Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ihjQCb7r3zaTvWq7gmovtU4Eyk8.roa
File: ihjQCb7r3zaTvWq7gmovtU4Eyk8.roa (raw, json)
Hash identifier: 7YiSkt1yNRDKnIlBnVWBV1Xqr0+KOYWsv5YirPz6+C4=
Subject key identifier: 8A:18:D0:09:BE:EB:DF:36:93:BD:6A:BB:82:6A:2F:B5:4E:04:CA:4F
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01856F799057C3D41208AF37D1481596EA5A
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ihjQCb7r3zaTvWq7gmovtU4Eyk8.roa
Signing time: Sun 01 Jan 2023 22:35:15 +0000
ROA not before: Sun 01 Jan 2023 22:35:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204687
IP address blocks: 45.83.207.0/24 maxlen: 24
2a07:e342::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 30 Mar 2023 04:58:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:90:57:c3:d4:12:08:af:37:d1:48:15:96:ea:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 22:35:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a18d009beebdf3693bd6abb826a2fb54e04ca4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:bb:19:7b:de:01:8b:1b:fa:a2:7a:40:07:68:
55:9c:e9:d5:39:2c:54:b7:95:66:29:aa:54:ec:bf:
2c:c0:d0:6d:f3:fc:41:42:5e:05:ee:bc:53:ed:74:
17:20:bf:8a:0a:86:2f:39:85:0e:fe:b5:ce:16:f5:
76:6b:6f:b9:61:38:49:f5:18:14:9d:87:56:03:92:
74:6a:32:16:2d:16:75:b7:a8:53:4f:7d:62:03:ed:
5d:7d:1a:4f:70:cf:d7:97:a7:4d:a9:99:96:46:12:
97:66:69:30:24:e0:3a:61:11:3c:c9:c7:54:21:ce:
5f:b3:2c:05:a6:d5:de:09:f0:f0:77:54:f8:88:66:
6f:e0:53:34:bd:43:87:ff:80:67:c0:fc:64:52:3c:
ba:4c:e6:66:ae:0f:01:08:a3:f4:2b:13:8e:07:41:
55:af:03:6b:4f:21:a9:ec:56:dd:40:05:ca:f7:c7:
f2:0a:20:92:8b:33:be:5d:55:10:aa:61:89:f8:5b:
95:a3:f9:2d:f0:18:bb:d9:5d:90:e8:3b:10:ef:1b:
7d:c6:1f:b2:d4:54:2c:aa:cb:55:57:f5:3c:83:76:
7b:a0:c4:e4:a6:ec:d2:fc:8d:e7:86:69:6c:a2:0a:
ca:0a:47:3e:a6:d2:93:b1:5d:02:a9:d5:4e:69:7e:
5a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:18:D0:09:BE:EB:DF:36:93:BD:6A:BB:82:6A:2F:B5:4E:04:CA:4F
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ihjQCb7r3zaTvWq7gmovtU4Eyk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.207.0/24
IPv6:
2a07:e342::/32
Signature Algorithm: sha256WithRSAEncryption
5c:06:84:36:b1:e0:61:02:e1:10:84:ac:88:0a:df:5e:7d:85:
0e:c8:d5:b2:14:b4:22:f0:48:cc:e1:85:eb:c9:37:10:49:ba:
5a:da:ec:a3:bc:74:0f:3d:48:5e:a1:5b:96:83:9b:b3:97:04:
25:e6:a9:13:e0:06:51:40:6a:fa:ad:b7:11:cc:fc:a5:44:78:
bf:9d:02:cc:c4:10:e7:e1:42:c3:a8:bb:04:58:ca:f9:d3:76:
2f:04:f9:b1:62:14:c0:73:ba:1e:bb:eb:39:af:23:6a:6e:14:
f4:0c:aa:ae:19:b9:09:39:01:50:05:a5:38:ea:fd:99:20:77:
aa:f4:30:4b:14:19:23:b9:97:58:f8:5c:b2:f2:da:7c:88:a7:
e8:a2:6a:62:7f:c1:ca:d1:f3:d1:88:ed:42:0c:6a:62:20:d8:
ed:21:c5:8a:31:42:b3:2a:85:92:92:50:a8:0a:74:f0:e7:d6:
28:f1:fb:b8:11:e9:59:5b:b1:39:43:41:f2:ca:11:96:fd:ee:
26:af:6a:c2:b0:a6:19:60:ef:6c:c7:bc:15:2f:a3:26:51:15:
e1:0a:a0:81:35:19:2b:14:90:15:4e:54:a5:11:1b:72:65:ca:
39:49:b2:b8:d5:45:b7:be:cd:45:aa:41:ae:c4:f5:09:06:07:
26:73:82:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:52 2024 by rpki-client on console-fra.rpki-client.org