Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/7SKR9J19wvi-NCVnoNMi-VkteqQ.roa
File: 7SKR9J19wvi-NCVnoNMi-VkteqQ.roa (raw, json)
Hash identifier: 8KXWhrDbgxxgHCP5kOwc2eBjIBYM2bX1x9Ge6qKAoxQ=
Subject key identifier: ED:22:91:F4:9D:7D:C2:F8:BE:34:25:67:A0:D3:22:F9:59:2D:7A:A4
Certificate issuer: /CN=661691ca9c58d0859b6b870230b0f581be66a58a
Certificate serial: 018BEECE92CD03D416CB6556943CDF6161C1
Authority key identifier: 66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/7SKR9J19wvi-NCVnoNMi-VkteqQ.roa
Signing time: Mon 20 Nov 2023 22:16:37 +0000
ROA not before: Mon 20 Nov 2023 22:16:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46873
IP address blocks: 45.153.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Nov 2023 22:57:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ee:ce:92:cd:03:d4:16:cb:65:56:94:3c:df:61:61:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=661691ca9c58d0859b6b870230b0f581be66a58a
Validity
Not Before: Nov 20 22:16:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed2291f49d7dc2f8be342567a0d322f9592d7aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:62:09:e5:e0:d7:fc:3e:85:3b:7c:71:9f:8e:
ba:cb:43:07:1c:a5:b9:55:47:c8:83:fb:74:dc:97:
0f:79:15:24:96:82:9b:a7:fb:f9:5a:d8:e1:96:a4:
ba:fa:f2:86:d1:f1:47:c6:a1:f6:72:d3:18:ce:e7:
ca:03:b6:50:dc:c5:bf:6f:e5:df:70:b0:d2:e6:6e:
c5:ab:6b:2f:6a:7a:a6:5e:a0:f6:7b:07:19:75:a0:
e8:27:8b:3f:fe:c3:b0:14:39:79:59:b1:87:98:fd:
bf:3f:4c:be:51:5c:68:8c:27:9e:f0:ef:3e:b9:f2:
b5:37:ea:c7:4c:db:77:88:57:79:d9:26:99:60:c2:
a5:a9:bd:11:4c:34:c9:d7:61:12:2d:60:f4:67:24:
1a:06:b5:6d:a8:e5:a5:f5:b6:13:a8:b5:48:99:54:
ee:34:50:dc:e6:06:82:51:18:87:e9:34:f8:91:d8:
cf:be:99:4e:bc:72:12:87:2c:33:e2:17:de:cd:ea:
f3:10:f3:50:b2:9c:84:f8:ed:92:ee:7b:5b:a9:a2:
cd:6a:27:ad:77:f9:e0:23:99:55:e3:3e:c6:77:4b:
6e:2d:08:4c:8b:c2:d3:b0:1d:50:dc:f4:68:38:3a:
75:c0:83:c7:c5:49:d3:85:98:d9:b1:49:f3:20:b3:
14:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:22:91:F4:9D:7D:C2:F8:BE:34:25:67:A0:D3:22:F9:59:2D:7A:A4
X509v3 Authority Key Identifier:
keyid:66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/7SKR9J19wvi-NCVnoNMi-VkteqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.111.0/24
Signature Algorithm: sha256WithRSAEncryption
07:40:52:7c:7a:83:44:a4:ec:40:bc:f5:f8:64:8d:33:99:37:
91:fe:8e:f1:1e:1e:d8:7e:82:dc:8a:6a:78:86:b1:90:c1:11:
c0:2b:cc:18:d0:a5:56:e6:2e:85:e8:aa:b9:a3:23:e5:f7:6d:
b0:f2:6d:b8:ee:c1:a1:9f:b4:cf:57:00:d0:34:4b:2f:10:82:
17:b5:df:3d:03:cc:30:90:07:ac:9b:93:1c:83:77:8c:4e:de:
26:e4:7a:48:51:6e:4d:3e:c2:ad:20:7b:02:47:12:32:b3:44:
72:36:c9:74:d7:46:3d:7c:d4:b9:57:a2:a5:b6:65:2e:7a:f1:
a9:d4:63:26:e2:bc:fe:3f:1a:f9:b7:2c:a7:c2:1a:1f:8c:0a:
0d:45:38:8c:58:f4:19:61:20:dd:ca:ba:88:9a:7b:c7:5b:b9:
50:9a:4c:33:67:da:d4:84:4e:60:01:6f:3b:3f:90:54:57:bc:
37:db:a4:7d:0b:10:6a:96:fe:94:9e:87:64:36:29:4d:ee:3b:
6d:67:c6:c5:db:c4:0e:ef:bc:66:a8:b5:15:f1:b8:7c:b0:c4:
5b:7f:61:fc:77:e3:6b:34:b9:0f:71:37:16:13:2b:5e:34:59:
2b:12:28:8d:c8:97:69:06:36:ee:ef:46:f5:5f:00:65:4a:eb:
f0:2a:8d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:46 2024 by rpki-client on console-fra.rpki-client.org