Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/Rlu6dM86kDenVQPl4JYyh-FvWXU.roa
File: Rlu6dM86kDenVQPl4JYyh-FvWXU.roa (raw, json)
Hash identifier: eNPqKnK2m1AUE6tsUi2irUbxS8qE5okzIkQisEKogkc=
Subject key identifier: 46:5B:BA:74:CF:3A:90:37:A7:55:03:E5:E0:96:32:87:E1:6F:59:75
Certificate issuer: /CN=3aca50858a1856ffa02e91356f14236e7c38b85a
Certificate serial: 01856F3012FD857FFFC26E25891950D052F4
Authority key identifier: 3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/Rlu6dM86kDenVQPl4JYyh-FvWXU.roa
Signing time: Sun 01 Jan 2023 21:14:59 +0000
ROA not before: Sun 01 Jan 2023 21:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211366
IP address blocks: 45.9.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:30:12:fd:85:7f:ff:c2:6e:25:89:19:50:d0:52:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aca50858a1856ffa02e91356f14236e7c38b85a
Validity
Not Before: Jan 1 21:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=465bba74cf3a9037a75503e5e0963287e16f5975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:87:f6:c7:2c:e0:ea:19:11:12:b9:10:77:d3:
d0:d4:fd:13:9b:1f:e8:fd:c1:73:bf:c7:2b:f5:5e:
2c:2e:db:73:3d:45:32:a8:32:2c:6d:06:bf:c9:b0:
af:69:c9:3b:8b:02:2a:07:63:fd:54:48:c3:41:35:
6f:77:b0:80:9e:2f:e8:22:d9:6f:bf:41:a2:cc:a6:
14:3c:48:b3:2a:98:ad:35:32:c1:b3:d7:38:08:df:
f0:be:40:44:6d:b6:e4:09:ca:fc:ba:0c:70:6c:4a:
a1:5f:26:a3:e1:74:59:a6:c1:e9:0d:51:e6:94:4d:
67:7c:6c:91:e6:17:b7:19:0f:ab:6a:01:b7:c6:07:
09:28:5b:00:56:a2:ae:6e:7b:ac:99:34:03:af:68:
01:6a:b8:42:c3:74:57:55:a7:2e:d2:ce:af:e1:a2:
34:d5:76:4b:ab:ea:ee:b5:69:fc:03:5c:ef:9e:c9:
78:0e:39:a4:09:3f:76:0c:21:92:ed:b1:e3:8b:a7:
36:98:98:56:04:3e:48:d6:6d:fa:ab:a9:62:97:f4:
77:5e:91:2b:f7:c4:f4:e1:71:62:84:53:94:9b:bc:
cd:e3:34:04:cd:37:20:78:17:9c:59:d8:0a:97:fc:
cd:77:85:1f:95:a4:42:75:85:6b:a9:13:54:d6:f8:
3a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5B:BA:74:CF:3A:90:37:A7:55:03:E5:E0:96:32:87:E1:6F:59:75
X509v3 Authority Key Identifier:
keyid:3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/Rlu6dM86kDenVQPl4JYyh-FvWXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.193.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:9f:f0:38:9f:87:1c:e4:60:2f:67:02:cc:13:3c:93:fa:7e:
ad:07:ab:bb:8e:d7:1e:b2:ac:33:cb:b5:2c:7d:13:17:d6:32:
13:9b:5f:12:29:a5:05:fb:ab:95:57:06:bd:6a:a6:f9:e9:b1:
a6:fa:fb:fb:9a:e9:2f:2c:09:a8:58:2f:8e:72:7f:c9:3c:ed:
23:6c:4b:b6:ac:ac:24:0f:16:47:a8:d4:80:d0:8f:0c:c9:bd:
dc:88:ac:f8:e0:8a:7c:db:2e:37:b6:17:f6:89:95:4e:e1:c0:
60:03:2d:21:09:57:47:b8:cf:c4:44:1c:7d:bf:ca:cc:f4:67:
12:61:2b:86:85:0a:6d:cf:1f:78:24:f7:b0:35:5e:f8:f7:2d:
a1:4a:c3:d2:1a:b7:dd:0d:f0:71:04:66:94:4e:f1:57:9d:a6:
df:45:14:34:35:cc:a4:47:d5:a4:fd:41:55:95:a9:a6:2b:7d:
65:d0:3c:84:c4:dd:c7:31:c2:36:6b:f5:42:a7:c0:1c:f7:ac:
95:ca:df:de:11:d5:18:09:f8:8c:e0:08:01:09:44:69:76:9f:
46:fb:b7:16:79:ea:f2:4b:d5:f4:82:0f:1d:e9:75:08:58:23:
53:f3:36:ed:58:b6:16:33:45:3d:09:33:02:ec:15:9f:8d:7e:
3c:7f:87:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:58 2024 by rpki-client on console-fra.rpki-client.org