Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/_6e_4F1dN6ecroz5o7Hco50Qze8.roa
File: _6e_4F1dN6ecroz5o7Hco50Qze8.roa (raw, json)
Hash identifier: q+/vYYUrZIPp++GIPdF8MtQ3qq5jj/Ynec9YEB9tlHs=
Subject key identifier: FF:A7:BF:E0:5D:5D:37:A7:9C:AE:8C:F9:A3:B1:DC:A3:9D:10:CD:EF
Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial: 01856EC226153C16B49A14789F5A2A12BD9A
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/_6e_4F1dN6ecroz5o7Hco50Qze8.roa
Signing time: Sun 01 Jan 2023 19:14:55 +0000
ROA not before: Sun 01 Jan 2023 19:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3215
IP address blocks: 45.141.50.0/24 maxlen: 24
45.141.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Jan 2023 11:26:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:26:15:3c:16:b4:9a:14:78:9f:5a:2a:12:bd:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Validity
Not Before: Jan 1 19:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ffa7bfe05d5d37a79cae8cf9a3b1dca39d10cdef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a8:dc:8d:bb:57:41:9f:15:f3:56:46:45:33:
f1:68:64:e0:bb:9a:77:e0:dc:97:68:e8:02:89:77:
21:16:ee:a5:0a:14:6e:08:67:48:8f:82:92:e3:b2:
7d:2f:a2:0f:86:51:bf:6e:99:49:b3:de:61:da:ad:
a2:e2:79:b0:c7:f4:6e:05:dc:59:76:7e:68:9c:3a:
26:01:2b:2d:01:23:a7:5b:1a:53:b8:b3:87:1d:59:
bb:4a:4a:10:04:a2:22:67:c2:29:57:05:90:cd:33:
81:72:bf:9d:b8:d3:5f:98:62:0a:7d:16:80:62:2d:
10:9d:cf:2a:f1:52:46:a1:6e:63:7a:98:08:c9:39:
41:8a:4b:37:28:4e:9f:a1:0d:03:5b:93:63:6b:e1:
08:79:82:b5:43:5c:cb:41:01:c3:ee:36:9b:b4:7f:
e0:b2:6d:2e:d0:be:e2:28:e7:88:8e:56:08:68:df:
77:19:7a:0b:0f:47:33:24:e3:80:9c:cf:7a:f5:80:
56:21:62:ce:4a:a0:be:81:78:36:ba:a9:78:fb:a5:
84:3d:ea:72:92:27:f9:6f:f3:97:5a:cd:9a:e2:06:
8f:2d:ce:29:01:52:0f:a8:7f:58:4d:2e:bd:ae:0b:
73:b0:6d:3f:70:40:63:23:e2:c1:ef:db:f2:df:fa:
45:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A7:BF:E0:5D:5D:37:A7:9C:AE:8C:F9:A3:B1:DC:A3:9D:10:CD:EF
X509v3 Authority Key Identifier:
keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/_6e_4F1dN6ecroz5o7Hco50Qze8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.48.0/24
45.141.50.0/24
Signature Algorithm: sha256WithRSAEncryption
62:34:d0:49:5c:ba:0c:d9:e9:d4:aa:e5:74:03:aa:a1:ac:18:
c4:ad:d3:9d:3e:bd:54:58:ea:87:01:a9:ce:bc:77:99:80:35:
d1:a9:8b:07:dc:57:af:d6:d0:a0:4d:1f:5e:98:9a:88:0d:71:
b7:e9:c0:fd:f1:95:69:ac:28:6e:f4:15:fc:6d:d1:1e:db:68:
e3:61:e4:3a:9e:77:e4:23:07:7a:fd:e0:02:54:ac:d6:e6:05:
d1:8f:56:e6:0f:9f:3b:f8:17:3a:08:d5:bb:16:c8:31:69:ad:
37:38:2a:00:16:bd:17:4b:24:90:9f:5d:e5:0c:ec:42:2b:11:
f1:ba:52:18:05:72:b3:ca:c9:c6:94:80:53:14:b5:27:54:25:
a2:b5:ec:9f:7f:4a:15:ae:49:b4:83:6c:c9:be:de:d0:6b:ec:
6c:83:85:9d:33:32:8f:2a:fb:18:79:7d:20:3e:ff:fc:44:60:
5c:c9:fe:d8:cb:7d:f3:2b:76:4c:93:1b:33:11:52:9c:c7:63:
88:19:f7:a7:b8:5b:a3:a7:04:f7:ef:15:f0:56:3a:4a:56:81:
db:59:5f:b4:bd:84:bc:18:70:84:61:15:74:bd:db:2d:27:30:
38:cd:29:3a:c8:48:a4:15:fd:c0:15:cd:39:88:c8:a5:f6:4e:
b7:1b:c7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:51 2024 by rpki-client on console-fra.rpki-client.org