Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/qV4U_jkbrogXR3ej9DxmDq4-fwo.roa
File: qV4U_jkbrogXR3ej9DxmDq4-fwo.roa (raw, json)
Hash identifier: Bdd5EUgVWIz1X+5aNk2qXB2deHakyYBK/qPa8WB8eh0=
Subject key identifier: A9:5E:14:FE:39:1B:AE:88:17:47:77:A3:F4:3C:66:0E:AE:3E:7F:0A
Certificate issuer: /CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Certificate serial: 01857246AE9BD3B7ACF264EA83B6E54CAFD9
Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/qV4U_jkbrogXR3ej9DxmDq4-fwo.roa
Signing time: Mon 02 Jan 2023 11:38:32 +0000
ROA not before: Mon 02 Jan 2023 11:38:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207348
IP address blocks: 45.142.8.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Feb 2023 10:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:ae:9b:d3:b7:ac:f2:64:ea:83:b6:e5:4c:af:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Validity
Not Before: Jan 2 11:38:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a95e14fe391bae88174777a3f43c660eae3e7f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:96:49:4f:21:d8:12:0a:bc:84:4c:4c:c8:61:
67:ee:e1:12:75:42:bf:e3:34:db:ac:78:83:9b:3f:
d9:57:9b:ca:ea:00:e3:7d:a6:d5:08:76:aa:9e:d2:
99:2c:4e:19:b2:8f:30:bf:90:9f:27:7c:f9:1c:6a:
7e:30:ad:9b:6f:c0:e9:e7:13:c0:aa:e1:bb:8f:92:
77:53:89:89:c9:51:5c:b0:4b:bd:e0:65:a8:ca:00:
2f:fe:e0:b8:b7:85:b7:19:a0:d1:00:91:03:b9:57:
10:6d:7a:89:c2:64:aa:5c:1f:a7:24:06:5c:26:31:
e6:ec:d2:65:2e:d8:89:86:54:b4:aa:38:19:e8:df:
42:f4:9f:3d:51:28:a3:7e:b0:9a:a5:11:29:a1:f9:
00:6e:d4:48:09:bc:00:62:09:90:91:8a:3f:97:26:
7d:f5:7c:41:48:a6:e8:1a:b3:d1:4c:15:ab:83:f8:
5a:a9:fb:af:03:cf:99:e6:46:71:6d:42:8c:a7:85:
0f:82:f4:fd:ff:b4:17:52:d7:f1:bd:ee:37:c0:9f:
c2:8a:5e:ab:9b:41:cc:54:ff:b3:91:16:fc:e3:8d:
3e:d4:fe:75:3f:96:f6:cb:a5:f6:6d:11:3c:8e:97:
ef:0d:b7:ea:8c:56:f1:3e:ef:6d:bf:4f:11:f9:90:
87:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5E:14:FE:39:1B:AE:88:17:47:77:A3:F4:3C:66:0E:AE:3E:7F:0A
X509v3 Authority Key Identifier:
keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/qV4U_jkbrogXR3ej9DxmDq4-fwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.8.0/22
Signature Algorithm: sha256WithRSAEncryption
63:74:d2:cb:9b:ce:09:da:3d:83:45:0c:3d:be:47:57:6f:b4:
bf:7d:9c:d4:88:a7:98:15:a6:80:0c:a6:e3:49:5f:80:08:9e:
a5:f2:e9:b3:91:ad:5b:52:86:c1:80:9c:af:ed:06:26:1d:ef:
30:cc:57:e4:e4:22:f5:56:59:72:bc:ac:5a:56:27:5b:f2:14:
99:d8:e4:8c:00:59:44:2a:4e:16:ba:17:96:c6:5e:24:ae:c8:
f9:b1:14:3e:14:ad:b6:9a:8c:5e:81:c5:eb:0a:2c:34:5c:93:
4a:fa:27:43:5f:5a:e0:51:a7:7c:a5:5c:9d:67:f7:6a:77:ed:
8d:98:34:98:8b:ae:9e:35:93:80:71:12:42:08:36:43:e4:23:
de:f1:99:dc:22:13:c8:7b:bb:da:0f:4e:5c:71:4c:a2:cc:11:
48:71:d6:9b:d6:f0:99:fe:e4:6c:b4:33:6e:ca:8f:9a:ce:5c:
b9:95:e8:28:cb:08:a8:75:4a:0a:4b:bb:51:9b:d7:12:a6:fa:
98:11:48:1a:b7:b3:da:dc:16:0b:f9:90:15:ee:8c:83:cd:98:
22:56:d2:31:3a:10:65:3b:49:36:cc:68:c5:96:3a:c6:51:cb:
73:f2:e2:76:c1:cb:ab:81:a2:59:2d:19:73:26:7d:82:fd:25:
b2:32:e2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:11 2024 by rpki-client on console-fra.rpki-client.org