Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/7ySGpyUxfdnOXb4VukfkSS96wa4.roa
File: 7ySGpyUxfdnOXb4VukfkSS96wa4.roa (raw, json)
Hash identifier: mW69Vie9DmYAhq6zNSsO5D9pgkXsVlrAD7Q8RvHec5I=
Subject key identifier: EF:24:86:A7:25:31:7D:D9:CE:5D:BE:15:BA:47:E4:49:2F:7A:C1:AE
Certificate issuer: /CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Certificate serial: 0185704BCA0AF1982877AD965A8BA8725B10
Authority key identifier: 40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/7ySGpyUxfdnOXb4VukfkSS96wa4.roa
Signing time: Mon 02 Jan 2023 02:24:53 +0000
ROA not before: Mon 02 Jan 2023 02:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 45.129.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:ca:0a:f1:98:28:77:ad:96:5a:8b:a8:72:5b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Validity
Not Before: Jan 2 02:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef2486a725317dd9ce5dbe15ba47e4492f7ac1ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a6:40:8e:a5:91:df:e4:0a:99:1b:25:39:4f:
7a:c9:39:ad:0d:ce:71:c7:64:58:6f:34:eb:17:a9:
cc:eb:43:ce:d9:57:c1:74:be:e5:1c:b4:19:6b:62:
86:d2:2d:29:22:d3:e8:1d:62:4c:cb:b5:3c:ee:1f:
c7:29:6a:c3:ad:50:36:c0:9c:f3:dd:67:ec:c2:5e:
63:ea:b9:03:f0:35:2a:bb:19:b3:d9:a2:0d:2c:d0:
74:35:ce:0b:83:23:f3:84:9d:42:ba:5d:b1:42:ef:
00:ed:f4:fc:e3:13:15:05:9c:59:2e:1b:23:d8:ac:
1a:e0:44:bd:2d:2b:cd:e4:48:3d:0e:b9:b1:4f:7b:
aa:66:38:99:82:47:be:b8:16:f1:91:37:dc:49:79:
50:a7:69:44:50:69:c7:24:bd:6b:ab:2f:7a:e9:07:
b2:94:66:f9:5b:1b:4d:ae:8e:db:31:04:cb:64:cc:
d4:b2:da:34:3e:e1:35:87:bb:19:21:c9:e9:70:33:
c8:ce:27:82:8f:5e:93:1c:cc:7c:e9:3e:b0:ff:45:
bd:db:4d:37:8a:db:2f:bd:00:68:b9:d5:6e:7c:e0:
4f:9c:49:23:14:2e:29:62:ba:b2:3a:8e:57:bf:53:
d9:f0:db:eb:c6:cb:0f:d0:0b:b2:d4:13:25:dd:db:
c7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:24:86:A7:25:31:7D:D9:CE:5D:BE:15:BA:47:E4:49:2F:7A:C1:AE
X509v3 Authority Key Identifier:
keyid:40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/7ySGpyUxfdnOXb4VukfkSS96wa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.192.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:a3:65:1b:21:13:29:e0:9d:cf:4d:8f:f2:f9:dc:36:e4:4a:
25:61:73:47:71:ee:38:52:c4:0e:80:aa:21:97:ee:1c:06:3a:
0c:26:c8:61:8f:59:87:27:a1:86:ff:9a:48:8f:59:85:78:3d:
71:42:5e:9f:4b:8e:8c:ef:a8:a5:61:c2:11:5c:95:aa:50:d9:
b8:1a:8e:69:e7:d4:7c:54:5f:20:a8:7c:b4:92:90:ef:4a:f9:
43:67:36:ab:ab:a8:6d:5e:30:33:7d:ac:78:6e:bd:3e:64:75:
15:e4:e7:9c:cb:e6:ce:c0:06:1f:9c:86:cf:c4:13:4f:12:f2:
35:2f:e5:83:4b:f3:6e:ca:16:2f:fd:f6:e6:8d:5c:86:9c:ea:
7e:c3:17:24:4a:c7:b1:4b:8a:9a:cf:4d:26:7e:2e:5a:e0:1d:
97:a3:c5:8d:c8:d7:48:a9:de:c8:89:37:27:50:d6:d9:d6:ae:
ee:39:f3:03:27:9e:3e:71:3a:36:59:59:9c:ed:1a:af:42:d4:
38:fd:fc:ea:c1:8a:70:d4:fb:e5:9a:ff:fb:af:00:47:0b:a7:
66:bf:a8:2b:6f:b9:40:4e:17:fd:70:8b:b1:8d:fb:27:a2:fe:
3c:4f:cb:a0:be:9e:63:11:49:4b:53:dc:55:80:f9:bb:08:45:
83:7d:7d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:57 2024 by rpki-client on console-fra.rpki-client.org