Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/b2j7OsZHA5IVoI5nt10pT3XKz6w.roa
File: b2j7OsZHA5IVoI5nt10pT3XKz6w.roa (raw, json)
Hash identifier: ZPyEPz24AqNUP5cpVCCN7DSYxmupXO/0IhHrdKxlncw=
Subject key identifier: 6F:68:FB:3A:C6:47:03:92:15:A0:8E:67:B7:5D:29:4F:75:CA:CF:AC
Certificate issuer: /CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
Certificate serial: 0185DE9A12A6586049A7AF3A1F9B8354A691
Authority key identifier: 25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/b2j7OsZHA5IVoI5nt10pT3XKz6w.roa
Signing time: Mon 23 Jan 2023 12:28:37 +0000
ROA not before: Mon 23 Jan 2023 12:28:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 45.143.132.0/24 maxlen: 24
45.143.134.0/24 maxlen: 24
45.143.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Feb 2023 11:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:de:9a:12:a6:58:60:49:a7:af:3a:1f:9b:83:54:a6:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
Validity
Not Before: Jan 23 12:28:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f68fb3ac647039215a08e67b75d294f75cacfac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0f:31:5a:65:de:12:51:f1:33:a2:f9:c3:b8:
2e:53:08:ac:f2:79:df:d7:ee:a6:ad:e4:c5:2c:7f:
5c:56:15:fe:da:17:ae:1c:2a:1c:2c:22:fb:a8:04:
6c:a2:70:f3:87:99:40:9a:3e:57:95:c5:25:58:76:
e0:b6:e5:55:1d:a2:83:cf:80:3e:93:73:be:2c:d1:
96:7c:2d:64:c2:c7:d4:46:ad:8c:fb:2e:57:0b:8c:
d2:c0:28:8e:91:54:68:01:9d:43:ae:d3:1e:31:f3:
75:8d:f9:ba:de:ae:8d:62:aa:d7:94:0b:81:68:6e:
57:10:e0:63:05:ca:42:10:e7:2f:78:97:37:a5:1b:
fe:79:cd:49:e6:dd:6a:7c:88:22:40:0c:e3:95:94:
0f:1b:16:00:a5:3c:8a:5e:e2:ab:36:26:ae:bd:0d:
46:5f:31:3b:9f:91:35:1a:dd:c8:1a:0f:61:e6:26:
de:d8:4e:5c:2a:97:f0:ed:6e:0e:6e:63:a9:b5:ad:
7c:d7:96:b3:5d:be:1d:4e:8a:cb:6c:73:e7:b2:bd:
6e:a5:d9:ec:77:8e:71:06:9d:1e:d1:2c:45:4c:bc:
5f:53:73:14:bf:f5:a4:07:7d:01:c1:34:df:18:3f:
1b:01:08:c4:e1:f8:cc:1e:8a:3b:57:01:b2:1f:36:
c3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:68:FB:3A:C6:47:03:92:15:A0:8E:67:B7:5D:29:4F:75:CA:CF:AC
X509v3 Authority Key Identifier:
keyid:25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/b2j7OsZHA5IVoI5nt10pT3XKz6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.132.0/24
45.143.134.0/23
Signature Algorithm: sha256WithRSAEncryption
87:20:e9:f7:b9:6c:12:66:1e:26:59:2a:43:9a:31:ae:3f:cb:
a2:56:8f:d8:08:df:5e:37:a0:84:d8:98:7b:4c:50:c2:f6:0e:
a6:3f:ae:80:94:0b:9a:44:94:00:84:72:7c:47:42:ab:e3:69:
f1:93:a6:41:2c:ac:d6:bf:47:bc:8b:37:a0:ad:7f:74:bc:30:
55:80:25:d1:86:a8:a1:64:fe:ec:f5:ca:9c:d2:d1:56:27:84:
af:7b:25:09:93:58:00:ec:18:3d:7e:11:3f:a7:4e:c8:01:07:
e5:33:c4:7d:e0:7b:64:9e:0b:42:91:97:90:8b:f2:d0:29:d3:
26:df:b4:d0:02:9c:29:cd:4f:6e:41:b5:47:b0:71:16:e6:4c:
de:e4:12:dc:0a:5a:68:ff:e2:28:a2:2d:63:27:bd:37:cd:59:
6f:93:58:02:83:8f:fa:71:f9:39:d2:c0:ea:91:10:e0:e9:cb:
35:a3:67:2f:e0:49:20:62:7c:ac:4d:63:cf:80:1a:38:c9:86:
38:d1:f2:76:85:45:03:dd:a3:0f:dd:0e:51:6b:25:93:ec:42:
5c:17:71:d6:9a:c6:96:67:3b:e6:35:66:d3:c9:e0:11:1d:7d:
39:b6:b8:b0:5f:7e:83:0e:8b:00:53:46:96:0f:ef:33:70:ef:
33:d3:65:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:00 2024 by rpki-client on console-ams.rpki-client.org