Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/FrCz06KHGctwalKf-t36FpdOJ5w.roa
File: FrCz06KHGctwalKf-t36FpdOJ5w.roa (raw, json)
Hash identifier: s3OaNFGUCfq9pJzkhknSxan7PCOcXJ15GCfOhgixp/I=
Subject key identifier: 16:B0:B3:D3:A2:87:19:CB:70:6A:52:9F:FA:DD:FA:16:97:4E:27:9C
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 018AC3780549DAEE7A32358DFC1383099DEF
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/FrCz06KHGctwalKf-t36FpdOJ5w.roa
Signing time: Sat 23 Sep 2023 19:15:37 +0000
ROA not before: Sat 23 Sep 2023 19:15:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14445
IP address blocks: 45.151.70.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c3:78:05:49:da:ee:7a:32:35:8d:fc:13:83:09:9d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Sep 23 19:15:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16b0b3d3a28719cb706a529ffaddfa16974e279c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5c:02:db:31:c9:98:22:47:9a:c8:b6:68:df:
a5:84:51:04:ab:bb:84:5a:2f:c9:5a:37:02:34:be:
91:85:43:77:a7:51:ed:03:19:2d:94:40:60:0f:95:
a6:51:62:06:25:0e:d8:7f:91:07:5c:b9:35:d9:3c:
5c:7a:57:36:1c:4a:24:fd:16:1b:eb:d1:2f:79:58:
91:1d:65:fe:3b:d5:54:e7:44:0e:ad:ef:5a:1c:91:
bc:05:b5:6d:b3:b8:5d:45:16:c7:5d:d3:40:df:b3:
17:9e:80:86:d8:61:53:b0:5d:2e:df:d8:48:e5:64:
fc:15:37:9a:2d:aa:d0:6d:8a:ab:18:ae:54:2d:4d:
2c:9c:b7:55:de:10:0c:ea:04:00:8a:ff:e1:8b:e2:
43:36:d7:d7:99:b9:57:88:bf:a5:2d:8f:ce:1b:4d:
2c:1a:dd:3a:23:6f:f5:eb:1b:f8:75:fc:71:ac:1f:
7d:8c:74:7a:dd:4a:fc:62:44:cc:62:02:66:89:bc:
42:12:ac:31:33:e8:9a:ad:f6:dd:2a:2c:c0:ca:2d:
4f:4f:c1:a5:31:45:49:8c:ba:32:0b:fa:f8:7c:08:
c1:a9:f9:f4:a9:2f:e3:bd:a9:8c:44:5f:ba:af:0e:
56:15:71:71:81:9d:d3:4d:e2:28:b2:b8:10:e8:0f:
27:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B0:B3:D3:A2:87:19:CB:70:6A:52:9F:FA:DD:FA:16:97:4E:27:9C
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/FrCz06KHGctwalKf-t36FpdOJ5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.70.0/24
Signature Algorithm: sha256WithRSAEncryption
13:00:ac:3b:94:96:46:94:41:c7:65:59:94:83:cb:f7:c9:c0:
e0:a5:e3:cf:b0:73:37:14:25:0b:6c:31:0e:48:b9:cd:b0:5a:
5b:45:6b:9c:46:48:8d:64:df:99:86:b1:77:af:c6:38:ab:59:
22:22:59:1e:ac:16:cf:35:37:87:79:0e:f0:e4:f5:b7:8f:99:
fe:84:36:67:0d:40:9c:18:1f:96:3d:7f:70:88:0b:71:de:7c:
b0:aa:23:2a:55:95:f7:56:dd:6f:7a:cf:81:e1:87:34:1d:33:
66:bc:b3:db:9e:ca:aa:d8:1a:0a:80:0f:61:81:cf:49:77:83:
cf:4c:a4:f3:d0:69:d7:8c:aa:13:97:72:bb:7a:05:96:79:c1:
5f:c1:cc:f3:ca:ea:6b:3b:34:8b:cb:2e:e7:70:4a:38:fc:f1:
af:dd:da:59:9e:7d:be:10:32:52:54:37:20:90:ad:21:c8:76:
51:26:97:4a:00:8b:89:3a:2e:5d:21:f4:a9:3d:96:b6:ff:cc:
09:94:1c:28:18:62:3c:e3:39:98:46:c1:33:d7:d7:73:85:4e:
30:bb:7a:5f:ed:35:d2:cb:36:a1:b0:b8:4d:5a:78:fa:49:e5:
0e:a7:8f:99:da:11:0d:e7:7f:fb:49:41:be:5f:45:8b:de:14:
b1:91:ca:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:24 2024 by rpki-client on console-ams.rpki-client.org