Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/akMwbp3WBflAncf2hGiogqc9WE4.roa
File: akMwbp3WBflAncf2hGiogqc9WE4.roa (raw, json)
Hash identifier: U+bQhlD84Xnu/FO7PPvBSH4ItjwzyRNe+iUOlY1FM2M=
Subject key identifier: 6A:43:30:6E:9D:D6:05:F9:40:9D:C7:F6:84:68:A8:82:A7:3D:58:4E
Certificate issuer: /CN=57130f799f8a8985502a2ea3356037674085cfca
Certificate serial: 018705118577A0312808C92033D0CE03ABAF
Authority key identifier: 57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/akMwbp3WBflAncf2hGiogqc9WE4.roa
Signing time: Tue 21 Mar 2023 16:47:27 +0000
ROA not before: Tue 21 Mar 2023 16:47:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 45.149.36.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 23 Apr 2023 17:36:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:05:11:85:77:a0:31:28:08:c9:20:33:d0:ce:03:ab:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57130f799f8a8985502a2ea3356037674085cfca
Validity
Not Before: Mar 21 16:47:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a43306e9dd605f9409dc7f68468a882a73d584e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7b:28:92:e2:66:42:4f:a1:65:6b:56:b6:d4:
4c:ea:08:d6:77:9c:e7:ca:11:a7:c7:1a:b5:6e:0c:
46:66:cc:a5:80:7a:a6:84:48:c3:6a:b4:23:b5:0a:
5e:43:af:aa:ff:f9:70:98:41:e0:6e:e5:c3:2f:a1:
ac:70:f9:55:64:67:f5:f0:9e:34:ca:de:4d:33:16:
5e:2a:f1:73:be:9e:19:9a:5e:ff:26:54:b7:d3:a9:
6d:9c:7f:98:db:5e:67:de:b2:d2:e7:37:74:f4:7e:
8a:5b:f7:5d:3b:be:ca:fa:09:28:8d:f0:0f:21:53:
8f:ae:fc:67:fe:c1:cc:d8:6c:5c:31:40:d8:f6:7b:
bd:a5:fa:53:b4:2e:d6:ad:ea:b2:a2:fa:4e:82:93:
8e:4f:d2:0c:b7:de:49:56:52:f2:8d:b1:5b:39:ee:
3c:c4:81:c9:f2:ff:1c:86:71:57:a6:8b:3d:b3:c0:
5b:1c:ae:ee:29:cb:01:5c:6e:f7:cb:15:c1:03:4d:
71:fd:7d:6e:be:5d:c9:32:d7:75:38:bc:aa:34:78:
1c:de:74:a6:28:39:b8:af:fd:a3:9d:25:28:6f:a5:
3a:3f:29:23:2b:fd:26:23:83:58:94:fe:32:a4:5f:
fb:a8:a4:eb:cd:6f:31:a7:a2:fd:bc:d3:79:53:1c:
cd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:43:30:6E:9D:D6:05:F9:40:9D:C7:F6:84:68:A8:82:A7:3D:58:4E
X509v3 Authority Key Identifier:
keyid:57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/akMwbp3WBflAncf2hGiogqc9WE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.36.0/22
Signature Algorithm: sha256WithRSAEncryption
55:5d:0b:8e:55:73:8b:72:de:b9:23:f5:00:6e:89:ec:e5:aa:
26:d2:f1:38:d3:e4:fe:d1:21:22:a9:e2:3b:c2:90:e2:b9:c1:
df:ca:67:49:c5:9c:2c:42:99:a1:c4:9a:39:63:ed:11:04:6c:
23:f4:09:78:76:ba:1c:a6:72:ce:8f:f6:63:c9:68:94:ec:e7:
09:47:60:57:e9:55:e1:ea:14:d3:db:e3:a7:f7:8f:44:7f:cf:
ca:8b:e2:19:22:29:62:b0:e0:8a:8a:82:d1:b9:c3:40:dc:bb:
03:37:81:76:66:a7:f8:f7:b8:3e:13:a9:fc:4f:a9:f4:a7:3c:
27:68:30:38:c6:cd:43:e7:75:ec:a4:e3:c9:95:cd:ee:fe:48:
b2:8d:57:c1:9f:bb:33:7c:be:87:4e:c1:29:11:66:ce:13:aa:
f5:f0:dc:e9:b4:aa:62:80:b4:c9:78:a9:1f:cf:7f:15:09:58:
d1:95:45:d1:77:00:d8:1a:88:35:17:5a:31:a7:84:1f:73:a0:
df:9f:7e:d5:4b:03:b7:46:7e:11:0e:ba:c2:f2:95:19:fa:5f:
e6:23:70:a9:4b:4d:8e:9a:73:0e:b8:53:9d:9f:35:1c:a5:8f:
a1:08:19:a2:43:b2:5d:60:46:7a:af:f8:14:10:d8:c0:8d:f6:
1a:8d:47:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-fra.rpki-client.org