Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/R1jfcn49Q2h6bryyjpSWqDd6tDA.roa
File: R1jfcn49Q2h6bryyjpSWqDd6tDA.roa (raw, json)
Hash identifier: BkuxVxp6G8bzR8fO0jNZhgliLKTF7nu1Q9zxfWlzQwg=
Subject key identifier: 47:58:DF:72:7E:3D:43:68:7A:6E:BC:B2:8E:94:96:A8:37:7A:B4:30
Certificate issuer: /CN=d94284b94325f5060f8a0e87c1be2827788f18f9
Certificate serial: 01856FF025FF068E490A5AF0739DA12C3C5E
Authority key identifier: D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/R1jfcn49Q2h6bryyjpSWqDd6tDA.roa
Signing time: Mon 02 Jan 2023 00:44:47 +0000
ROA not before: Mon 02 Jan 2023 00:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201193
IP address blocks: 45.143.84.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 08 Jun 2023 11:19:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:25:ff:06:8e:49:0a:5a:f0:73:9d:a1:2c:3c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94284b94325f5060f8a0e87c1be2827788f18f9
Validity
Not Before: Jan 2 00:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4758df727e3d43687a6ebcb28e9496a8377ab430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8e:dc:9a:b4:c0:6b:ce:48:b4:8d:c9:c8:0a:
77:90:45:45:c1:f1:0e:a1:1b:bd:63:bc:91:3c:54:
f7:2a:f3:41:92:f3:34:f1:f6:cb:51:82:c2:60:7c:
67:8c:b6:7e:ea:f5:d8:ab:93:5e:1e:84:0d:b0:98:
f5:8c:2e:94:92:ca:33:4a:f8:71:5d:27:37:6b:c1:
b3:cf:5d:a7:e8:ca:fe:58:db:2e:38:2d:50:c0:77:
20:32:d9:a9:4d:59:77:85:4c:f7:8c:61:42:29:cf:
88:30:a1:4d:67:1b:be:67:59:21:d5:58:73:df:97:
3c:30:2e:b5:bf:95:0d:8e:83:9a:58:73:33:f0:2b:
7d:f5:c9:c9:72:e2:e1:2c:7a:2f:2e:65:a2:12:22:
ee:81:60:b8:bd:75:e1:27:cc:c0:a0:af:6a:60:45:
17:8d:c4:17:1c:4f:8f:9a:14:22:ce:fa:9b:d6:bb:
c8:b5:f9:a5:41:40:0a:f9:47:b5:7b:a2:ff:2c:cd:
8d:61:4b:41:3a:5d:f8:08:5f:b4:9c:b3:66:f1:b8:
50:ba:08:db:d2:33:99:dd:f4:ad:ed:63:dd:0b:dc:
3e:4f:49:7c:4c:8c:5c:bd:59:1b:9d:99:55:81:57:
a8:6c:84:21:48:57:f3:a8:ea:39:1b:27:5b:2b:5c:
fe:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:58:DF:72:7E:3D:43:68:7A:6E:BC:B2:8E:94:96:A8:37:7A:B4:30
X509v3 Authority Key Identifier:
keyid:D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/R1jfcn49Q2h6bryyjpSWqDd6tDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.84.0/22
Signature Algorithm: sha256WithRSAEncryption
45:a8:85:11:24:08:99:f4:e9:52:ff:1a:da:8d:c9:73:c6:ed:
fd:d0:a1:54:8c:04:14:46:5d:aa:71:7f:0f:4f:9c:fb:97:3e:
68:dd:5a:32:07:b3:a9:28:25:e0:06:f3:65:1d:85:b6:cf:bc:
f0:3f:0b:77:cd:60:bb:e7:7c:90:5f:62:d0:eb:01:c9:e5:9b:
88:29:03:8e:9b:9c:84:72:79:ec:f9:95:30:ea:23:cc:b7:c2:
40:63:cc:7b:90:de:56:1d:b1:6c:0c:9f:1d:13:e5:36:37:28:
fa:c9:82:e7:78:62:ac:53:bb:1a:0f:ea:fe:65:48:27:81:53:
21:d0:ab:57:da:37:41:83:4d:be:98:3e:e3:f7:c1:d3:d5:2f:
33:30:0d:55:86:74:51:f4:6c:17:7d:04:f9:c6:4f:8f:f9:b7:
1a:b0:4c:c7:15:9e:e1:cf:3f:f3:b2:1a:37:d4:0b:70:fd:43:
3f:85:74:fc:bb:ac:8b:e9:7e:51:f2:83:aa:fe:78:d0:09:d0:
ec:10:6f:88:e9:0c:f4:a3:df:f1:f8:29:07:08:f0:98:5a:48:
78:fe:ce:d6:6d:59:76:74:a5:fc:cd:af:16:40:ac:79:70:84:
06:d7:a8:67:31:bb:ce:77:7f:98:a1:4b:0c:d6:69:da:fe:97:
f8:78:47:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:00 2024 by rpki-client on console-fra.rpki-client.org