Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/L96MeJErl2DgTYCToEJ5Oc51hdg.roa
File: L96MeJErl2DgTYCToEJ5Oc51hdg.roa (raw, json)
Hash identifier: KqAch8vTyzzPwQB1GtdBc9VqiNQ1caj/pn8doEwaQvA=
Subject key identifier: 2F:DE:8C:78:91:2B:97:60:E0:4D:80:93:A0:42:79:39:CE:75:85:D8
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018FFD718AA89ABC44D2F72D7A2E7B707234
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/L96MeJErl2DgTYCToEJ5Oc51hdg.roa
Signing time: Sun 09 Jun 2024 14:40:27 +0000
ROA not before: Sun 09 Jun 2024 14:40:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198510
IP address blocks: 45.144.174.0/24 maxlen: 24
45.144.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 Aug 2024 08:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:fd:71:8a:a8:9a:bc:44:d2:f7:2d:7a:2e:7b:70:72:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 9 14:40:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fde8c78912b9760e04d8093a0427939ce7585d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1a:f7:b4:fb:16:55:39:3b:45:45:09:88:04:
7e:e4:6c:f4:f0:f6:69:69:c5:bd:fe:b0:bb:fa:96:
a4:c8:d1:68:76:a6:75:48:26:47:de:87:ca:1c:a0:
da:64:e1:2c:b0:00:1e:e0:d5:d9:ac:9b:52:de:12:
0e:21:b4:dd:03:db:01:63:0b:8d:a3:13:70:d1:fb:
ae:2a:a5:59:b7:a2:f2:67:c0:d2:a3:b0:02:53:e2:
cf:54:63:09:0c:bd:f4:5b:55:aa:f8:f4:4f:b3:72:
59:38:92:87:5a:cb:69:17:4c:0f:4f:12:60:78:04:
11:57:92:94:4d:91:2b:f1:ef:7a:03:39:54:7c:ae:
a8:d8:af:e2:3a:90:43:59:42:b4:d5:36:e6:d8:14:
38:16:22:43:3e:55:82:a4:52:bd:40:c6:5b:af:36:
77:9a:61:e5:19:3a:c5:e2:b7:b4:f4:c3:75:64:15:
08:a1:2f:54:79:f7:09:89:a3:84:98:ab:4a:5c:ee:
d1:e6:59:3f:11:9c:c8:f0:bc:aa:43:a2:5c:02:01:
26:ec:9f:d0:fd:35:1b:19:4a:fd:ab:3b:76:9c:58:
1b:74:90:89:f7:5e:f8:fc:03:8f:bf:fa:c5:69:7e:
cc:54:2b:5d:2a:af:94:72:47:4b:ef:c8:1b:d7:c2:
2b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DE:8C:78:91:2B:97:60:E0:4D:80:93:A0:42:79:39:CE:75:85:D8
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/L96MeJErl2DgTYCToEJ5Oc51hdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.174.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:13:ba:53:b1:5d:52:c3:ca:20:f9:36:cc:fe:bd:7a:ab:07:
fb:c7:4c:72:6c:77:f7:7e:b2:04:ad:85:c2:7b:c4:80:1d:d0:
67:e6:4e:b3:54:19:69:47:b8:14:8d:4d:5a:2d:a9:4e:56:bb:
d6:99:5f:86:e8:f5:e4:7f:4c:01:d1:36:f7:24:f4:87:48:84:
37:29:ca:f4:71:14:8c:1c:e5:0b:6c:0d:45:a2:22:88:e2:a1:
7b:59:f8:74:1a:c3:18:7f:ff:69:df:b4:c8:d9:28:c9:3e:76:
a4:37:8d:cf:21:df:aa:32:79:28:10:cf:7d:10:5f:ee:1f:70:
db:92:58:46:5d:25:6d:73:8e:a0:1f:d2:d3:49:bb:25:da:9e:
bb:9c:91:11:d7:e3:4c:ba:2c:5f:27:43:dd:a1:92:87:81:3e:
56:3d:b5:58:01:92:1f:7c:68:8c:d5:b2:34:4f:6b:f7:8a:9c:
f2:1a:0b:cd:ed:1d:bf:b0:fc:ca:aa:7b:17:6b:5c:55:84:bc:
2a:fd:23:e5:ac:b8:ce:3e:35:e2:8c:4c:14:51:47:d8:34:0f:
f3:89:05:31:59:a9:a3:46:05:0b:28:7f:48:b8:74:72:ba:92:
fb:c7:29:23:42:6e:33:d5:d4:1d:9f:62:2a:81:4b:c9:57:a9:
28:99:f0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 11:05:22 2024 by rpki-client on console-ams.rpki-client.org