Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/n8t0qY8_V4hIua5ZdXvJygG-qcs.roa
File: n8t0qY8_V4hIua5ZdXvJygG-qcs.roa (raw, json)
Hash identifier: 333NKBbBYG27GWXaeU4dWoQv2XeeO8aS7H6hFOaCYFM=
Subject key identifier: 9F:CB:74:A9:8F:3F:57:88:48:B9:AE:59:75:7B:C9:CA:01:BE:A9:CB
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 0185E2EA321292A7091F1447AFD424BCCD51
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/n8t0qY8_V4hIua5ZdXvJygG-qcs.roa
Signing time: Tue 24 Jan 2023 08:34:37 +0000
ROA not before: Tue 24 Jan 2023 08:34:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200180
IP address blocks: 45.155.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e2:ea:32:12:92:a7:09:1f:14:47:af:d4:24:bc:cd:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Jan 24 08:34:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fcb74a98f3f578848b9ae59757bc9ca01bea9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6b:bb:9a:0d:12:be:53:43:23:c8:d8:cb:ec:
6b:1e:f9:66:34:ce:4f:d4:4d:4a:6c:17:84:83:99:
79:c4:2a:0e:99:14:8e:8c:e6:18:60:75:bc:f7:2d:
96:7e:15:69:97:b0:60:1f:60:a7:23:13:b6:77:37:
4b:0a:ad:7f:0c:ae:a5:91:eb:d9:4a:cb:63:f5:17:
76:3b:86:e4:64:b7:81:fa:99:1b:88:37:e0:97:e7:
9e:ae:4f:3c:c8:c5:4b:86:39:8d:ee:ab:75:21:14:
ec:f4:e0:fb:eb:2a:ed:bf:55:a8:2c:e5:33:56:1a:
d1:e3:6b:e4:ee:d8:2b:4e:b7:9c:cf:7c:68:e7:93:
d8:b6:59:f2:fd:ea:73:27:c2:a1:d2:4b:07:ea:89:
7c:b3:25:e7:41:15:b1:06:05:3e:b1:fa:6d:91:bd:
29:2e:b2:70:a1:cf:ba:b6:53:2b:d5:ee:17:63:f7:
9a:60:63:3c:78:d5:98:34:9e:ad:58:8f:45:bf:79:
09:9c:ef:7f:b4:2c:a7:b3:69:1a:33:0e:3c:40:f5:
43:67:da:96:e8:fd:62:55:0c:ce:86:1b:2f:4f:73:
3b:f0:9c:28:fb:fe:e8:b4:63:8f:44:eb:07:13:8a:
f3:39:1e:38:47:8d:33:0c:60:18:38:03:89:0c:57:
98:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CB:74:A9:8F:3F:57:88:48:B9:AE:59:75:7B:C9:CA:01:BE:A9:CB
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/n8t0qY8_V4hIua5ZdXvJygG-qcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.164.0/24
Signature Algorithm: sha256WithRSAEncryption
38:77:a7:a9:70:25:c1:79:6d:18:d0:ce:a2:fe:0b:2a:9d:45:
4e:44:7b:b6:b9:74:19:1d:28:6e:af:89:40:e6:3a:98:d9:57:
e4:7e:9d:64:19:95:a2:09:b8:7a:bc:ee:35:ad:66:99:49:fb:
b5:da:73:c1:e1:27:ec:bc:6f:fd:da:23:49:ac:58:8f:d8:eb:
a2:72:d5:a8:a0:f5:e4:2d:ed:a9:30:1e:8f:41:d3:fe:10:52:
5c:50:b4:54:ab:2d:68:20:be:3f:1c:81:c0:10:7a:e8:7a:dd:
49:6b:50:71:bd:52:f4:01:6a:a8:e8:c0:bd:e7:09:c7:17:0a:
ec:6d:fa:67:ee:84:c5:54:62:67:ad:a1:91:66:2f:d0:ad:e3:
0a:a6:ff:df:4a:37:51:b2:61:05:a0:6e:ea:c9:a4:7c:fd:b9:
0d:4a:d2:5d:d4:e2:79:f1:58:7b:36:be:a4:be:3e:c6:d0:a7:
c7:db:27:4d:9d:1f:85:06:6f:6f:72:31:5c:37:29:e4:be:50:
95:55:95:34:13:54:eb:6e:8e:1c:15:88:29:12:82:28:a8:bb:
fa:e0:78:39:46:fd:38:13:74:28:41:dc:09:61:34:5a:00:f0:
17:2a:3d:cb:62:6f:d4:04:01:19:fc:87:5f:b5:38:41:e8:c8:
a9:1f:c0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:55 2024 by rpki-client on console-fra.rpki-client.org