Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/dLQiyBsu3G7N3KMRWoQcJVG7LJ4.roa
File: dLQiyBsu3G7N3KMRWoQcJVG7LJ4.roa (raw, json)
Hash identifier: VbhBXqm95bewIoZ/2ahO47/XIFUxDXx073rK2UYrONc=
Subject key identifier: 74:B4:22:C8:1B:2E:DC:6E:CD:DC:A3:11:5A:84:1C:25:51:BB:2C:9E
Certificate issuer: /CN=57130f799f8a8985502a2ea3356037674085cfca
Certificate serial: 0187B83F7F46885D2A860E7A73F4B9ADF332
Authority key identifier: 57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/dLQiyBsu3G7N3KMRWoQcJVG7LJ4.roa
Signing time: Tue 25 Apr 2023 11:49:41 +0000
ROA not before: Tue 25 Apr 2023 11:49:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.149.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 May 2023 17:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b8:3f:7f:46:88:5d:2a:86:0e:7a:73:f4:b9:ad:f3:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57130f799f8a8985502a2ea3356037674085cfca
Validity
Not Before: Apr 25 11:49:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74b422c81b2edc6ecddca3115a841c2551bb2c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8a:d9:e7:62:f0:bf:9c:ce:8a:7d:21:1b:6a:
18:c8:14:a3:06:ae:c6:a9:b4:bb:36:02:de:21:cc:
8d:41:b6:b0:15:ca:be:de:16:85:1c:92:bc:25:ba:
92:b3:ba:38:49:9a:ea:f4:08:18:ff:0f:56:52:b7:
36:38:de:fd:52:f8:54:97:6c:95:40:14:63:72:60:
4f:d8:42:ea:72:bf:01:97:23:61:c4:2f:6e:2f:dc:
07:37:a0:15:46:c6:0e:01:b8:94:2c:de:bb:ad:71:
ac:ef:6f:9e:3c:49:35:e5:7d:e1:ef:4a:ba:e3:6c:
fd:d0:82:b6:c6:76:74:66:6e:c2:7f:dd:2f:a2:38:
d5:75:81:f0:2b:27:4e:10:cd:2e:77:43:2f:0f:34:
d1:f6:7c:7f:6c:a7:2c:a7:d6:ce:de:e3:55:e8:31:
e1:fa:e6:e3:ca:aa:be:f8:de:cc:fc:40:db:15:38:
fb:ab:2e:f2:4c:34:25:28:95:b6:a2:08:fb:91:ed:
87:a4:4c:3e:6a:20:cc:47:ba:b4:04:45:77:4f:31:
77:80:9a:b0:5b:4b:2a:94:3a:c9:f8:f2:e6:8c:d2:
cb:e3:f0:db:6b:38:f2:0c:54:e2:10:08:19:79:d0:
69:7c:69:3d:d4:49:75:3e:c6:ad:4d:e3:f8:99:97:
d5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B4:22:C8:1B:2E:DC:6E:CD:DC:A3:11:5A:84:1C:25:51:BB:2C:9E
X509v3 Authority Key Identifier:
keyid:57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/dLQiyBsu3G7N3KMRWoQcJVG7LJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.36.0/24
Signature Algorithm: sha256WithRSAEncryption
af:71:f9:c8:9d:fa:b3:d9:b5:d8:e0:31:fc:1f:c5:31:07:a9:
7d:08:0c:60:0e:cf:6b:df:b8:ce:6d:98:f7:59:52:c7:6c:08:
ef:ba:5f:4e:83:8e:e7:bd:93:2e:72:b7:4d:4b:e1:8c:72:89:
94:8c:4c:90:82:9d:dc:06:ef:4e:5e:09:3c:bb:ff:6f:38:e4:
63:db:7d:7a:2d:0a:4d:bc:a3:fa:93:b2:b1:9b:c8:0d:07:1a:
46:34:7c:60:6f:6c:7b:03:4e:d8:61:8d:f9:9f:7a:ff:63:de:
5d:18:81:c7:ac:7f:f1:e1:1d:57:97:61:bb:0e:61:7f:52:7a:
90:12:ca:10:30:79:4a:3b:7f:c1:b1:8c:56:1c:8f:40:9b:c1:
fb:39:f6:0a:bb:c9:90:e9:d5:cc:9a:ac:f0:ef:dc:f5:41:fb:
b8:89:d9:77:23:a4:c0:80:4f:b6:c6:97:f5:87:3f:3b:e9:72:
69:b5:65:cb:e6:c1:59:9d:f5:fe:8a:ca:cc:1f:0d:b1:b2:df:
d4:2a:64:34:8b:6b:e2:32:c2:f4:b2:a8:f8:6b:fa:67:35:33:
0f:43:bc:32:15:d5:c9:d6:8f:b6:c6:fc:5c:28:14:46:e7:45:
5f:40:fc:bc:32:e5:f8:5a:ab:da:71:b3:22:da:73:69:75:2c:
4e:b8:e4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-fra.rpki-client.org