Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/NBq1JLv_9cJmBIZJPO-hTkAX5Bw.roa
File: NBq1JLv_9cJmBIZJPO-hTkAX5Bw.roa (raw, json)
Hash identifier: TERkfbAg33YMGm3jfMNFa9OVrG9HRHZ+IaXrWa5EcwU=
Subject key identifier: 34:1A:B5:24:BB:FF:F5:C2:66:04:86:49:3C:EF:A1:4E:40:17:E4:1C
Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial: 01912152DE8BCE936F24421839543C515D78
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/NBq1JLv_9cJmBIZJPO-hTkAX5Bw.roa
Signing time: Mon 05 Aug 2024 06:56:04 +0000
ROA not before: Mon 05 Aug 2024 06:56:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 45.87.161.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 06:20:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:21:52:de:8b:ce:93:6f:24:42:18:39:54:3c:51:5d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
Validity
Not Before: Aug 5 06:56:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=341ab524bbfff5c2660486493cefa14e4017e41c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:74:34:9d:bd:a1:d8:41:06:54:db:65:38:fa:
64:d4:73:47:7a:7e:02:6e:a8:f1:b3:17:d3:6a:87:
7a:0d:78:84:12:2d:a0:ed:b5:f1:43:43:81:5f:d4:
3b:58:f9:0b:ea:f1:de:80:80:cc:dc:a9:40:dd:a1:
2d:81:20:4c:46:37:ab:10:e3:45:a8:b4:45:ed:c5:
2c:d1:21:54:e5:56:cc:9c:4e:5b:4d:34:07:e5:55:
b6:e3:9b:8f:bd:c2:6b:f2:eb:19:fb:5f:6c:10:87:
b2:16:a7:28:7e:2d:63:ac:7e:f2:20:32:3d:1c:63:
ce:88:de:be:e6:2c:ae:16:e4:1b:ae:2d:29:81:8d:
4b:98:b4:2d:fa:06:f8:10:dc:f6:90:57:af:3a:ad:
a6:c5:ac:c9:0b:5e:6f:74:63:4b:e8:c4:41:a1:11:
2e:d2:65:16:42:e4:55:ed:81:4b:73:ec:c3:71:2f:
79:fd:42:df:63:f6:ad:b2:00:a2:12:36:f5:11:c1:
f3:13:63:e9:46:bd:c5:40:b1:c2:65:d3:c6:2b:b3:
ab:77:40:dc:b9:5a:05:6f:c6:90:67:13:d8:61:3c:
61:6a:6b:8c:64:9a:df:32:29:13:bd:97:ff:b5:ee:
62:fd:28:cd:c5:3c:b4:77:04:d1:8f:52:94:04:f9:
4c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:1A:B5:24:BB:FF:F5:C2:66:04:86:49:3C:EF:A1:4E:40:17:E4:1C
X509v3 Authority Key Identifier:
keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/NBq1JLv_9cJmBIZJPO-hTkAX5Bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.161.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:42:fa:02:61:b4:e7:5c:27:4c:2c:a1:3d:86:8d:ee:a8:e9:
66:20:d4:ca:1a:f7:6a:38:c6:4d:ab:c4:da:13:fb:e0:61:2d:
e1:fd:68:c3:38:b5:63:e2:be:79:49:dd:6f:cc:64:35:4c:8c:
eb:dc:1d:e8:b7:c8:b1:dd:ab:e6:e9:b0:3b:aa:9b:bd:62:f7:
11:10:fb:03:71:3c:79:cc:b7:92:a8:ae:86:30:51:52:18:ca:
bd:cc:d6:4f:fc:60:60:df:7a:66:4b:a2:32:57:55:34:e5:2f:
7c:58:df:c5:63:56:ad:65:13:d3:72:31:a8:3b:16:d4:10:8b:
c2:eb:8d:b2:0e:b3:75:e9:42:bd:99:c5:6b:bb:36:b3:fb:d2:
8c:d4:18:7d:c2:4d:59:45:b9:1f:3c:8a:cc:89:ac:57:11:32:
98:35:85:8f:b3:d5:c2:76:8a:88:03:99:99:9f:a8:69:10:b2:
cc:bc:7a:3d:1c:fe:6e:2c:f4:87:42:93:24:e7:b7:da:3c:a5:
24:ea:27:e8:1d:31:e7:8d:79:fa:f8:f8:30:fc:54:be:4c:f1:
de:30:16:c8:6c:7c:bf:25:6e:a4:99:b5:bb:16:6f:77:f9:93:
31:3c:bf:fc:a4:9c:59:71:b4:16:8f:f6:4b:2c:36:82:5b:5f:
82:e1:5a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:58 2025 by rpki-client