C:50:D6:D3:E9:B2:51:4E:65
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 0191EC022354C132F1670C3B34C19A06340E
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/_I9uS4yjm1rKcA0MUNbT6bJRTmU.roa
Signing time: Fri 13 Sep 2024 15:30:48 +0000
ROA not before: Fri 13 Sep 2024 15:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14178
IP address blocks: 45.156.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 14 Sep 2024 03:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ec:02:23:54:c1:32:f1:67:0c:3b:34:c1:9a:06:34:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Sep 13 15:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc8f6e4b8ca39b5aca700d0c50d6d3e9b2514e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:13:f8:08:51:4c:92:4c:3c:a8:70:33:0f:5c:
38:94:ce:8f:db:83:b2:cb:04:b1:02:76:af:66:7e:
b2:d7:f3:e7:3d:6f:7d:10:2f:b0:0a:25:8f:b1:1b:
a3:d2:43:d0:6a:eb:e8:6f:2b:3a:e4:45:51:2d:1d:
4b:a3:ce:b0:12:16:c6:8f:fb:c1:1d:10:97:25:7c:
86:a3:dc:95:4a:aa:c0:8c:07:01:23:85:98:f4:3e:
e4:00:e3:6a:cf:4c:fd:ce:2b:bb:c5:5e:75:47:1d:
b9:62:32:b3:70:e2:46:b6:d8:a7:21:66:58:c5:2f:
45:75:fa:5d:19:b6:56:d2:db:83:a8:4b:b4:93:bd:
3c:6f:a8:75:3f:f6:f1:a6:09:72:3f:a1:50:95:36:
50:b1:e4:43:42:ed:dc:2f:7e:cf:03:37:75:8f:81:
4f:02:92:21:9f:af:ee:39:9c:d8:80:66:9a:73:39:
87:8e:11:4f:48:27:49:bc:55:1c:01:60:3f:dc:7e:
98:e3:14:68:43:ee:13:64:8e:0d:96:3b:94:75:18:
4d:06:d0:82:55:85:9c:f5:3d:2d:92:7d:a9:12:49:
69:de:15:b9:a2:aa:99:af:c0:75:4d:39:90:39:51:
c7:aa:f3:d6:b6:0b:9b:52:30:29:42:5e:1c:2c:d1:
01:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8F:6E:4B:8C:A3:9B:5A:CA:70:0D:0C:50:D6:D3:E9:B2:51:4E:65
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/_I9uS4yjm1rKcA0MUNbT6bJRTmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.223.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:74:cf:19:cf:99:6d:2c:28:7b:4f:b5:3e:d5:e2:03:c6:3b:
1e:ca:30:01:0c:13:7f:d2:3d:30:dc:31:2d:03:70:29:9a:8b:
34:f2:69:2d:60:0d:3a:34:38:df:4f:69:c8:b4:13:48:30:bf:
8a:db:4e:82:8d:cd:b8:47:8e:c7:9d:a6:ee:9d:4e:2e:b6:48:
fa:39:e3:0a:73:61:35:ce:6d:dc:d4:b4:bf:44:59:b9:32:72:
6d:bb:5b:54:26:15:78:0b:ee:ee:0f:27:33:51:cc:22:ec:19:
ce:bf:b7:be:d1:64:47:29:63:df:7d:3c:94:10:ff:8e:84:2e:
f5:bb:88:41:87:3b:63:9a:d9:bd:f8:0f:e1:e7:45:fb:fa:2b:
90:a7:44:11:11:b7:eb:43:cd:94:31:67:54:7b:55:86:e5:21:
30:16:b1:3c:1a:ea:82:98:64:6d:84:40:33:b1:75:0d:31:5d:
25:7d:77:3f:07:46:49:b7:60:e8:75:d4:1e:6d:9a:90:18:d6:
7b:a1:48:7d:ce:3e:af:29:4a:d7:e9:35:16:2d:9d:c0:fe:90:
1d:85:c5:e2:d3:19:d4:be:70:2b:2a:ef:29:7d:e7:1c:55:7b:
e3:83:d7:7c:dc:af:d6:4a:28:c2:fb:e6:50:bf:b9:5b:17:c3:
e4:60:07:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 14 07:20:41 2024 by rpki-client on console-ams.rpki-client.org