Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/4dxFvDICCMpkv3kBKV8LnnVona8.roa
File: 4dxFvDICCMpkv3kBKV8LnnVona8.roa (raw, json)
Hash identifier: +wUgMHORdpzdN2NlEwcJ3Ikbxv5uBisTQL63Viwd6G0=
Subject key identifier: E1:DC:45:BC:32:02:08:CA:64:BF:79:01:29:5F:0B:9E:75:68:9D:AF
Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial: 018C4D98792A97386DE6CFA1A024598ED242
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/4dxFvDICCMpkv3kBKV8LnnVona8.roa
Signing time: Sat 09 Dec 2023 08:01:27 +0000
ROA not before: Sat 09 Dec 2023 08:01:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.87.161.0/24 maxlen: 24
45.87.162.0/24 maxlen: 24
45.87.163.0/24 maxlen: 24
45.87.160.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4d:98:79:2a:97:38:6d:e6:cf:a1:a0:24:59:8e:d2:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
Validity
Not Before: Dec 9 08:01:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1dc45bc320208ca64bf7901295f0b9e75689daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:38:23:d3:5c:56:0a:0b:00:1b:df:35:94:1b:
40:33:4b:69:78:df:a4:4d:fc:db:e8:79:13:84:39:
24:aa:2c:c2:0e:8a:a2:de:6b:4e:be:05:4f:fb:09:
30:8b:7c:ac:93:09:ae:42:fd:23:1b:cc:9b:b8:5a:
30:17:22:e3:d8:9b:d5:e7:7e:a9:6a:9e:92:12:23:
98:39:ff:8e:c0:78:3f:c7:7f:64:30:44:53:34:21:
65:57:4c:1f:3a:51:04:f8:c4:93:6c:f6:7d:02:ed:
3d:96:ff:21:ba:4d:7f:00:2c:4b:87:e3:1c:6d:f0:
91:6d:cb:12:e7:00:df:8d:8a:e7:8c:41:6f:df:41:
c7:64:87:71:76:55:ae:a8:f5:e2:ab:18:df:f5:1f:
bf:db:93:0c:99:30:a1:c4:af:68:a5:a3:6c:6c:65:
9f:19:23:23:da:fe:1b:77:ba:ab:59:8c:bb:f5:5f:
c8:02:3b:9e:42:d3:97:55:95:c6:b6:b1:d8:34:61:
8f:6b:78:5d:16:65:dd:7f:95:9c:fa:fb:45:12:75:
4e:6f:0f:85:46:49:c6:fe:b5:b7:7a:4a:b7:f6:aa:
45:28:6f:11:33:f7:83:8b:77:21:3c:17:70:42:ed:
24:26:53:87:b9:89:55:46:e5:6d:e0:36:c8:ff:b7:
34:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DC:45:BC:32:02:08:CA:64:BF:79:01:29:5F:0B:9E:75:68:9D:AF
X509v3 Authority Key Identifier:
keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/4dxFvDICCMpkv3kBKV8LnnVona8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.160.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:f6:f7:a8:75:30:2c:a6:42:97:f0:cd:21:d5:89:3a:a4:4d:
39:9d:69:98:7b:da:3d:d2:0f:ad:c3:f7:f5:bb:ea:39:58:ee:
a3:d9:b9:76:01:d4:de:92:7e:d7:d8:a4:f7:7a:ea:36:0e:88:
45:e1:51:86:af:2e:8b:31:aa:5d:e7:5e:ec:46:2b:c3:61:f9:
8c:2b:ad:0b:f9:9d:1d:af:73:a9:a0:72:1b:20:3f:41:7e:4e:
30:c7:d1:0e:5f:75:14:5f:3d:b0:62:c5:90:4e:ad:05:c1:82:
d6:5b:df:ee:08:64:7a:4d:64:24:06:eb:c2:52:45:d0:5a:fd:
b9:26:be:ec:9c:05:57:70:bb:cc:7d:9d:95:f7:68:e0:b7:8a:
5f:87:93:4e:47:4b:2f:53:68:c6:91:54:8b:bd:d0:e4:2f:ab:
48:54:1b:0f:df:b4:4e:54:2a:81:e0:fd:71:2f:fc:ac:21:5b:
ec:ee:73:19:08:f8:83:d0:f2:2d:0b:ef:52:96:ef:9e:8e:a6:
f0:b1:11:d3:fd:f6:7f:95:3f:4a:f9:1e:e8:26:16:e1:75:b0:
24:6e:ed:ed:89:ee:88:42:f6:eb:5e:34:80:f6:54:e1:fc:34:
1e:75:e9:b6:35:c8:c8:5e:2b:13:22:bf:d0:6f:5e:a0:80:90:
9e:c7:94:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:19:20 2024 by rpki-client on console-fra.rpki-client.org