Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/3xzteEjJtI2HAeqXTIXzbm20wxQ.roa
File: 3xzteEjJtI2HAeqXTIXzbm20wxQ.roa (raw, json)
Hash identifier: KWAvk4b8dnvnpExNc+vzaymxfILfWZzuN7eJhJqHxuY=
Subject key identifier: DF:1C:ED:78:48:C9:B4:8D:87:01:EA:97:4C:85:F3:6E:6D:B4:C3:14
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 01856DAF6E7E91A5674195549AF2CAF7738E
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/3xzteEjJtI2HAeqXTIXzbm20wxQ.roa
Signing time: Sun 01 Jan 2023 14:14:51 +0000
ROA not before: Sun 01 Jan 2023 14:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212477
IP address blocks: 45.131.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Dec 2023 13:37:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:af:6e:7e:91:a5:67:41:95:54:9a:f2:ca:f7:73:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Jan 1 14:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df1ced7848c9b48d8701ea974c85f36e6db4c314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c9:a1:2d:1f:5e:77:6d:09:bc:0c:49:b8:16:
f8:1a:19:39:97:c4:b0:70:cb:32:dc:b3:78:42:5f:
05:8c:a3:2f:c0:86:6a:ac:5a:ef:d3:0b:34:0d:88:
ab:8f:66:07:2c:6a:8e:72:90:a3:e0:15:ac:18:c4:
f4:fd:8c:ce:78:8a:f0:1e:2f:32:98:3c:b8:60:ed:
96:fd:d2:db:a4:f8:4b:4c:73:8f:07:d0:de:2d:0b:
19:dc:2d:5a:72:05:75:7a:8e:4e:a2:c2:27:79:47:
87:46:9c:ad:2b:95:93:42:ec:4a:43:fd:ae:d6:5d:
01:75:24:75:ec:71:ca:ba:e4:2e:ea:49:5a:ab:96:
5d:c7:0f:a8:b3:93:ad:0e:4e:52:85:c5:ad:b6:e0:
2b:f5:dc:a3:66:ee:dc:4e:17:85:fc:5b:7d:6c:70:
37:18:0e:38:7d:e9:fb:c7:ab:ac:bc:ad:8a:e0:4f:
51:dc:10:8b:8e:cf:dc:2c:d5:a4:a2:dd:5b:c2:5d:
45:70:1f:88:ed:20:0b:99:74:03:85:fd:7d:4f:87:
17:9c:23:16:8c:1c:f7:78:12:37:56:cc:ba:6a:23:
a8:2e:54:38:13:b8:a4:0c:d4:3b:81:b8:dd:9d:3b:
81:28:98:37:57:27:f8:51:ff:2d:c6:51:84:8e:37:
6b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1C:ED:78:48:C9:B4:8D:87:01:EA:97:4C:85:F3:6E:6D:B4:C3:14
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/3xzteEjJtI2HAeqXTIXzbm20wxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.79.0/24
Signature Algorithm: sha256WithRSAEncryption
56:b0:3d:f5:8b:ec:d8:08:b0:36:b7:23:3d:bf:98:fa:39:9c:
69:5a:4a:17:d8:0c:c3:0e:4c:65:78:95:e1:ad:10:2c:9d:04:
fe:d4:e2:c4:6f:74:b7:69:9b:94:f3:8b:af:de:00:1f:eb:21:
f4:08:be:be:2d:d4:07:e2:e0:69:fd:74:b1:ef:f1:2e:02:c6:
85:15:c5:47:da:01:9b:a6:49:d1:db:ee:a6:09:e3:67:26:2d:
36:6d:f2:2a:e6:40:e7:b6:d9:14:68:a3:17:9e:77:65:97:86:
d4:6d:90:57:2e:22:f9:04:e3:6e:3e:9b:84:33:bb:45:9e:0d:
e8:93:ca:92:91:10:6a:5b:e2:ed:ff:54:fc:be:31:c6:c8:58:
fb:9a:b2:dd:b5:17:56:be:60:02:ff:6b:72:09:c7:f0:92:95:
ea:c7:64:5e:82:ac:f4:96:23:f5:d9:32:8a:69:0d:73:04:63:
fc:6a:04:10:b7:81:54:1a:6b:43:09:4f:7e:a3:53:de:be:9a:
28:a3:89:af:43:a5:37:15:ef:12:a3:ca:75:80:30:36:88:39:
dc:b3:52:ae:4c:1c:6c:f1:c7:b4:38:33:f6:b7:0f:49:76:58:
07:3f:10:89:cc:19:af:84:f6:6d:72:45:54:1f:d1:3b:45:99:
e3:bd:d9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:29 2024 by rpki-client on console-fra.rpki-client.org