Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/n4pnEmvpY18X4daajwCqgNgZvww.roa
File: n4pnEmvpY18X4daajwCqgNgZvww.roa (raw, json)
Hash identifier: 7ppoj4GWBI0ALkTupGKclkUDDcS9lr2ot53CrbcdaA8=
Subject key identifier: 9F:8A:67:12:6B:E9:63:5F:17:E1:D6:9A:8F:00:AA:80:D8:19:BF:0C
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01905D9F98414EC2C037FCE0E4AD9722B291
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/n4pnEmvpY18X4daajwCqgNgZvww.roa
Signing time: Fri 28 Jun 2024 06:54:18 +0000
ROA not before: Fri 28 Jun 2024 06:54:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211557
IP address blocks: 45.144.173.0/24 maxlen: 24
188.240.81.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jul 2024 04:14:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5d:9f:98:41:4e:c2:c0:37:fc:e0:e4:ad:97:22:b2:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 28 06:54:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f8a67126be9635f17e1d69a8f00aa80d819bf0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:00:d0:ad:c1:7f:10:b9:39:01:ae:4a:a7:ce:
88:f8:6b:7a:bb:70:38:36:90:79:0e:61:fc:ee:cc:
47:09:27:4f:6e:9b:7a:a2:5b:0d:2c:af:7c:9b:40:
94:82:5a:02:23:14:c7:c4:e3:97:fd:a1:c5:38:a9:
ce:f9:b4:8e:80:64:73:1e:86:45:a5:50:2f:49:71:
1b:28:6c:13:8f:11:27:14:ab:3c:5f:51:29:c5:07:
b5:c7:fe:e4:e0:99:89:64:1b:13:34:ec:42:c1:2d:
82:ef:53:b0:cd:18:18:e0:65:90:07:06:4c:2c:53:
ca:ee:c2:4e:35:fe:6b:59:0c:fc:58:cc:63:6f:d6:
76:0f:58:83:9e:67:d2:92:0c:64:13:fc:f9:ed:7e:
6b:96:64:1a:49:2c:cf:ca:28:eb:12:9b:1a:47:00:
a7:1c:37:cb:ca:db:68:a1:b7:ed:68:2e:13:76:61:
cc:68:f6:f2:33:ad:27:77:4c:09:ae:a4:0f:24:9a:
85:6e:bf:6a:5a:ca:ad:59:c8:a5:1b:d1:20:17:a1:
bb:44:8d:b7:a9:b2:1c:f0:4c:37:e3:aa:35:0d:6d:
d5:b5:5c:35:35:9d:51:36:e7:bd:34:97:b8:2b:ad:
89:da:5c:dd:37:74:80:be:0a:2f:1b:8b:b8:00:a5:
eb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8A:67:12:6B:E9:63:5F:17:E1:D6:9A:8F:00:AA:80:D8:19:BF:0C
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/n4pnEmvpY18X4daajwCqgNgZvww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.173.0/24
188.240.81.0/24
Signature Algorithm: sha256WithRSAEncryption
06:7d:a6:e8:ef:dd:2f:0a:28:a7:fc:3a:39:5e:6e:26:e4:55:
a3:16:44:c2:5f:6b:7f:54:99:18:6a:2b:d0:a5:e2:f0:2e:39:
7b:59:66:1d:de:3d:96:ea:cf:f4:b1:fd:85:86:fe:90:05:39:
03:a6:18:0b:c4:de:b5:42:d4:e8:81:a9:f0:fd:6e:06:68:7b:
39:62:1e:78:51:17:4e:93:d8:5a:87:4a:37:cf:66:4d:72:a8:
07:c4:ae:65:ed:20:6e:18:a0:d8:6e:cd:a9:bb:9c:2d:ac:d6:
64:2b:2c:7a:53:e3:0c:b8:53:03:21:24:5c:45:17:2b:5d:25:
e2:72:69:9c:8b:f3:8f:fc:38:6c:a8:1f:e0:18:89:99:54:19:
49:7d:3e:89:69:97:27:e1:10:e5:ef:56:94:df:68:ac:21:63:
f5:ee:4e:76:c6:1e:f7:8b:55:cd:cd:3c:f7:13:fa:68:22:3d:
af:5f:f3:42:bb:07:33:3a:87:f3:c1:76:51:a1:c5:9c:25:cf:
a2:92:4e:a6:62:c9:7b:06:a7:63:42:2f:2b:52:a6:48:f8:f1:
e3:56:f2:16:99:09:04:40:bd:15:02:32:0f:47:39:0c:18:8e:
82:fa:9a:83:78:fa:16:88:8d:a1:48:cb:40:40:9d:1e:ce:ca:
3d:b7:18:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 06:41:59 2024 by rpki-client on console-ams.rpki-client.org