Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/Rv8KsVOTz9hUKf-Kio1VvbekMlQ.roa
File: Rv8KsVOTz9hUKf-Kio1VvbekMlQ.roa (raw, json)
Hash identifier: +jynJuXh3RzAryY0oQ85EGDONENd6EL6bMkHzNMcDw8=
Subject key identifier: 46:FF:0A:B1:53:93:CF:D8:54:29:FF:8A:8A:8D:55:BD:B7:A4:32:54
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 01873249DE28DDE7FBC6A0A2176DBD658230
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/Rv8KsVOTz9hUKf-Kio1VvbekMlQ.roa
Signing time: Thu 30 Mar 2023 11:31:54 +0000
ROA not before: Thu 30 Mar 2023 11:31:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12695
IP address blocks: 185.113.138.0/23 maxlen: 23
45.151.234.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Mar 2023 17:54:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:32:49:de:28:dd:e7:fb:c6:a0:a2:17:6d:bd:65:82:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Mar 30 11:31:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46ff0ab15393cfd85429ff8a8a8d55bdb7a43254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f9:2c:ef:0c:c0:b7:bf:d0:af:e7:06:f2:a6:
a4:66:66:90:d3:0e:53:7d:3e:6d:4b:41:c5:e7:8c:
60:df:08:b5:d5:be:ce:25:d3:f6:26:de:65:c6:f3:
b6:5f:53:e1:e1:1a:c1:34:b6:a2:77:18:75:df:fd:
f1:47:b1:9f:b0:5b:e2:c5:78:af:3c:9f:64:cf:fe:
15:ae:24:77:5a:0a:f6:7d:b5:1d:05:1f:17:c1:31:
df:bc:86:cb:53:84:49:26:4b:f8:fa:a2:18:0b:ae:
99:bb:d5:e6:bc:0a:62:f4:fa:3c:77:72:48:9f:99:
e9:f0:93:e2:d6:68:05:98:08:c9:fc:26:31:3b:54:
3c:3d:74:6f:da:6c:24:a7:30:44:98:84:a0:90:98:
d8:cc:0d:f4:16:c6:14:18:61:eb:81:bb:bd:e1:6f:
3f:7f:69:52:92:a6:a2:f7:49:9b:20:f3:7e:e0:66:
d2:46:91:a3:ec:b3:fd:86:32:24:54:f6:84:43:8b:
47:58:39:98:a8:b7:99:da:f5:e4:7d:18:ad:15:13:
66:1c:f0:7e:eb:e1:48:7c:68:4c:0e:0e:35:d9:4a:
24:33:86:26:4e:5a:06:da:60:1d:86:5c:f1:30:01:
68:68:d2:d8:f4:e6:30:53:8d:83:5b:86:70:66:b9:
2b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FF:0A:B1:53:93:CF:D8:54:29:FF:8A:8A:8D:55:BD:B7:A4:32:54
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/Rv8KsVOTz9hUKf-Kio1VvbekMlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.234.0/23
185.113.138.0/23
Signature Algorithm: sha256WithRSAEncryption
49:9c:fe:02:9f:88:35:23:57:44:dc:ef:88:a2:6f:15:7f:ab:
c7:0c:3a:a4:1c:92:e1:e6:95:7b:1d:b4:81:bf:d2:f1:98:11:
25:1d:51:b8:fd:4e:d6:a8:e4:52:9f:6e:f2:15:fd:5e:47:d4:
9b:34:16:1b:b7:92:5f:0e:98:8e:94:0b:10:c8:0e:62:5d:23:
4e:d2:33:98:63:82:ff:1b:9d:c3:f4:fa:10:f0:bc:dd:c8:22:
6a:8a:b3:34:71:b8:2e:89:a8:23:19:b7:00:e9:d7:f1:b9:40:
b3:b6:e4:0f:5e:3c:6a:28:4d:6a:31:e0:f7:9f:d0:a8:8d:5a:
f0:97:7c:84:89:43:14:db:59:e3:46:c1:02:87:21:47:4e:f9:
59:af:b4:c9:31:ad:f0:97:3b:63:4e:06:a0:b4:6d:cf:5a:04:
8e:06:4a:c1:60:a4:5e:a6:8b:a2:10:c7:68:56:ae:54:1e:8e:
3d:5f:a1:0f:d3:19:70:32:78:db:9c:45:9d:8b:3f:e3:cc:80:
ae:9d:92:90:14:96:42:07:68:f3:03:21:3d:cb:02:67:2a:e6:
94:de:bc:0a:51:14:f6:36:da:7b:ad:1a:dc:d6:2d:93:0c:12:
f6:09:9c:15:43:dc:8c:16:be:e9:2e:7a:fe:42:f9:21:05:15:
97:18:5a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:17 2024 by rpki-client on console-ams.rpki-client.org