Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/PL8TsUNRd42wzjWnQrS1iyBfit8.roa
File: PL8TsUNRd42wzjWnQrS1iyBfit8.roa (raw, json)
Hash identifier: S+0DaBOE/BqdbB8rH8k2j+H5/vvMEXL0N5AYURgQqLU=
Subject key identifier: 3C:BF:13:B1:43:51:77:8D:B0:CE:35:A7:42:B4:B5:8B:20:5F:8A:DF
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 018EB2932F8182169EA74B9461FF82B5216B
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/PL8TsUNRd42wzjWnQrS1iyBfit8.roa
Signing time: Sat 06 Apr 2024 08:42:54 +0000
ROA not before: Sat 06 Apr 2024 08:42:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57844
IP address blocks: 45.141.208.0/22 maxlen: 24
45.150.8.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Apr 2024 06:38:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b2:93:2f:81:82:16:9e:a7:4b:94:61:ff:82:b5:21:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Apr 6 08:42:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3cbf13b14351778db0ce35a742b4b58b205f8adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:21:5e:f5:bb:1f:eb:03:89:53:d6:e3:4a:68:
4c:d2:1a:db:1d:c6:d2:22:90:dd:e7:c1:2c:a8:5f:
25:93:22:7f:6b:7e:4a:a0:52:3d:c3:27:13:d9:4c:
4c:93:4d:a1:bf:f1:7f:2d:cc:c9:ee:b6:74:2e:30:
7b:b2:86:1a:8a:2d:dc:47:32:6b:be:f6:95:11:21:
18:3e:34:17:ba:c3:5f:06:e7:5d:28:79:db:30:d6:
8f:80:87:de:74:bc:dd:da:0b:33:0b:9d:9f:14:55:
33:01:1d:c3:1e:c0:12:d8:77:0c:aa:2e:f0:a2:0f:
55:83:38:9f:90:09:55:e0:69:68:c5:8c:25:65:64:
16:63:08:4f:63:15:98:fb:f1:a3:63:47:c2:93:a6:
43:c5:bd:f1:cc:85:10:87:02:f6:12:3b:af:f0:cc:
9a:ca:6e:cf:1a:46:52:9b:5e:6d:62:0a:49:09:aa:
dd:cb:54:9a:55:d2:41:1e:22:48:95:b0:6e:5f:e3:
00:95:87:01:e7:7b:dd:fd:f9:09:9b:ba:59:08:44:
09:d1:64:0e:5f:a4:1d:f3:10:6d:a1:56:7b:a3:f2:
4e:33:9e:31:77:f1:f3:0f:9f:02:b9:a2:d2:8b:30:
50:95:61:13:ce:7b:a1:ba:d8:91:8c:99:f7:4e:0c:
03:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BF:13:B1:43:51:77:8D:B0:CE:35:A7:42:B4:B5:8B:20:5F:8A:DF
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/PL8TsUNRd42wzjWnQrS1iyBfit8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.208.0/22
45.150.8.0/22
Signature Algorithm: sha256WithRSAEncryption
09:b3:7d:50:90:5f:46:cd:52:0f:c0:06:be:b1:f4:e6:0d:5b:
b0:6f:89:69:f1:e2:cb:9f:4c:3b:5a:7b:72:44:71:5d:b1:14:
df:4a:29:3f:cc:bf:07:58:6e:ba:c2:a7:d2:37:73:b6:c4:73:
43:f8:07:e6:5d:f7:9f:1e:1c:d7:8f:31:c4:1f:3f:1c:94:a2:
e9:04:69:ea:a3:4b:af:d7:ca:c3:e0:ce:a0:25:e0:3c:97:78:
b4:f9:40:4b:82:83:e2:e3:f3:4d:95:1c:c9:f8:d3:12:ff:ef:
dc:d4:9a:47:fc:7f:f6:0a:4f:ae:c6:9f:6f:43:2e:f4:f9:d5:
dc:7a:6d:a7:fd:76:95:a4:e6:92:f2:2a:7c:c6:59:18:ba:94:
98:84:b7:14:bc:1c:66:e3:23:c0:9c:92:3c:02:99:aa:2a:fb:
9a:cd:9b:e0:a9:15:b5:ba:03:72:7b:b3:a4:64:45:c8:0f:51:
00:10:cb:09:5c:96:23:b7:8d:5e:6c:48:26:15:ad:1f:33:b9:
62:79:c7:41:e6:16:69:8b:64:e7:db:86:98:1b:2b:7a:fc:20:
6f:0a:05:29:2f:f2:2c:70:ff:ba:20:ed:c6:eb:64:06:1a:87:
86:9a:fa:25:19:b6:69:8e:1c:52:8d:ce:50:28:83:de:45:fa:
34:b7:2b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 8 11:23:21 2024 by rpki-client on console-ams.rpki-client.org