Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/S-CL00kBck716UiYJlFjfsFTLPk.roa
File: S-CL00kBck716UiYJlFjfsFTLPk.roa (raw, json)
Hash identifier: wL3JPgPhE9RmEEAdrbCuId3iF1DhtJQG+41h7baYi28=
Subject key identifier: 4B:E0:8B:D3:49:01:72:4E:F5:E9:48:98:26:51:63:7E:C1:53:2C:F9
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 018733A96D3D12B110A4D3CD5B1867DCA7B4
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/S-CL00kBck716UiYJlFjfsFTLPk.roa
Signing time: Thu 30 Mar 2023 17:55:54 +0000
ROA not before: Thu 30 Mar 2023 17:55:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12695
IP address blocks: 185.113.138.0/23 maxlen: 23
45.151.234.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 May 2023 09:35:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:33:a9:6d:3d:12:b1:10:a4:d3:cd:5b:18:67:dc:a7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Mar 30 17:55:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4be08bd34901724ef5e948982651637ec1532cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f6:c4:39:bb:06:7b:bd:9e:dd:48:11:2b:66:
6a:21:ea:ba:e6:64:df:3e:9d:6f:f0:f5:f9:1e:2b:
c5:6b:0a:61:06:2d:bb:e9:e3:0a:e4:4e:83:d9:98:
bb:b2:30:a8:79:22:b1:44:d7:6c:9b:5a:e0:7e:4f:
16:1a:8f:48:fd:b8:bb:a3:33:5b:b1:10:69:52:d9:
35:c2:c6:35:b1:57:bd:0f:96:41:ab:d9:c1:d2:33:
81:d7:07:8f:04:c8:13:3a:86:18:5f:37:21:47:9f:
21:e2:74:1f:6a:1a:1f:9c:b3:6a:1b:87:72:f1:c2:
8c:ac:c2:ba:b6:16:2a:32:a2:01:78:b3:8e:77:13:
2b:a1:1b:bf:ea:52:42:47:9d:20:19:76:a9:7d:fb:
61:b1:99:51:71:ae:85:03:d0:9c:c5:df:1d:2f:67:
0b:47:d2:53:2d:9f:7c:55:47:97:8d:8a:e6:a3:2e:
02:c2:2c:a4:c4:07:0d:14:b5:9b:91:e7:1a:70:b7:
8e:12:0d:2a:53:55:cd:47:a2:22:d2:3a:6c:3c:c7:
4a:6e:bd:6d:f4:34:b4:dd:55:c4:6d:9c:ae:7a:5d:
a2:1e:53:ce:d9:8b:d7:c7:af:30:cd:64:a1:e8:ae:
6d:78:3f:4c:fb:5a:8d:be:47:ea:1d:85:4c:b2:f2:
0b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E0:8B:D3:49:01:72:4E:F5:E9:48:98:26:51:63:7E:C1:53:2C:F9
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/S-CL00kBck716UiYJlFjfsFTLPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.234.0/23
185.113.138.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:bd:32:40:71:99:93:d1:50:6c:48:15:a2:49:4a:7c:d4:31:
68:d3:81:2c:6f:aa:a4:20:23:b6:50:2a:2f:f9:41:0d:e0:1f:
4b:1b:f8:3c:f5:87:5a:b1:d4:a0:13:f6:18:78:12:eb:0c:9b:
d6:3a:b5:d5:87:53:42:31:c8:aa:74:c4:24:ae:fc:cd:bd:39:
45:45:2e:c5:ca:7e:ba:8b:e0:30:f0:09:ad:56:99:8a:87:f8:
f6:06:6e:13:3c:fd:25:35:0e:b0:cf:6a:c1:eb:17:22:90:49:
ef:c0:a4:2f:00:64:ab:39:f0:c6:bb:86:78:98:30:c9:79:af:
69:43:52:3c:7e:84:1a:40:05:c0:45:7c:b2:6f:8a:75:15:39:
61:23:67:06:51:c3:51:cd:7b:bd:dc:84:49:ec:50:3a:dc:48:
7a:14:66:2f:ef:38:3c:33:48:a2:0e:f2:58:af:9b:c3:56:b2:
57:e8:24:df:bd:e5:bb:86:7e:59:94:07:df:a4:5f:10:ea:f2:
9c:8f:7a:ec:a4:8b:4f:bc:b1:d3:d7:4d:2a:16:68:f2:4a:22:
c4:3b:7a:9d:8e:f1:eb:9e:3e:03:71:7b:8b:2c:0b:2c:54:76:
9b:8c:f5:c1:a5:65:42:54:1c:05:06:f5:6f:15:f1:df:38:c0:
9f:da:1e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:17 2024 by rpki-client on console-ams.rpki-client.org