Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/nr-7L4R518yjD3C5cY3wgfJaQlc.roa
File: nr-7L4R518yjD3C5cY3wgfJaQlc.roa (raw, json)
Hash identifier: Gl7qqGyHpbRZpLavkK4FhqQs49LKH7qnfhAEsLUcDVo=
Subject key identifier: 9E:BF:BB:2F:84:79:D7:CC:A3:0F:70:B9:71:8D:F0:81:F2:5A:42:57
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 018EDB2F31570C2013D1EA95AFBB6F289689
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/nr-7L4R518yjD3C5cY3wgfJaQlc.roa
Signing time: Sun 14 Apr 2024 05:58:06 +0000
ROA not before: Sun 14 Apr 2024 05:58:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57844
IP address blocks: 45.141.208.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Apr 2024 11:37:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:db:2f:31:57:0c:20:13:d1:ea:95:af:bb:6f:28:96:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Apr 14 05:58:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ebfbb2f8479d7cca30f70b9718df081f25a4257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:81:cb:92:f4:32:3e:6f:66:07:ec:78:4e:21:
6d:1a:5b:60:a3:35:71:9f:90:d7:40:f4:6c:aa:12:
5d:b9:2c:9c:aa:ca:9b:34:20:0e:94:6b:53:48:4c:
d1:d6:e2:82:07:47:b1:a4:87:15:b8:a2:f0:f6:21:
dd:4e:51:07:5b:df:ec:d8:bd:2a:34:59:d3:29:fe:
c7:a8:11:3d:10:9a:7a:20:07:a0:fb:1a:cf:72:2e:
44:64:b0:ef:94:6b:17:fd:06:0c:b6:01:b4:b9:9e:
02:e0:e5:47:32:8a:57:f1:ef:87:47:3f:ac:a1:2f:
c8:4e:d3:5d:72:83:98:c2:d9:9a:99:9a:f3:e0:87:
37:3b:ba:6f:f3:ec:a6:62:d5:7a:4a:80:f1:9c:49:
e2:3c:19:1e:42:16:93:58:c7:e5:3c:8c:10:ff:51:
84:73:ad:e0:1d:49:6d:35:44:47:36:2c:bd:a4:5d:
4b:be:15:93:7b:3b:a7:c4:fd:1e:c8:a4:9e:37:a3:
7a:77:1e:2a:d5:c1:e1:92:70:b2:dd:26:6d:f9:a8:
59:1a:01:2d:fe:37:26:69:2f:03:ec:54:01:c0:01:
92:a3:82:41:df:2b:17:de:31:19:4f:61:40:c7:47:
ac:8c:78:03:11:a9:18:4a:c0:73:a1:25:a6:25:12:
2c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:BF:BB:2F:84:79:D7:CC:A3:0F:70:B9:71:8D:F0:81:F2:5A:42:57
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/nr-7L4R518yjD3C5cY3wgfJaQlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.208.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:68:d0:d8:8c:a8:f4:3c:3b:a8:07:6d:d5:98:40:92:b0:dd:
77:8a:3b:1a:80:f5:80:33:78:9b:7f:b5:aa:ef:50:6e:11:65:
0e:6a:00:7f:22:10:38:81:c9:e0:e2:2a:17:70:db:ca:cb:4e:
1a:f1:86:a1:83:fa:73:c9:97:75:35:e5:29:c3:65:31:24:96:
56:b5:81:cb:a0:1f:20:f9:19:1e:1d:5d:21:0d:43:7d:d3:bb:
c1:e7:00:2d:ca:e0:32:df:c2:79:96:e9:a9:09:01:ec:fc:6e:
0a:18:a6:de:59:32:cd:61:f1:29:6c:6a:ae:8e:e3:c8:c6:02:
44:90:09:bd:eb:b2:5e:68:2c:66:b5:e3:99:64:24:44:87:e2:
a4:d8:02:f0:32:19:ea:7e:94:ae:b6:a0:66:40:cf:e5:f8:a7:
f4:36:7f:e5:1f:55:2f:15:1d:c2:c4:6c:79:94:04:0f:62:3d:
cd:9e:25:60:51:da:3c:32:6b:03:a3:c7:85:cb:e1:e2:19:8c:
76:ba:5a:cf:bf:14:c9:33:56:af:86:f2:6c:ed:db:33:28:40:
fa:ac:c3:fc:50:2d:16:9e:d4:2a:9f:43:3e:df:4a:02:03:f9:
1e:15:cf:73:56:2c:d3:79:02:7f:0b:25:ba:8c:e7:1d:86:60:
7c:00:b6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 14 14:03:48 2024 by rpki-client on console-ams.rpki-client.org