Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/7-C9IuK_CxjEuOLRZ6on-hUnveE.roa
File: 7-C9IuK_CxjEuOLRZ6on-hUnveE.roa (raw, json)
Hash identifier: iA/8bjobNCtHtH6vtiJ0TjMiag6j6ukWlWP69FSXrDA=
Subject key identifier: EF:E0:BD:22:E2:BF:0B:18:C4:B8:E2:D1:67:AA:27:FA:15:27:BD:E1
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018FB968C6D76EBC8009F86B93C5B9E44452
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/7-C9IuK_CxjEuOLRZ6on-hUnveE.roa
Signing time: Mon 27 May 2024 09:36:42 +0000
ROA not before: Mon 27 May 2024 09:36:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142561
IP address blocks: 45.144.174.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 27 May 2024 16:50:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b9:68:c6:d7:6e:bc:80:09:f8:6b:93:c5:b9:e4:44:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 27 09:36:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=efe0bd22e2bf0b18c4b8e2d167aa27fa1527bde1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7f:ab:42:de:45:09:ad:4f:7b:e0:ab:1a:77:
c3:71:81:f0:64:41:95:68:88:9e:8d:b5:33:db:bb:
13:be:cb:6d:d5:77:71:a6:33:70:b5:41:aa:c3:4c:
0b:26:b5:5e:97:d6:3b:1f:65:db:d5:10:19:f7:38:
05:55:f2:a6:1c:6d:c1:cf:ad:ad:08:fe:8a:10:31:
6e:7e:a6:33:24:5b:1b:2e:38:39:42:53:a3:35:01:
2d:84:88:c6:2f:1d:13:78:ce:b3:98:af:1b:d0:3a:
4f:97:67:a4:78:0b:e8:51:f1:87:01:43:9e:a6:1d:
41:07:7c:c8:7d:54:00:62:20:3b:c4:b0:3f:d9:d3:
c1:ab:aa:f5:a0:c2:99:e5:33:82:78:c3:a0:f8:6c:
db:81:70:36:59:e8:35:3e:1c:00:3f:34:03:ea:c7:
c7:df:7f:f4:b4:bd:ce:0a:4a:20:b5:05:af:73:a7:
a7:fe:15:1a:82:6c:80:bb:6e:23:84:b4:d3:9b:c1:
36:59:07:2e:4b:31:00:cb:cc:e5:85:7f:ef:53:40:
a9:67:ec:84:f9:13:30:41:2a:98:df:cf:e5:09:ad:
9f:ab:be:ef:82:ee:35:dc:e8:2b:cc:31:63:d9:bb:
21:1d:49:91:c4:11:0f:e8:c5:33:db:08:56:9d:c2:
e9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E0:BD:22:E2:BF:0B:18:C4:B8:E2:D1:67:AA:27:FA:15:27:BD:E1
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/7-C9IuK_CxjEuOLRZ6on-hUnveE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.174.0/23
Signature Algorithm: sha256WithRSAEncryption
90:8c:bf:6b:a0:a6:cd:72:99:2f:5e:9f:cd:77:0b:4f:f4:eb:
4e:d2:c9:4f:47:c9:d9:eb:77:63:56:8d:30:38:0e:78:3b:ef:
8d:fa:47:03:18:c6:9a:9d:11:c8:6c:b9:0b:ca:04:c0:98:6e:
ed:49:cd:cd:0f:b8:d9:85:53:08:40:b0:d0:68:de:ad:34:15:
a3:81:88:98:24:66:93:1c:7b:98:96:a2:6d:40:ae:43:fd:1e:
d1:45:84:1e:02:3c:91:fc:44:e4:a1:d8:85:be:3d:76:ab:99:
4d:b5:63:13:fb:31:4e:62:ab:5d:29:9e:c6:f1:20:df:21:47:
4d:26:70:2f:49:f8:a1:35:93:f0:d4:5a:0a:a5:7b:94:85:f9:
10:55:e8:8d:8a:d4:44:79:86:a9:fa:57:55:69:2a:dd:19:a0:
1b:aa:fa:f9:f3:d9:b8:07:f1:ea:13:a1:d8:56:b2:ff:f6:45:
67:23:6c:d8:5b:4b:1c:e9:c8:f0:17:3e:2d:a3:0a:8c:25:32:
06:54:71:13:dc:8c:77:9f:52:48:99:e1:4e:c4:c3:50:17:5c:
9d:c0:19:fc:87:9b:2e:c9:0d:1b:62:07:da:15:d9:f0:b9:8f:
77:da:f4:e1:fa:ae:d5:a7:66:5b:90:55:01:c7:be:c0:1a:84:
1b:f6:b7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org