Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/fnxUdyImhIQ7rzmI6UCuc11PZW8.roa
File: fnxUdyImhIQ7rzmI6UCuc11PZW8.roa (raw, json)
Hash identifier: t+FjFBXWvuoKqrR1CuEt7Dtv0DWJvSAhzMYZQP7BLas=
Subject key identifier: 7E:7C:54:77:22:26:84:84:3B:AF:39:88:E9:40:AE:73:5D:4F:65:6F
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018B5A78EC70BE1709CBB73EB535DDA43151
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/fnxUdyImhIQ7rzmI6UCuc11PZW8.roa
Signing time: Mon 23 Oct 2023 02:59:16 +0000
ROA not before: Mon 23 Oct 2023 02:59:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212815
IP address blocks: 45.134.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Nov 2023 15:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5a:78:ec:70:be:17:09:cb:b7:3e:b5:35:dd:a4:31:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Oct 23 02:59:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e7c5477222684843baf3988e940ae735d4f656f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:62:56:f0:0c:2b:2c:44:c2:2d:a0:8b:2f:39:
90:0d:3c:36:cf:9b:17:79:e4:c2:a0:73:6b:60:6f:
28:ca:a7:60:7e:0d:95:33:63:f0:21:36:e5:d0:91:
da:dc:55:87:43:12:f0:57:e5:fd:75:4c:3b:a3:b2:
10:25:bf:0d:d7:99:5f:aa:b5:ad:69:09:b6:a0:58:
79:0f:7d:f5:e0:96:58:83:49:cb:d9:9d:a6:d3:65:
52:b1:09:0f:9f:1a:41:8c:a7:70:88:87:71:31:0a:
14:f1:27:32:9e:e6:ea:e7:90:ee:bf:72:7f:5a:e9:
0a:58:71:be:04:ca:57:14:fc:d9:6b:fe:45:3c:76:
26:7f:49:bd:ab:33:f7:e7:54:3e:9c:ef:3f:e7:1c:
91:e9:52:2a:d0:57:60:b0:ce:70:8d:49:b0:ae:2f:
57:17:7a:15:d9:a1:4b:f1:aa:d5:f5:34:24:ac:e3:
60:2b:56:a9:51:27:79:9f:61:37:76:4c:fd:9e:4e:
5a:5c:83:cb:4d:2d:f4:6b:c8:be:1c:c2:18:5e:9f:
2e:0e:5b:50:24:4f:9f:51:00:d6:94:21:69:e9:26:
8e:ad:c0:bf:9a:90:34:65:00:2e:77:2f:f8:58:f7:
23:8b:83:cf:50:66:43:5c:a6:1f:d1:8e:7e:6a:5b:
b2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7C:54:77:22:26:84:84:3B:AF:39:88:E9:40:AE:73:5D:4F:65:6F
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/fnxUdyImhIQ7rzmI6UCuc11PZW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.144.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:a1:e8:f2:2f:88:59:c1:8f:e0:0b:9b:3d:85:af:e2:ca:4b:
df:52:95:a5:fa:75:22:b5:8c:7f:ed:bc:08:92:67:43:d3:8a:
9c:cc:8d:cf:ce:8c:c7:4f:4f:cd:6b:f7:39:73:cd:f8:f4:50:
8c:c5:4e:cd:b2:90:ce:45:d8:05:d0:be:86:88:8a:bb:9c:14:
11:2e:51:1e:5f:04:3e:b4:17:8f:3f:59:25:5f:78:44:d8:03:
9c:7f:79:ed:73:a5:e7:9f:fd:bc:1f:48:0e:90:ad:71:55:00:
0e:ec:9c:4e:03:4a:75:0a:d9:49:71:ac:8b:70:c6:ab:8d:ba:
0e:f0:09:2f:7c:91:e4:ac:f0:f4:87:50:b2:19:ac:04:0b:7d:
4b:65:0c:cc:70:bb:a8:d6:c7:80:43:a9:39:76:48:51:ff:30:
3b:db:03:54:4d:28:94:e1:9f:f1:31:34:94:64:51:2e:82:4a:
f4:71:13:5b:e6:03:5d:ee:ac:03:b1:14:7e:c0:59:bf:f4:3f:
8d:a4:e2:46:37:9d:7b:ba:b1:d7:1b:e0:28:47:88:e1:b0:8c:
25:f3:8a:98:4c:44:98:7f:e5:a6:18:44:a3:6e:92:d9:66:eb:
60:db:61:58:97:05:a3:be:97:67:c5:a1:c3:e7:ec:d6:6d:90:
8b:9c:c2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:50 2024 by rpki-client on console-fra.rpki-client.org