Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/s8Vm2STMM_shl3uuyVj_ZIQuRYo.roa
File: s8Vm2STMM_shl3uuyVj_ZIQuRYo.roa (raw, json)
Hash identifier: Ji/cOf+T+3nnB9uwNCFf/JzwHEaOJz/zAm/Xg2/PTiE=
Subject key identifier: B3:C5:66:D9:24:CC:33:FB:21:97:7B:AE:C9:58:FF:64:84:2E:45:8A
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 018F9B8B8C77B48268010D1A89816A25E99E
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/s8Vm2STMM_shl3uuyVj_ZIQuRYo.roa
Signing time: Tue 21 May 2024 14:26:04 +0000
ROA not before: Tue 21 May 2024 14:26:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59651
IP address blocks: 45.143.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 May 2024 07:58:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9b:8b:8c:77:b4:82:68:01:0d:1a:89:81:6a:25:e9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: May 21 14:26:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3c566d924cc33fb21977baec958ff64842e458a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d2:d0:86:1a:6d:89:21:48:4b:32:32:ba:e8:
30:73:f6:b4:2b:dc:a5:22:97:78:ec:6b:94:db:cd:
36:5d:ee:9d:0b:5b:a6:f9:77:14:e0:59:0d:14:cd:
29:cb:d0:92:a8:68:d8:a1:b9:47:b4:03:c3:44:6c:
d2:7b:40:84:69:3e:b6:5d:9f:5f:bd:e8:70:5a:7e:
24:ee:61:6e:2b:48:ef:a7:a1:48:47:e0:bf:5b:70:
a4:5b:69:e1:f5:2c:12:a0:07:01:7a:fc:3f:f6:87:
c4:d4:46:ec:40:58:e1:0d:14:c6:9a:a2:fd:cc:c8:
b1:8a:13:40:c5:02:bd:fb:f1:b7:0b:ee:fe:f4:24:
88:cd:3d:7d:f2:98:82:27:3d:31:44:57:fa:2c:94:
f5:79:ac:75:2a:a1:cc:40:47:cf:eb:29:64:d8:b6:
11:a4:da:96:52:c4:d2:e0:ae:14:6f:de:6e:c6:4c:
66:f8:4b:24:0c:dc:0a:be:60:43:2f:37:8f:05:75:
22:2b:a5:f8:7c:c2:0d:6a:9b:aa:4a:dd:9c:2f:57:
9a:87:40:42:4f:3f:bb:96:c0:cc:67:e9:b9:2b:28:
3b:d7:10:2a:b7:0a:7c:f6:c2:e8:b6:70:75:2d:3e:
d0:fd:c8:28:80:5a:54:38:d8:e8:e0:bf:ab:29:1b:
cd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C5:66:D9:24:CC:33:FB:21:97:7B:AE:C9:58:FF:64:84:2E:45:8A
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/s8Vm2STMM_shl3uuyVj_ZIQuRYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.5.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:27:9d:bb:7f:ce:7c:c6:e1:4e:9e:dd:f6:28:b0:62:1b:7a:
43:ba:9a:cf:6a:ba:0a:0a:d2:95:77:c9:e1:44:74:23:bf:8e:
07:d8:50:eb:68:a4:c1:fc:01:e7:00:76:03:2c:46:26:1e:b3:
b5:7e:28:57:67:db:1a:04:0f:57:a7:ab:6d:c1:4d:98:02:f7:
c4:34:7e:3b:49:e5:4e:20:0a:bb:a0:52:1b:5c:a7:8d:51:8e:
92:a7:c1:5d:95:7f:6e:9d:b9:1e:de:e9:28:22:57:fe:4f:e0:
7e:fa:05:34:d1:5d:22:76:72:68:9c:80:5c:a4:9c:2e:ea:6a:
ef:f7:77:dd:0d:d7:55:86:35:98:3a:24:69:31:ac:e6:4f:7f:
46:3c:1d:68:ca:ee:e7:ca:d7:c7:e2:c4:85:a7:36:88:84:19:
74:34:4e:7e:d4:28:39:c4:61:71:bd:cc:1d:5a:69:a8:91:79:
18:79:74:82:62:d9:85:5a:1c:9c:0d:2b:c5:20:b5:09:0c:0b:
02:70:73:0a:f4:37:b3:f0:2c:d9:32:7f:c9:8d:1d:b5:c7:8b:
c8:b3:ee:13:c0:12:6f:c2:7d:13:0a:9b:f2:1c:1c:18:00:ff:
04:76:6d:79:eb:56:a0:51:06:f2:53:e2:87:94:e2:ee:19:ad:
c8:a6:1f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:55 2024 by rpki-client on console-fra.rpki-client.org