Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/Rsi7yEwXnF05WsjkAg6j6gfBEjs.roa
File: Rsi7yEwXnF05WsjkAg6j6gfBEjs.roa (raw, json)
Hash identifier: G0TE3xamuM7p1MAJQb7X167MO/FzR0y18v6mqHqjqJU=
Subject key identifier: 46:C8:BB:C8:4C:17:9C:5D:39:5A:C8:E4:02:0E:A3:EA:07:C1:12:3B
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 018722E6FF915115A94CE26631E570E1DCD3
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/Rsi7yEwXnF05WsjkAg6j6gfBEjs.roa
Signing time: Mon 27 Mar 2023 11:49:36 +0000
ROA not before: Mon 27 Mar 2023 11:49:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 45.151.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Mar 2023 11:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:e6:ff:91:51:15:a9:4c:e2:66:31:e5:70:e1:dc:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Mar 27 11:49:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46c8bbc84c179c5d395ac8e4020ea3ea07c1123b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fa:ca:9d:36:54:9a:d6:fb:5c:41:06:08:3f:
1c:82:22:05:e0:52:db:16:fc:d2:5e:22:99:71:23:
57:97:5a:3c:bb:b2:0f:a6:45:2c:94:db:d9:41:6f:
5a:7f:3a:4a:9d:83:22:8d:06:27:e8:9d:ac:80:45:
63:ba:8f:4c:90:09:c1:27:fd:a0:80:f4:45:28:4d:
9c:60:f1:0b:8f:06:8b:e1:e3:81:b9:61:a9:7a:e3:
2c:b8:4a:37:46:1f:da:66:b9:1d:e0:bf:a6:c7:50:
95:9c:e9:57:20:b8:f1:4f:96:f0:38:6f:59:58:02:
77:94:e6:3d:1f:08:1a:98:27:27:99:63:74:07:61:
0e:a1:7a:79:44:a3:fe:58:57:51:a9:a8:43:ad:a0:
95:31:6b:2f:91:a0:3d:99:70:c6:14:a6:f3:55:f9:
05:03:4a:0a:e1:2f:69:e9:c3:a3:e2:29:f2:7c:6d:
b9:2a:bd:c2:f2:49:30:7e:6e:3c:fb:b5:73:bc:79:
61:e8:39:a5:c8:66:96:2a:4e:da:3f:99:2e:85:4a:
3c:cf:60:aa:9b:48:99:59:f7:36:2b:ee:a9:c4:ab:
e0:d8:71:5b:76:51:db:11:3b:d3:83:f8:b6:07:29:
e2:86:c0:09:f6:ab:da:c9:a7:5f:af:38:03:1f:51:
7a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C8:BB:C8:4C:17:9C:5D:39:5A:C8:E4:02:0E:A3:EA:07:C1:12:3B
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/Rsi7yEwXnF05WsjkAg6j6gfBEjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.234.0/24
Signature Algorithm: sha256WithRSAEncryption
84:b2:e3:dd:c2:13:f9:05:8e:05:00:be:8d:4b:b7:8a:7d:02:
80:4f:90:b3:af:d6:c1:79:b6:31:ef:c1:42:7c:06:e2:4a:f8:
d0:c4:97:ed:12:d7:d5:06:8c:ab:dc:80:31:59:8a:b8:46:8d:
8a:f3:69:07:ca:32:a7:b8:18:4a:f9:e8:29:7e:76:ba:fe:e3:
45:bb:23:03:01:e9:cf:e4:e4:cd:b0:94:78:0a:38:75:c4:75:
84:7d:58:3a:cf:3a:df:56:e6:99:75:08:0b:21:ae:a4:ad:d1:
f1:0d:c1:85:38:df:f4:77:17:1d:5f:9f:72:d2:ba:cd:b7:6b:
66:dc:09:b4:68:07:51:62:43:dd:a0:3b:b3:42:bb:25:b2:fb:
41:fc:29:92:50:5e:40:f5:81:d1:57:36:bb:fd:11:8f:78:92:
24:20:e9:2f:3b:14:58:47:de:72:08:e8:40:6c:d3:0f:49:9f:
95:42:ee:71:54:d7:cf:43:db:bd:3f:ac:c5:10:1e:39:37:66:
bf:92:18:d5:fe:4d:8c:42:a9:f8:6d:88:22:93:05:22:45:99:
b4:16:64:10:45:17:a3:8a:53:15:4f:e6:5d:28:01:c8:5d:b1:
8d:ba:1b:f0:13:bc:0c:30:c8:b2:16:48:3d:b2:7a:43:d9:f8:
b6:f1:fd:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:17 2024 by rpki-client on console-ams.rpki-client.org