Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/o_spWl8HkWIYNRgvl3HYpNOX1G0.roa
File: o_spWl8HkWIYNRgvl3HYpNOX1G0.roa (raw, json)
Hash identifier: HxQRJ+c6Ljk7wBxZCZVU66DHRVWNFSv7Csih5sJ1Jbg=
Subject key identifier: A3:FB:29:5A:5F:07:91:62:18:35:18:2F:97:71:D8:A4:D3:97:D4:6D
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018CC8DFAC09F6FA4D468E499A66097E980B
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/o_spWl8HkWIYNRgvl3HYpNOX1G0.roa
Signing time: Tue 02 Jan 2024 06:32:30 +0000
ROA not before: Tue 02 Jan 2024 06:32:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212815
IP address blocks: 45.156.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jan 2024 07:54:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:ac:09:f6:fa:4d:46:8e:49:9a:66:09:7e:98:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 06:32:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3fb295a5f0791621835182f9771d8a4d397d46d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fa:a6:02:1c:a0:0c:6b:52:10:de:d6:dc:6b:
d5:f5:c5:3d:a7:86:cf:25:b8:5b:d3:cb:a0:a8:1c:
5c:32:df:33:d1:9e:40:67:25:f5:a0:f5:27:0f:80:
1e:f7:54:5a:50:2d:8c:de:25:e6:5f:a2:c5:39:13:
5d:ef:13:09:47:42:03:97:b5:0d:89:ab:f1:6b:40:
89:75:7d:c0:e9:ff:8f:45:a9:aa:0e:b4:18:86:33:
56:f7:d8:cd:0d:6f:28:c7:f9:25:66:d8:b6:79:08:
10:d8:c8:e3:a4:15:4b:b2:d1:30:68:d1:3a:bb:28:
be:79:23:33:1e:fd:d5:1f:11:61:fc:5b:54:26:ba:
a8:9f:14:ed:ae:22:bf:da:4e:c7:5c:51:df:e5:a9:
6d:d6:e2:62:88:d2:ea:d4:c2:23:cb:b5:f6:04:a4:
31:10:88:1c:46:f7:a9:8a:c8:52:49:ca:11:10:18:
0b:96:cb:c5:dd:bb:45:6b:b6:15:b3:f8:05:1c:ef:
a0:13:6a:c8:57:43:be:df:d6:c7:79:05:0a:df:1a:
f6:24:86:13:3f:51:26:e8:1e:7c:0d:25:aa:d8:0f:
e6:d0:1f:19:ac:ba:08:7e:ac:62:cc:f4:47:dc:fb:
21:f9:e3:66:12:7a:13:fc:86:07:69:0d:56:62:33:
83:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FB:29:5A:5F:07:91:62:18:35:18:2F:97:71:D8:A4:D3:97:D4:6D
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/o_spWl8HkWIYNRgvl3HYpNOX1G0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.223.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:c5:4b:94:f6:f8:59:f8:73:03:2f:c3:d5:63:e6:ca:43:a0:
b5:7c:6f:05:f1:cb:b8:c4:25:3c:09:f8:a0:de:00:6d:e7:f0:
0c:b5:1c:f3:a7:b7:3b:e0:91:ce:c9:fd:e2:30:34:0a:6b:b7:
0e:32:0d:cd:dc:f6:5f:1f:a1:c6:65:f8:a1:fd:ec:88:a9:f8:
16:83:c1:38:01:c5:b8:58:f1:9e:b7:ce:b9:d3:e7:84:2d:0e:
88:de:36:fe:de:df:72:e2:55:84:0f:ea:76:21:8a:2b:65:99:
c3:66:bb:35:28:ac:e9:5e:26:68:8f:b4:e5:8b:d5:5b:e4:84:
e2:44:df:32:f0:52:69:16:d6:ce:bc:f8:5b:12:cd:e3:8e:9c:
42:b9:ad:3f:6b:80:6a:0c:03:fd:fb:77:18:a0:d1:e4:61:76:
91:f6:b1:1b:92:c6:d0:9e:fa:18:0a:d1:34:5f:03:2d:d8:e9:
48:00:fa:93:34:75:19:2c:26:98:ed:07:3d:c9:34:c0:bb:1a:
cd:d3:da:8d:4b:14:58:87:45:f1:40:c7:6d:13:3b:4b:3a:e2:
d1:43:26:a8:88:45:f7:aa:06:d9:d1:ac:e3:79:75:a8:cb:0b:
0d:71:0c:dc:72:44:8e:b6:62:74:f4:5e:0e:1f:5e:e6:11:7f:
c3:bb:82:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 11:02:43 2024 by rpki-client on console-ams.rpki-client.org