Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/ft7OXOl66fK9YcySz36YZ-jUvec.roa
File: ft7OXOl66fK9YcySz36YZ-jUvec.roa (raw, json)
Hash identifier: 2U3hDBtW53ozBn5Xkv22g2IBbaN+d0IEIdcktQoY7Jk=
Subject key identifier: 7E:DE:CE:5C:E9:7A:E9:F2:BD:61:CC:92:CF:7E:98:67:E8:D4:BD:E7
Certificate issuer: /CN=b817162877da9f4030bbcb9fe8ac143e6ab2871b
Certificate serial: 018CC86F792EE5683B4697109DE3EE47A8F6
Authority key identifier: B8:17:16:28:77:DA:9F:40:30:BB:CB:9F:E8:AC:14:3E:6A:B2:87:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/ft7OXOl66fK9YcySz36YZ-jUvec.roa
Signing time: Tue 02 Jan 2024 04:29:57 +0000
ROA not before: Tue 02 Jan 2024 04:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207992
IP address blocks: 146.19.168.0/24 maxlen: 24
45.145.164.0/24 maxlen: 24
45.145.166.0/24 maxlen: 24
45.145.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Jan 2024 15:36:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:79:2e:e5:68:3b:46:97:10:9d:e3:ee:47:a8:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b817162877da9f4030bbcb9fe8ac143e6ab2871b
Validity
Not Before: Jan 2 04:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7edece5ce97ae9f2bd61cc92cf7e9867e8d4bde7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d1:d9:1c:28:c1:5f:46:31:df:8c:44:3b:29:
c6:26:34:28:3b:0d:ed:f5:78:35:dc:6f:4a:df:9b:
2e:e7:5a:7f:21:d7:c5:c6:18:b2:58:ba:57:25:50:
30:b6:f0:3f:2b:ba:3f:31:a8:84:b6:3d:cf:2a:71:
0a:db:9d:e7:85:95:b3:c5:dc:d3:a8:37:15:11:f7:
61:0e:47:1e:83:c9:d7:87:66:4f:47:0a:27:de:84:
c1:6d:ec:98:80:7f:34:c4:de:e5:e2:ed:be:0c:ff:
3e:da:1e:e5:3d:5d:ab:5b:17:bf:d7:22:6d:f6:08:
80:f0:02:70:b1:2a:3c:fb:bb:c9:34:20:1e:4a:1d:
d2:3f:72:1b:9a:3c:71:91:05:dc:10:9f:1e:3e:9d:
8a:36:21:b8:6e:20:2c:47:f3:bb:94:0f:31:3d:e7:
00:72:48:d0:a4:36:0f:90:63:ce:fe:81:8d:36:aa:
59:ea:5a:b3:13:82:ab:c3:bf:a8:75:54:d9:5a:b2:
bc:cc:54:c2:59:6b:dd:15:36:0b:18:f4:7f:9e:52:
67:f1:85:81:60:a9:32:fd:1c:d4:35:6d:de:cb:71:
54:7e:1b:d3:0e:58:83:14:eb:7d:68:2c:69:28:bf:
af:e5:52:35:3b:a3:d3:c5:a9:09:66:54:2e:33:97:
f8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:DE:CE:5C:E9:7A:E9:F2:BD:61:CC:92:CF:7E:98:67:E8:D4:BD:E7
X509v3 Authority Key Identifier:
keyid:B8:17:16:28:77:DA:9F:40:30:BB:CB:9F:E8:AC:14:3E:6A:B2:87:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/ft7OXOl66fK9YcySz36YZ-jUvec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.164.0/24
45.145.166.0/23
146.19.168.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:ab:0c:2e:5f:ed:2c:8a:c0:dc:dd:c3:5a:99:6e:25:48:4e:
26:9d:b9:17:99:b7:fc:0f:86:56:26:5f:e9:7a:64:1d:01:8f:
ca:40:f1:21:3d:98:75:a1:d2:66:75:05:de:15:a4:5f:31:78:
96:56:0e:e4:ce:6e:be:5f:1f:cc:69:66:25:08:16:30:aa:f3:
a6:92:fa:ae:77:f3:93:60:f9:6e:64:1a:ca:2e:37:61:3b:7d:
1f:1c:53:61:af:9f:a0:fd:85:50:ec:cf:a9:78:63:91:2f:88:
4d:0c:8b:03:cf:53:b5:c6:d6:23:6c:03:d1:6d:2e:11:8a:99:
81:df:56:47:19:a9:04:f1:45:df:7a:7b:bd:43:fb:67:d0:5f:
af:30:f4:39:21:f3:91:7f:10:fc:58:a7:d8:2b:53:97:8f:cb:
51:ac:51:30:25:e9:66:df:52:99:44:10:e5:07:ad:78:e7:98:
e0:81:57:90:a5:cf:6f:29:94:bb:8a:c1:8f:80:9e:db:af:d4:
4e:82:78:54:68:f8:31:62:34:11:6a:15:3f:50:d6:7f:9f:03:
64:8d:60:59:c8:9e:8f:d7:d9:78:fc:4b:fc:c4:47:d9:1e:9e:
ae:92:76:d9:20:96:9a:b6:20:9a:c7:68:c0:4f:f7:2b:79:c2:
45:cf:a9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 26 18:48:40 2024 by rpki-client on console-ams.rpki-client.org