Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/9f0p9L3YxrRlimw7vq5qcOuTZYc.roa
File: 9f0p9L3YxrRlimw7vq5qcOuTZYc.roa (raw, json)
Hash identifier: p16hsXOWjlNLQ8N4IzkCv83otv/N6X1o+AyoB8JXcDU=
Subject key identifier: F5:FD:29:F4:BD:D8:C6:B4:65:8A:6C:3B:BE:AE:6A:70:EB:93:65:87
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 0187E090DFE3F43EA8A39A265AE3F813DE0F
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/9f0p9L3YxrRlimw7vq5qcOuTZYc.roa
Signing time: Wed 03 May 2023 07:43:23 +0000
ROA not before: Wed 03 May 2023 07:43:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212093
IP address blocks: 45.151.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e0:90:df:e3:f4:3e:a8:a3:9a:26:5a:e3:f8:13:de:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: May 3 07:43:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5fd29f4bdd8c6b4658a6c3bbeae6a70eb936587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:60:18:1e:e6:41:b9:cd:af:6c:07:53:58:4a:
87:ca:c8:37:70:8b:1d:6a:91:dd:5c:ec:f1:68:55:
14:6b:51:73:44:53:7f:e7:59:b0:75:cb:78:69:f3:
f9:74:f1:d2:06:bb:49:30:19:73:b0:7b:fd:dc:15:
56:e5:ab:ee:8b:4f:aa:93:c6:0c:64:e0:f8:ef:2d:
1f:f5:b1:4d:c5:48:6d:39:59:df:99:e9:ae:6f:ae:
a6:48:c0:ff:3d:ec:d6:34:3c:2e:e4:b3:fc:ec:6a:
af:4d:d0:fe:76:d3:d5:32:08:94:5b:1e:4b:07:32:
5b:6a:05:b5:5c:d0:63:d9:51:1b:b9:13:6a:4c:bc:
98:d3:f3:b0:e7:84:f2:4c:c0:41:7c:a1:23:4e:4f:
95:0c:06:b5:ac:c4:bb:cf:64:e8:77:a2:46:2f:4f:
ae:6a:5d:08:ed:c7:34:8f:32:d2:c6:38:c6:78:18:
f2:6f:7d:2b:c4:fc:3b:d1:b5:98:12:5e:18:3c:83:
bd:5f:8f:4c:49:a5:1b:e6:ab:58:80:a9:73:4d:02:
5b:86:84:6d:9d:6a:4a:77:26:a2:cb:cf:01:f3:07:
d1:79:50:96:19:e0:86:ed:03:1e:94:76:0a:83:d7:
29:e4:63:ae:95:c0:0d:7e:58:3a:ea:cc:f0:43:3a:
6a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FD:29:F4:BD:D8:C6:B4:65:8A:6C:3B:BE:AE:6A:70:EB:93:65:87
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/9f0p9L3YxrRlimw7vq5qcOuTZYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.138.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:93:ff:90:db:3a:fb:16:db:87:60:1e:75:46:31:51:05:fa:
f1:d7:ea:b1:28:f9:63:6c:92:1d:ab:15:01:03:0b:52:67:f7:
e9:d0:16:32:ce:e2:fc:7c:51:96:b0:3d:dd:f6:76:3b:33:cb:
28:61:6e:91:d0:67:ac:a1:b9:a0:04:b4:7b:d5:08:b6:9d:5d:
1e:61:50:14:f6:27:0c:96:68:c9:79:3e:0a:66:80:e1:9f:85:
85:01:a9:b6:e5:b1:63:72:33:4c:ce:13:82:29:b7:2d:d8:00:
ce:89:66:b0:07:aa:95:61:53:85:5a:be:9b:06:83:70:e5:59:
d1:03:d4:ec:94:8d:ed:e2:1c:bb:6e:83:d6:1f:2a:ba:49:36:
58:fe:90:0a:bd:cf:4c:14:c9:85:2b:0b:c4:45:ee:92:13:2e:
b4:f2:28:91:bf:a2:7d:ac:22:56:60:6d:34:cf:79:dd:56:29:
7f:cf:73:b5:18:07:c2:fc:16:88:3a:d6:51:da:bb:d6:ea:01:
fd:9e:31:30:7a:30:d5:1d:ef:f3:c9:43:15:ca:3e:e4:8c:b7:
1f:1e:b2:d2:06:59:b1:7f:d8:77:b4:13:c3:e1:a4:52:91:69:
6e:40:18:2a:ef:21:90:63:42:77:e6:21:39:ce:21:52:b7:b0:
51:18:00:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:05 2024 by rpki-client on console-fra.rpki-client.org