Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/j1hKLKnJnYRHkl9QTzItcX5dB2E.roa
File: j1hKLKnJnYRHkl9QTzItcX5dB2E.roa (raw, json)
Hash identifier: 7AJUwJBgDdkSAO5EpBCttqQxtGUHeEbeN3W4E8nh8m8=
Subject key identifier: 8F:58:4A:2C:A9:C9:9D:84:47:92:5F:50:4F:32:2D:71:7E:5D:07:61
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 018905E716B7523443DA9DD180885EC7D16E
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/j1hKLKnJnYRHkl9QTzItcX5dB2E.roa
Signing time: Thu 29 Jun 2023 06:46:18 +0000
ROA not before: Thu 29 Jun 2023 06:46:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 45.146.200.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 Jun 2023 06:36:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:05:e7:16:b7:52:34:43:da:9d:d1:80:88:5e:c7:d1:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Jun 29 06:46:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f584a2ca9c99d8447925f504f322d717e5d0761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:99:db:60:1d:e2:13:11:6f:7d:40:34:db:81:
39:83:db:9f:e1:b1:d3:a7:fa:74:1d:4d:84:eb:4b:
70:8d:0e:2b:62:4d:0d:72:5a:d5:88:87:64:a7:1e:
b6:d9:c8:32:97:e3:05:15:43:ce:3a:10:f5:32:54:
11:fa:2a:27:7c:74:5b:f6:9a:5b:3f:3a:c0:36:0f:
55:ae:51:34:3b:ff:1b:64:7d:ab:ff:70:90:24:51:
e1:d0:cf:4b:ac:e2:c7:94:2d:67:9f:52:99:e0:7c:
6e:3c:5c:06:79:53:1e:84:ee:b8:a8:05:61:ae:ac:
ed:1b:66:dd:dc:71:2a:64:34:28:6c:1e:b6:6f:3b:
79:31:0c:2f:09:f9:4c:72:fb:9b:49:45:f7:dd:c0:
0b:4f:a7:2c:fa:9f:fd:c7:ad:77:84:4f:db:7d:e3:
29:7a:af:17:72:40:33:c0:fc:b6:6d:e0:d8:44:67:
ee:91:a1:74:9b:35:ac:ed:4a:b4:f3:11:28:1e:16:
99:c8:34:b7:44:12:cd:9e:3d:1c:df:a5:40:fc:d9:
17:96:d1:91:7b:06:b1:4e:b5:6d:50:3c:54:e0:a3:
93:ac:1a:6c:4c:50:32:69:9f:87:eb:42:0f:52:e8:
1b:d7:74:28:5b:c8:57:67:0d:c9:8a:97:5a:a1:29:
ca:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:58:4A:2C:A9:C9:9D:84:47:92:5F:50:4F:32:2D:71:7E:5D:07:61
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/j1hKLKnJnYRHkl9QTzItcX5dB2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.200.0/23
Signature Algorithm: sha256WithRSAEncryption
05:08:c5:c4:cb:f7:99:5e:6c:2f:8a:28:33:59:ac:d7:55:d9:
ef:88:80:de:06:b4:58:5e:0d:fd:d4:75:02:64:e2:2b:b2:f6:
a6:62:9d:08:17:2d:3c:0c:82:fb:d7:4f:c9:6a:56:31:5f:f9:
0c:82:65:77:78:9c:1a:83:56:7e:9c:14:62:5e:cf:3f:19:0b:
a5:e7:93:4b:f4:da:6d:c8:cc:dd:3b:2e:63:e7:c7:76:7d:07:
76:00:5a:3f:66:2c:f4:ac:89:85:a3:15:1b:31:2f:17:28:e7:
72:e5:bf:8f:8d:2f:74:3c:62:af:1f:9e:0d:9e:39:01:1a:9b:
3b:77:00:1c:dd:83:92:50:51:31:49:f7:1a:e2:74:fd:98:1a:
1c:b8:94:8f:c8:71:2a:42:9c:2a:fd:a6:4d:e0:96:de:08:e5:
08:e5:26:cf:c2:c3:50:0d:1e:f5:41:f6:a0:01:92:13:03:28:
a4:b2:7f:37:1f:98:ba:1c:9b:f9:4d:93:55:95:79:35:8e:ac:
8a:bc:18:1e:0a:1c:32:23:ca:43:b4:79:a0:f3:95:19:43:20:
a2:f7:1b:19:e1:65:bb:f0:d4:e3:4a:64:a7:5c:d0:e2:fa:bb:
38:01:eb:41:06:cb:04:9d:45:8e:fa:6f:45:d2:30:0a:6b:80:
54:4f:0b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:49 2024 by rpki-client on console-ams.rpki-client.org