Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/F8Sbe46r-ak_DeCfM-V9p5mLuD8.roa
File: F8Sbe46r-ak_DeCfM-V9p5mLuD8.roa (raw, json)
Hash identifier: uvlJKmPb5yjzk6Fc8ae1Ierhn1IYN75Kp3hrmr1rsO8=
Subject key identifier: 17:C4:9B:7B:8E:AB:F9:A9:3F:0D:E0:9F:33:E5:7D:A7:99:8B:B8:3F
Certificate issuer: /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Certificate serial: 01856F547EC6E4FEC6E55D508BEB4C16AC15
Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/F8Sbe46r-ak_DeCfM-V9p5mLuD8.roa
Signing time: Sun 01 Jan 2023 21:54:46 +0000
ROA not before: Sun 01 Jan 2023 21:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63889
IP address blocks: 45.121.104.0/24 maxlen: 24
45.121.107.0/24 maxlen: 24
45.121.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:7e:c6:e4:fe:c6:e5:5d:50:8b:eb:4c:16:ac:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Validity
Not Before: Jan 1 21:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17c49b7b8eabf9a93f0de09f33e57da7998bb83f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d0:3a:d4:f4:9f:fc:9b:f1:02:13:c9:19:29:
66:24:51:bf:e3:d1:22:1f:54:7f:5e:23:bf:98:44:
8a:df:f4:a8:99:dc:e5:d1:f9:e8:11:c9:0e:a5:22:
8f:48:bc:60:90:b8:9b:bd:1b:fa:ae:bc:2b:bd:1a:
94:35:73:bf:10:7d:17:d1:24:55:8e:50:91:ab:d1:
64:ae:87:b2:47:8a:a1:fd:fe:af:80:89:d5:4f:32:
1e:51:4c:1d:78:22:e4:57:d8:09:ea:29:fd:f7:d9:
9a:33:20:f9:da:f7:5d:85:61:c8:b3:63:03:f1:5f:
70:fa:5f:76:d3:78:c2:49:7b:a3:ca:58:64:8b:e4:
6f:c6:27:56:c3:a6:c8:c6:04:3f:0a:c7:1a:23:3f:
01:98:02:39:69:4b:8a:c8:a0:62:3e:6f:be:71:0f:
40:41:cb:e6:0a:e4:8f:56:8f:18:35:c8:e1:1c:c2:
ea:45:1e:a8:d8:1d:c0:d3:30:22:8d:d9:07:cf:7a:
e9:88:d3:df:71:37:2e:bf:f9:ad:05:1d:ab:8d:9f:
b6:cf:5f:b9:f2:42:81:3e:55:18:92:66:39:14:30:
23:c7:a8:f7:a3:bc:5f:fb:cc:fe:03:07:f4:75:c1:
e8:45:6b:7e:72:56:23:c2:b0:d9:18:8a:4c:07:3d:
1c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C4:9B:7B:8E:AB:F9:A9:3F:0D:E0:9F:33:E5:7D:A7:99:8B:B8:3F
X509v3 Authority Key Identifier:
keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/F8Sbe46r-ak_DeCfM-V9p5mLuD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.121.104.0/24
45.121.106.0/23
Signature Algorithm: sha256WithRSAEncryption
07:be:da:ed:10:30:36:83:fb:9b:f9:ec:3a:0a:d0:5c:88:df:
56:11:89:6f:e5:aa:01:9b:b0:2d:90:84:2d:e5:92:73:36:01:
b3:50:e2:27:b8:cf:a2:e1:3d:a7:a4:fb:5b:37:19:49:15:75:
d4:8a:a7:33:24:6e:a0:36:cd:00:4f:15:2b:b1:4d:91:03:86:
d9:23:92:e2:65:be:23:8a:5f:91:d7:ea:50:24:43:86:81:21:
44:21:4d:78:93:12:3c:9c:c7:26:71:44:84:f5:07:9b:4e:f4:
d4:8f:e1:24:81:89:c8:e9:60:72:02:39:20:37:e3:eb:0d:dd:
9e:57:5d:42:53:fd:9a:19:83:f8:fe:cd:55:21:8d:66:11:c8:
be:8e:e3:e8:3c:ff:24:d4:77:a4:3d:7c:c7:bc:a3:46:8b:fd:
2c:31:7a:31:6e:64:a8:f5:c2:e9:26:11:15:1f:d4:f9:89:14:
ae:89:34:e8:7e:4b:3a:e6:03:ea:12:61:24:56:eb:86:67:38:
1b:57:2a:14:be:78:d0:41:e1:54:3e:b8:82:10:76:93:71:a7:
dd:46:9f:4c:d5:c2:2e:28:4d:a2:64:e4:fa:06:40:0d:31:98:
09:0a:f5:7a:e7:23:61:a4:9b:1a:b4:48:df:ba:14:86:39:72:
f8:65:ed:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:09 2024 by rpki-client on console-ams.rpki-client.org