Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kU8yjZ2ypn7VNdGr6qwZcu7HwRQ.roa
File: kU8yjZ2ypn7VNdGr6qwZcu7HwRQ.roa (raw, json)
Hash identifier: fD+DPakjx+5js2A3hi9PatTQBmYJ3TFX1f5kxVsztbM=
Subject key identifier: 91:4F:32:8D:9D:B2:A6:7E:D5:35:D1:AB:EA:AC:19:72:EE:C7:C1:14
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018572BA9B0C4BDF1E3E6687247F18A48C7B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kU8yjZ2ypn7VNdGr6qwZcu7HwRQ.roa
Signing time: Mon 02 Jan 2023 13:45:10 +0000
ROA not before: Mon 02 Jan 2023 13:45:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202827
IP address blocks: 45.148.117.0/24 maxlen: 24
2a0e:b107:1ce1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 02 Jan 2023 16:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:9b:0c:4b:df:1e:3e:66:87:24:7f:18:a4:8c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 13:45:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=914f328d9db2a67ed535d1abeaac1972eec7c114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3f:3c:e3:30:89:f2:5c:8d:ce:71:e3:b9:b7:
ac:45:6c:dc:f9:8a:20:9c:f5:b2:44:9e:b2:b3:97:
7c:18:32:3c:5b:d0:21:74:46:85:4b:dc:f9:f3:58:
46:5b:39:57:d6:f7:26:a0:7c:ca:73:bd:bb:c8:c1:
03:10:77:1a:1f:90:6c:ed:f3:3d:c0:ef:44:63:82:
70:67:79:16:94:67:18:85:bf:2b:2e:1b:bd:a1:f2:
ac:d1:53:a9:4f:bd:93:d9:48:ef:aa:f2:cf:46:5b:
32:d4:69:c1:1c:3f:e0:a8:2d:a2:6b:e1:3e:15:09:
69:68:3f:4f:7c:f9:6f:e9:11:ea:c4:68:32:6b:50:
a6:f3:41:92:3f:2b:1d:1a:d1:5f:0e:10:35:47:a8:
2c:84:8c:2d:9c:3c:1e:0b:15:cd:5f:40:94:d7:44:
83:ea:ba:2d:e7:16:80:44:fe:bc:62:27:99:87:7c:
4f:9f:18:5d:3e:10:a3:63:35:64:24:25:05:89:9b:
aa:e1:b1:35:ad:ba:7a:1d:4e:69:66:33:5f:a5:cd:
5d:a9:c0:9d:4d:60:2b:ce:53:ee:38:57:8f:29:36:
2e:dd:04:eb:bf:53:6c:16:ae:78:a3:25:28:a8:c8:
25:1a:22:f5:9a:22:b0:23:6f:25:9f:a2:de:35:10:
2d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:4F:32:8D:9D:B2:A6:7E:D5:35:D1:AB:EA:AC:19:72:EE:C7:C1:14
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kU8yjZ2ypn7VNdGr6qwZcu7HwRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.117.0/24
IPv6:
2a0e:b107:1ce1::/48
Signature Algorithm: sha256WithRSAEncryption
4a:77:35:7b:e5:f2:48:b6:9b:86:09:7f:ec:72:a0:91:de:48:
a5:f5:39:5e:66:3c:ee:e7:4e:7f:9d:57:02:7f:8f:04:9e:69:
1c:8b:15:88:8c:de:a2:f3:99:51:85:4b:14:56:a1:81:26:9c:
ef:39:c9:22:f5:c9:98:b5:43:a2:8e:dc:6f:33:88:2d:e1:4e:
26:c5:e6:cc:a3:56:80:78:78:c0:4c:2f:7a:37:ce:64:3a:29:
ef:da:6c:a1:0a:5f:94:86:8a:5b:98:f8:64:0c:a1:f2:8f:64:
f7:df:56:46:44:3a:33:cc:ff:4a:a1:9f:00:a6:7d:ca:d5:ec:
d9:29:12:d8:2d:00:fa:9d:22:0d:0f:74:71:41:21:b0:e3:3a:
04:23:03:ac:22:0f:15:e3:de:c5:84:6f:15:ee:51:51:e4:db:
b6:24:a7:b4:35:80:12:8b:3e:bf:67:58:a1:f0:7f:25:a0:62:
a1:55:09:af:82:92:44:98:47:9e:fb:d4:ed:35:04:10:8b:6f:
8d:c8:5f:a0:3d:8a:f9:d3:46:2b:b2:43:6e:12:b7:9f:65:55:
64:f2:07:08:16:1c:c9:e9:27:47:f2:3a:ce:d7:b0:18:a7:8e:
a7:0e:cb:39:65:e6:d0:ea:b2:01:11:6c:78:21:0a:ee:05:68:
12:6e:17:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:11 2024 by rpki-client on console-ams.rpki-client.org