Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/37D1vhkXE-dagb3kUEvFbknZQag.roa
File: 37D1vhkXE-dagb3kUEvFbknZQag.roa (raw, json)
Hash identifier: hGAFwFD/MpkXLN0b2VCNiQRhREByI0YiqSCukx5M1/I=
Subject key identifier: DF:B0:F5:BE:19:17:13:E7:5A:81:BD:E4:50:4B:C5:6E:49:D9:41:A8
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 0186DAB05B5E784F5F5F0AFB0261E9D1579D
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/37D1vhkXE-dagb3kUEvFbknZQag.roa
Signing time: Mon 13 Mar 2023 11:17:16 +0000
ROA not before: Mon 13 Mar 2023 11:17:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 32181
IP address blocks: 45.84.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:da:b0:5b:5e:78:4f:5f:5f:0a:fb:02:61:e9:d1:57:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Mar 13 11:17:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dfb0f5be191713e75a81bde4504bc56e49d941a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:91:43:1c:3c:b5:04:b1:76:8e:44:d8:75:36:
16:e7:91:0d:88:74:74:0f:5c:cc:ae:2b:79:1d:29:
dd:f1:2f:99:55:e9:13:74:ee:98:80:a5:9b:80:87:
fd:2e:bd:79:21:9b:cc:32:10:0e:cc:57:e3:82:ad:
36:34:76:62:0c:22:81:f3:db:2f:6e:82:48:72:92:
49:e5:d0:21:ac:38:45:1b:56:ac:25:2b:40:db:9f:
e0:0a:53:38:30:0c:7b:5c:55:f1:32:a8:8a:bd:2d:
28:87:9c:ac:d8:4d:a0:d3:2e:61:28:cc:e0:37:d8:
13:d9:2b:6d:60:02:7e:f2:34:e9:9f:fc:a0:ce:8e:
9c:c1:4f:69:68:67:28:4f:cc:79:f8:e8:e0:8a:0b:
c4:c9:1d:44:58:5f:cd:c2:11:ad:67:b5:dd:2a:7d:
73:07:14:ac:dd:8f:13:32:16:d2:ba:ae:aa:b0:04:
fa:26:a0:65:bb:66:e1:a4:ce:b2:51:46:b5:11:6b:
4a:e5:c8:38:d8:6b:f7:9d:1b:ae:4e:e2:0f:b7:f2:
02:f8:d5:df:3e:3f:59:f3:63:8c:19:52:6b:af:3a:
b8:0f:8d:d3:ac:0f:7e:b6:e2:ae:86:fd:af:75:78:
fe:a3:a1:13:94:08:ba:ec:28:fe:50:63:b6:de:c4:
30:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B0:F5:BE:19:17:13:E7:5A:81:BD:E4:50:4B:C5:6E:49:D9:41:A8
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/37D1vhkXE-dagb3kUEvFbknZQag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.215.0/24
Signature Algorithm: sha256WithRSAEncryption
79:6e:a0:f3:18:b2:66:f8:f3:bc:1a:a2:ec:a9:25:4d:46:53:
b8:04:71:38:96:71:a3:ee:7d:0f:7a:2b:93:b3:05:eb:cc:81:
69:5b:ce:d4:40:59:b5:b0:77:f4:5d:7b:91:38:d5:77:02:82:
42:e5:0a:b5:f8:d6:df:64:bd:ab:cf:d1:21:95:4b:12:06:43:
5b:4e:f8:77:f3:8e:99:d4:9e:df:8d:ac:0e:40:74:dd:c6:47:
c0:47:c6:12:c7:04:6f:0c:0c:d1:71:0e:51:70:ce:c9:9d:7d:
03:5a:8e:fa:fa:bf:a8:4d:ac:94:15:d6:92:1c:ed:60:d5:05:
ee:7f:40:88:f3:62:63:e2:5d:1a:7e:d5:c2:e2:86:f1:46:60:
dc:bd:a3:d9:46:f9:52:84:c2:05:b4:32:90:d7:f1:5b:52:e5:
d3:72:c7:dc:32:21:92:22:7c:45:23:28:0f:72:8f:ed:8e:86:
95:fc:31:5c:ee:cb:b0:0f:a6:d0:e9:3c:a2:30:74:84:8b:fc:
93:40:bb:0e:b3:33:81:00:cd:56:36:eb:06:a8:d9:ba:74:3e:
6d:57:db:54:34:89:0c:a0:8b:d9:f3:61:c9:93:e9:2d:8a:c1:
fb:6d:a5:ed:8f:53:a0:df:57:d7:8b:45:90:ae:76:6d:d7:68:
ac:ab:3e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:51 2024 by rpki-client on console-fra.rpki-client.org