Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/P9C7GG4HsGMo2_SbGSUvRFGpBa0.roa
File: P9C7GG4HsGMo2_SbGSUvRFGpBa0.roa (raw, json)
Hash identifier: iB9Cpky03Z+rO/ZIhASEDcyowA4txFNtEOVJbJ7TAaU=
Subject key identifier: 3F:D0:BB:18:6E:07:B0:63:28:DB:F4:9B:19:25:2F:44:51:A9:05:AD
Certificate issuer: /CN=57130f799f8a8985502a2ea3356037674085cfca
Certificate serial: 018CC4923B98CB26BB5362AC77462C263AD8
Authority key identifier: 57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/P9C7GG4HsGMo2_SbGSUvRFGpBa0.roa
Signing time: Mon 01 Jan 2024 10:29:27 +0000
ROA not before: Mon 01 Jan 2024 10:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.149.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jan 2024 17:23:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:3b:98:cb:26:bb:53:62:ac:77:46:2c:26:3a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57130f799f8a8985502a2ea3356037674085cfca
Validity
Not Before: Jan 1 10:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3fd0bb186e07b06328dbf49b19252f4451a905ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b1:90:03:0f:58:d4:78:00:78:af:43:a7:2d:
8f:2b:36:b5:0b:50:e9:3f:17:06:ff:92:53:57:b3:
82:ec:55:1c:25:cf:db:b4:7c:d9:d9:1c:b2:63:db:
27:3d:21:ac:d8:c0:40:7f:6f:f8:bb:6d:41:d2:63:
39:73:31:3d:90:85:ee:05:0a:ae:43:88:f2:49:9d:
50:e8:f4:41:3b:95:53:65:09:ad:ba:68:2d:4b:a2:
c7:88:a4:b6:ad:00:2c:6f:5f:d1:2c:fe:fc:97:36:
fb:34:44:72:66:69:3b:08:ec:95:59:cc:0a:ef:3f:
c9:8c:43:70:40:41:80:0b:1b:3e:e1:7a:0c:75:f6:
5c:d4:47:4b:9b:b8:db:5b:dc:e4:d5:5f:52:01:dd:
83:11:31:68:f2:3a:7f:67:07:d0:bf:34:45:25:24:
90:cf:55:2b:f7:30:d5:5b:c6:03:e2:3b:10:d0:54:
22:9d:46:b3:03:fe:7d:f9:11:b9:99:68:90:24:5c:
16:8f:30:be:40:cb:04:3f:55:ab:f6:04:23:e1:01:
59:b8:74:04:c2:43:67:b0:14:a9:fa:c0:a7:66:e3:
00:1f:a0:f2:9b:a9:4b:c4:aa:c3:9d:1e:bf:13:1f:
11:b8:5a:58:df:0e:c8:a7:e8:e0:0c:63:e8:3f:8c:
4d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D0:BB:18:6E:07:B0:63:28:DB:F4:9B:19:25:2F:44:51:A9:05:AD
X509v3 Authority Key Identifier:
keyid:57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/P9C7GG4HsGMo2_SbGSUvRFGpBa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.36.0/24
Signature Algorithm: sha256WithRSAEncryption
33:c2:2a:72:6b:2c:62:64:f0:fa:ca:73:b2:df:9b:db:c7:1f:
1c:ef:43:e5:53:6e:eb:bb:03:e2:15:c7:a7:ae:67:b7:f5:20:
f2:e1:8f:c8:55:b4:05:b0:27:41:45:88:23:a1:0b:3e:cf:34:
e6:f3:f4:f4:84:3f:1d:68:1f:e0:f3:a6:07:e9:b0:f9:74:b0:
24:0d:41:02:db:13:19:c8:9d:bf:24:e3:57:97:51:47:be:58:
2a:c8:30:e8:aa:0b:ea:e2:d1:54:32:54:86:27:cc:b1:38:64:
06:3b:c4:e4:c8:a4:83:68:68:f5:26:22:21:f9:71:2c:8e:b4:
78:0f:40:b8:a0:12:d3:72:ef:42:20:3c:aa:e1:ea:2c:68:3f:
6f:a7:92:35:5e:ab:0f:29:09:ac:05:32:3f:4b:48:47:28:b3:
db:b3:f6:fb:ee:ca:2d:bf:38:b9:b7:36:d7:e9:70:1d:4f:60:
ff:31:90:04:67:0d:f1:8f:10:6d:da:52:d3:9e:0d:37:bc:9c:
b4:8a:03:b2:cf:08:17:25:22:73:7d:95:3b:9e:0d:43:55:3a:
6c:39:ba:a2:34:32:00:64:99:d0:35:f5:c3:10:3d:82:32:1e:
49:8e:bc:38:81:75:40:6e:07:3e:39:92:a5:69:73:e7:28:76:
96:7c:83:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-fra.rpki-client.org