Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/pLw0qX8ZEx8f49SXIpoW_qve_B0.roa
File: pLw0qX8ZEx8f49SXIpoW_qve_B0.roa (raw, json)
Hash identifier: P8pEw0D80m7l0mTTyS3tI3/iiDFMdb9UkUyKjWVYi+8=
Subject key identifier: A4:BC:34:A9:7F:19:13:1F:1F:E3:D4:97:22:9A:16:FE:AB:DE:FC:1D
Certificate issuer: /CN=bea6ca03a8c135ceeae232c937c1ee0bab87e782
Certificate serial: 018601D16FDF12B7E3D551AC26AD398C8EDF
Authority key identifier: BE:A6:CA:03:A8:C1:35:CE:EA:E2:32:C9:37:C1:EE:0B:AB:87:E7:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/pLw0qX8ZEx8f49SXIpoW_qve_B0.roa
Signing time: Mon 30 Jan 2023 08:35:48 +0000
ROA not before: Mon 30 Jan 2023 08:35:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 45.8.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:31:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:01:d1:6f:df:12:b7:e3:d5:51:ac:26:ad:39:8c:8e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea6ca03a8c135ceeae232c937c1ee0bab87e782
Validity
Not Before: Jan 30 08:35:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4bc34a97f19131f1fe3d497229a16feabdefc1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:72:99:8e:8d:f9:93:2d:e0:82:68:1c:ae:22:
b8:cc:87:29:85:ad:c3:b3:65:35:7d:f2:ea:5e:f0:
5a:b2:a8:b3:e6:b7:4b:87:5f:bc:63:21:c4:0f:a9:
3d:8b:0f:e9:d4:d3:a7:58:f4:72:8b:5f:6c:cf:06:
54:c8:8b:f8:3a:68:d2:0f:39:b3:6e:90:96:77:c6:
02:91:55:56:11:48:65:72:41:50:69:35:4f:5d:6b:
97:1a:bc:d3:16:9a:67:38:ed:f9:93:0c:5a:3a:fb:
13:a9:49:aa:1c:d0:3c:28:72:ae:87:cd:6e:01:38:
31:d3:a2:64:f4:2d:ac:07:a5:8e:60:c6:38:88:6e:
f9:71:72:41:17:ff:20:4f:a7:d4:0e:80:ae:8c:56:
9c:74:5a:03:d2:b7:39:42:c9:b4:87:64:7a:05:eb:
a6:05:5e:a5:d0:22:d7:19:4f:dc:b2:97:94:cd:98:
cb:b0:e6:3c:2b:a6:b2:ef:76:c9:e8:d6:da:85:91:
f2:84:7d:40:a9:0c:67:a4:4a:9c:ea:a8:fa:a4:46:
ac:3e:cc:ba:24:cd:90:50:79:9e:4e:14:a9:cb:29:
da:5a:bd:5c:df:64:e9:5c:d0:b7:e2:5b:fc:a0:59:
89:cc:c1:41:3f:a3:7c:36:78:72:78:ea:6b:c6:98:
1c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BC:34:A9:7F:19:13:1F:1F:E3:D4:97:22:9A:16:FE:AB:DE:FC:1D
X509v3 Authority Key Identifier:
keyid:BE:A6:CA:03:A8:C1:35:CE:EA:E2:32:C9:37:C1:EE:0B:AB:87:E7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/pLw0qX8ZEx8f49SXIpoW_qve_B0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.43.0/24
Signature Algorithm: sha256WithRSAEncryption
81:d2:80:3a:03:03:fc:35:a3:3e:2a:3a:df:a8:a6:75:e0:04:
7e:20:23:6f:31:44:74:41:5d:c7:43:d5:18:83:15:12:6f:3a:
a4:d0:9e:28:dd:9d:7d:a6:69:9d:16:fa:95:51:bd:7f:9d:20:
3f:72:42:12:5f:f3:b7:01:62:a6:6d:27:f0:21:b5:e2:d6:88:
76:6d:14:aa:88:ff:9f:9e:bc:fb:57:6b:8a:67:93:b9:95:8e:
75:81:d6:9e:62:ba:8d:6a:99:81:93:e4:86:fe:71:64:83:dd:
f2:ac:4b:a0:9c:50:3e:df:a1:4d:e1:d8:12:ad:92:83:91:47:
9e:a2:e8:98:2d:58:8d:85:35:26:5f:bb:25:a1:5a:c0:e9:c7:
9a:60:73:9f:63:2c:c0:30:9d:bb:08:b2:e3:7f:00:b4:d6:ab:
26:e3:78:1b:46:a5:47:e5:23:02:b3:1c:3a:58:22:53:07:89:
a9:5b:71:f0:98:11:ad:37:65:93:96:fe:cf:06:0e:37:dc:d3:
3b:fa:33:bd:ee:dc:d3:1e:77:4e:eb:a8:d7:a9:5c:7e:b1:ae:
23:cb:90:32:a5:82:9c:d5:bf:6a:d0:17:ae:1e:4c:d0:5c:e3:
66:8a:12:41:75:56:60:a3:e0:1a:d6:2d:b5:8d:eb:ac:92:73:
28:2c:0f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:02 2024 by rpki-client on console-ams.rpki-client.org