Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/DDzGUB3ghBuOx1zCf5IME0qexow.roa
File: DDzGUB3ghBuOx1zCf5IME0qexow.roa (raw, json)
Hash identifier: 4xCM0jwuHoHLF4sS7o5Z9AMsnJhwN3qz14+IWOoVXeM=
Subject key identifier: 0C:3C:C6:50:1D:E0:84:1B:8E:C7:5C:C2:7F:92:0C:13:4A:9E:C6:8C
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 01878E45098741B38E90CDAAA8172BF4C8C6
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/DDzGUB3ghBuOx1zCf5IME0qexow.roa
Signing time: Mon 17 Apr 2023 08:11:41 +0000
ROA not before: Mon 17 Apr 2023 08:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203446
IP address blocks: 45.143.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8e:45:09:87:41:b3:8e:90:cd:aa:a8:17:2b:f4:c8:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Apr 17 08:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c3cc6501de0841b8ec75cc27f920c134a9ec68c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:35:f0:f7:25:2f:a4:ca:6c:d4:55:44:cd:d9:
47:4d:cb:b4:9c:93:b4:6d:69:0c:51:89:58:02:2c:
99:bb:fb:c0:19:06:30:b5:7d:82:fb:f1:65:e9:0b:
be:b7:d2:51:93:78:51:e6:2f:75:7e:d0:a8:78:8c:
3f:2e:e7:24:6a:26:fd:ac:35:6b:9f:f5:99:13:4f:
2b:b8:d4:18:5d:f3:a8:51:a1:58:08:aa:34:77:c0:
a6:e0:60:6f:9d:89:4e:b7:ea:c5:64:57:5e:57:f6:
e8:e8:92:fb:dc:68:45:58:26:9a:b4:0c:59:11:de:
a7:f6:ac:5a:80:35:65:90:a6:4f:b1:b3:73:fb:57:
cf:9f:a3:b7:7a:7a:37:12:37:58:e3:f7:27:91:aa:
41:89:c3:1a:b2:53:bb:bc:d2:42:00:61:3d:4d:c9:
dc:44:7a:70:fd:3b:a2:81:5c:79:2e:47:ad:eb:81:
b5:c4:cf:3c:29:d3:7f:a3:21:96:30:b4:0d:ff:6b:
36:dd:21:48:7f:64:28:1a:a1:18:d0:0e:b3:b5:31:
8e:96:8e:e8:38:66:c7:a9:54:c7:d0:a1:cd:9b:b4:
d0:ab:10:e4:40:b0:56:95:a9:30:f5:b5:20:34:11:
42:a3:c1:ba:9a:4c:ba:9e:7b:01:25:21:62:7b:d4:
40:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:3C:C6:50:1D:E0:84:1B:8E:C7:5C:C2:7F:92:0C:13:4A:9E:C6:8C
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/DDzGUB3ghBuOx1zCf5IME0qexow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.4.0/24
Signature Algorithm: sha256WithRSAEncryption
82:b7:94:7c:ac:c5:3f:02:60:0a:b6:47:9f:f5:7e:a6:06:37:
5b:bc:9b:69:22:cd:8e:c8:05:ee:e5:20:5c:49:7b:d8:23:8d:
a2:5a:ed:53:73:3f:f5:ac:d1:8c:d3:32:76:65:80:7c:b5:14:
9c:59:56:ad:e8:24:34:f7:2e:36:71:9a:7b:da:6d:c9:bb:fb:
4f:51:c3:31:4e:38:80:e1:52:40:bd:46:27:3d:14:ec:b6:f0:
8f:cd:4e:2b:f7:78:3d:e3:04:9c:ed:07:00:81:b0:88:fd:bb:
16:79:8e:8d:33:a5:35:6f:b0:04:4a:ce:dd:c7:62:4c:b6:8b:
07:86:d8:e1:12:fe:b4:84:20:e2:64:f8:81:8d:26:c5:3a:b8:
f4:63:8d:a1:93:73:f2:c8:b1:93:80:8b:58:9d:c8:0f:71:10:
39:72:2e:88:3a:f9:18:e6:59:97:9c:e4:a9:1c:b9:a9:5d:e2:
3f:6c:c2:0b:79:a7:da:67:c7:77:e8:63:2e:b7:71:38:0d:87:
18:88:9e:23:9c:f0:f9:72:91:2d:1a:3f:b9:88:95:9d:b3:a7:
7f:9f:da:38:a9:30:22:6c:3c:9c:47:c4:ac:75:12:00:98:1b:
67:db:60:fc:99:29:03:0a:1d:db:17:38:17:c1:d3:bd:ec:d0:
c3:bb:f2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:55 2024 by rpki-client on console-fra.rpki-client.org