Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/1jIfi7mt5aFBRjedJHIFJc15Xv4.roa
File: 1jIfi7mt5aFBRjedJHIFJc15Xv4.roa (raw, json)
Hash identifier: Lja8ZZBxwoKQ/fpHeis/0a9zWfAQvSg0OTnWs7vjv0k=
Subject key identifier: D6:32:1F:8B:B9:AD:E5:A1:41:46:37:9D:24:72:05:25:CD:79:5E:FE
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 018703D7811CFB98746F2BE3E1100E6A8FCB
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/1jIfi7mt5aFBRjedJHIFJc15Xv4.roa
Signing time: Tue 21 Mar 2023 11:04:27 +0000
ROA not before: Tue 21 Mar 2023 11:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 45.146.202.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 22 Mar 2023 10:10:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:03:d7:81:1c:fb:98:74:6f:2b:e3:e1:10:0e:6a:8f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Mar 21 11:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6321f8bb9ade5a14146379d24720525cd795efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:92:a6:92:df:f0:bd:46:e6:9a:e5:60:d5:37:
0d:73:fb:6d:a5:a9:85:e3:64:ab:55:f7:8a:54:c0:
c2:ca:91:c0:0f:5e:52:e1:ce:d7:84:75:ff:a9:5b:
af:b7:ab:c9:a5:d8:2d:62:66:9c:3d:46:7a:7e:8c:
c8:16:65:93:d4:3e:6d:ab:dc:35:9b:6b:77:ad:ad:
1a:56:f1:d4:c8:2b:00:1d:cb:e2:3e:aa:23:c2:eb:
94:9d:65:b9:62:d1:51:cc:48:e4:83:56:c3:58:22:
38:5c:bc:d6:10:65:08:dd:69:e0:cd:ca:12:55:2b:
94:b8:08:dc:c3:6d:e4:a5:a9:58:8e:9b:53:9a:fd:
9f:5e:61:7d:f8:fc:79:8c:75:ea:d7:8b:13:16:57:
09:2a:08:65:46:45:49:02:2d:22:f8:4a:a7:9c:f5:
42:4c:5f:95:d0:cc:3c:da:88:a3:50:9b:4b:61:fa:
f0:d0:04:77:34:6e:c4:cd:3b:a3:89:cf:dc:27:83:
84:4a:ce:6e:b2:fe:68:df:49:b3:67:2a:c3:ef:8a:
0f:47:ea:bf:8d:ba:70:e0:9c:65:4f:d7:2e:b8:e0:
ae:3b:be:21:38:14:ac:95:f5:2d:c1:51:aa:3d:45:
ed:46:91:39:59:e0:02:49:43:67:09:c7:e4:a7:63:
e1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:32:1F:8B:B9:AD:E5:A1:41:46:37:9D:24:72:05:25:CD:79:5E:FE
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/1jIfi7mt5aFBRjedJHIFJc15Xv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.202.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:7b:4c:f7:dc:83:d3:6a:d7:34:6d:f2:e8:e9:7a:86:b7:b7:
08:fd:f2:49:57:a8:45:c4:36:88:b7:5e:4f:8c:fa:44:a9:72:
48:5a:8b:c1:b0:40:a0:68:18:5d:4e:05:3e:9c:c8:b9:18:b3:
78:7f:da:12:07:7f:a7:a2:c1:89:e0:3a:00:cd:b4:f1:0b:a7:
b5:77:1e:96:42:86:39:67:64:45:59:85:64:2e:09:40:b3:cd:
59:a8:35:85:24:c1:9e:4e:63:05:c0:80:6e:f2:be:2b:2c:e0:
b7:d4:2d:0b:4e:28:d3:8d:70:a8:54:fb:df:61:d2:35:a1:ae:
25:a8:72:8a:24:be:d0:1f:c8:e2:b5:7d:a6:95:be:91:37:db:
87:4a:00:5c:9f:bd:29:35:fd:ef:dc:8f:b1:97:44:2f:31:2a:
f9:f7:09:ba:71:26:9e:b0:31:87:b9:b0:1e:4e:78:b6:cc:ee:
fd:e0:6d:f6:cc:8e:8f:2d:cd:51:0a:63:65:b9:7b:5a:c2:d4:
ac:dd:0d:12:0a:1c:60:07:3b:b6:d4:34:ac:b3:3b:2b:d7:eb:
3b:14:08:e0:7d:ff:0f:cc:6d:fe:d2:75:96:77:1b:d2:be:dd:
e3:78:9f:6c:c5:45:60:2c:dd:f3:68:2d:e7:ad:c6:2b:2b:17:
81:61:40:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:50 2024 by rpki-client on console-fra.rpki-client.org