Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/fMQqGsSziRm1IRX3FBeEzelEVD0.roa
File: fMQqGsSziRm1IRX3FBeEzelEVD0.roa (raw, json)
Hash identifier: JmQBTy0sXmPwUX1MFF+msjExVmZqC7ee3M9QLFq0uvw=
Subject key identifier: 7C:C4:2A:1A:C4:B3:89:19:B5:21:15:F7:14:17:84:CD:E9:44:54:3D
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 01856DAF689EAB787DA093D159808EAC2647
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/fMQqGsSziRm1IRX3FBeEzelEVD0.roa
Signing time: Sun 01 Jan 2023 14:14:50 +0000
ROA not before: Sun 01 Jan 2023 14:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 45.157.128.0/23 maxlen: 24
45.157.130.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Sep 2023 07:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:af:68:9e:ab:78:7d:a0:93:d1:59:80:8e:ac:26:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Jan 1 14:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cc42a1ac4b38919b52115f7141784cde944543d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:39:3e:57:77:81:32:43:43:ee:32:3c:98:16:
a9:ff:5d:ca:65:3c:e2:34:47:c5:8e:57:63:4b:a4:
c2:87:76:c5:e6:d9:fe:e7:ef:75:83:27:00:a4:cd:
15:28:8a:a8:b9:36:84:44:de:0f:70:fe:4d:3b:e6:
5e:16:59:b3:86:f4:d8:2d:c9:66:84:66:b5:77:a5:
8f:7e:05:7a:1a:04:37:b5:11:ee:8d:96:24:d0:d5:
86:a3:1e:25:1e:d3:a8:6d:5d:92:53:8e:78:1a:3f:
85:b4:08:2a:fe:f2:43:b1:c6:49:57:8b:58:9f:72:
93:69:e0:e6:24:a7:f3:ef:41:6c:84:70:09:4e:9b:
55:4d:a8:07:95:5c:63:bf:8c:b5:9a:5a:a5:e1:c1:
b6:8f:6d:8d:ac:d5:8d:a1:74:dd:aa:3e:65:cd:ad:
fa:ee:4b:28:24:f8:f1:00:97:d1:bd:c9:e3:74:3e:
70:e1:25:bd:db:03:5d:d5:44:41:fa:e3:70:ce:85:
21:b6:55:b5:47:b1:29:92:87:49:a6:fd:6b:1a:0d:
a9:eb:6b:82:16:57:79:b4:41:b5:fa:52:a7:c9:76:
cf:ca:1a:3c:d7:72:f7:24:65:7e:eb:72:28:8f:00:
3d:ea:28:d9:c8:23:5f:ca:5c:ac:fb:8a:0a:e1:a4:
75:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C4:2A:1A:C4:B3:89:19:B5:21:15:F7:14:17:84:CD:E9:44:54:3D
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/fMQqGsSziRm1IRX3FBeEzelEVD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.128.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:33:8d:a9:f4:01:4c:4b:5e:e4:69:92:f3:44:16:6d:d3:cf:
ab:08:db:b7:c7:58:1d:94:be:50:35:a5:58:be:49:50:f1:ad:
f5:6d:e6:1e:78:a6:fb:cd:3b:e7:0f:14:f0:5d:59:e3:c7:b3:
e3:f9:6a:68:5b:69:90:db:d4:57:3f:e6:b8:23:0c:2e:20:2f:
6e:48:b7:1e:dd:65:78:b1:4c:69:6e:b3:95:a0:66:6b:ae:df:
84:8c:aa:56:4b:d9:4c:c9:82:c0:ad:db:13:c3:1f:8d:98:37:
50:3b:83:24:86:f4:51:ab:f8:71:4d:ed:38:6f:22:be:59:89:
c6:68:80:01:9b:36:d3:53:66:be:1f:77:91:80:40:5a:95:7b:
1e:9f:e7:fb:84:a2:e6:77:7d:68:92:e4:69:ef:86:af:a6:6d:
d4:f3:a5:86:a5:bf:cf:64:05:84:02:dc:6e:7a:19:06:06:f5:
35:02:72:16:82:75:38:4c:56:aa:6e:63:a7:1e:1f:0c:82:68:
86:36:f7:fc:d8:65:23:16:8d:f2:58:26:c2:54:f1:91:f0:e8:
6b:5b:31:1c:df:ff:e5:8e:82:39:94:5d:19:4a:6b:b1:f1:55:
9d:02:a4:e7:f8:0f:3a:72:71:52:4e:63:bc:f1:ee:c6:1c:3a:
74:ac:c6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:29 2024 by rpki-client on console-fra.rpki-client.org