Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/6c32a6-6242-4cbb-918c-c97e5a6b0b56/1/urRoiHQNSZ-mRsDH4HrIyf7jdyE.roa
File: urRoiHQNSZ-mRsDH4HrIyf7jdyE.roa (raw, json)
Hash identifier: 5th/SIuUiuX7AcIbtFuhj4ecj1dpDEFFguMDXXlWoTw=
Subject key identifier: BA:B4:68:88:74:0D:49:9F:A6:46:C0:C7:E0:7A:C8:C9:FE:E3:77:21
Certificate issuer: /CN=a30c4641cc9fc9d23a2b5588a4ef5ee3884cf1ca
Certificate serial: 01856E0AF31A470E513006E02E1E8C440B67
Authority key identifier: A3:0C:46:41:CC:9F:C9:D2:3A:2B:55:88:A4:EF:5E:E3:88:4C:F1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/owxGQcyfydI6K1WIpO9e44hM8co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/6c32a6-6242-4cbb-918c-c97e5a6b0b56/1/urRoiHQNSZ-mRsDH4HrIyf7jdyE.roa
Signing time: Sun 01 Jan 2023 15:54:49 +0000
ROA not before: Sun 01 Jan 2023 15:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51747
IP address blocks: 45.150.72.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0a:f3:1a:47:0e:51:30:06:e0:2e:1e:8c:44:0b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a30c4641cc9fc9d23a2b5588a4ef5ee3884cf1ca
Validity
Not Before: Jan 1 15:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bab46888740d499fa646c0c7e07ac8c9fee37721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0b:b0:5e:33:97:2f:0d:2e:85:44:14:ff:40:
9a:92:6d:8c:38:16:05:0d:f8:b4:79:40:78:9b:7c:
75:21:86:1e:84:26:93:ea:64:44:1e:7b:27:60:16:
ed:a4:79:5d:ea:24:46:66:51:b4:f0:27:8d:6a:49:
60:fb:66:bc:8a:5f:4b:83:7c:55:a9:ef:68:cc:71:
7a:53:c7:3d:38:43:53:02:33:83:39:db:38:6b:a0:
47:9d:e0:25:2f:0a:e0:11:3d:8c:86:56:8c:fd:d1:
d0:8c:30:02:db:24:24:fe:f6:0a:ad:c5:98:cf:34:
59:48:8a:b7:93:29:3c:58:17:f2:5d:31:13:46:79:
bf:fe:b0:08:f4:6a:58:97:60:6f:80:c8:8f:63:8c:
39:04:f8:88:75:f2:32:41:ac:68:48:af:1c:b0:97:
02:df:37:ee:68:86:e8:68:c6:b8:9d:60:40:76:4c:
6d:9b:cd:7c:49:1a:86:b4:c9:7b:35:83:40:53:3a:
03:24:56:96:13:b4:96:d1:1c:a4:e9:07:dd:56:69:
9e:73:ed:d5:ae:ca:0a:8c:e1:41:e0:70:b9:9f:c9:
13:3f:2c:30:fb:c3:57:10:64:14:f0:83:bd:04:e3:
4b:62:c7:57:74:22:76:d5:f1:64:14:56:4e:0b:93:
86:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B4:68:88:74:0D:49:9F:A6:46:C0:C7:E0:7A:C8:C9:FE:E3:77:21
X509v3 Authority Key Identifier:
keyid:A3:0C:46:41:CC:9F:C9:D2:3A:2B:55:88:A4:EF:5E:E3:88:4C:F1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/owxGQcyfydI6K1WIpO9e44hM8co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6c32a6-6242-4cbb-918c-c97e5a6b0b56/1/urRoiHQNSZ-mRsDH4HrIyf7jdyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6c32a6-6242-4cbb-918c-c97e5a6b0b56/1/owxGQcyfydI6K1WIpO9e44hM8co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.72.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:eb:57:f3:0d:b5:8d:5c:bf:c6:ea:11:ab:53:d9:88:49:48:
d4:a1:7d:88:9b:26:95:fa:c5:84:6f:63:e1:b9:6c:7d:de:33:
82:61:f0:a9:17:93:06:25:67:9e:37:eb:d9:e7:a8:71:fb:a6:
6e:07:c1:de:51:a2:0c:e8:8e:74:d3:52:05:5d:8c:20:be:fe:
df:ac:7a:8d:66:17:1e:61:d6:23:01:ea:99:4c:58:de:10:97:
32:21:c6:0a:37:14:5b:6e:29:de:d1:f4:c6:87:a1:c2:c6:6f:
40:52:80:f8:4c:69:ae:63:0d:43:69:06:0f:0a:30:e5:33:62:
66:e7:10:e7:ef:e9:21:79:da:5e:24:d6:88:90:03:0d:3f:0d:
45:62:3f:95:a4:17:43:43:76:27:27:99:ce:bd:69:42:8d:74:
2a:85:8e:9a:a2:ed:13:a9:fd:39:fc:81:ae:f7:51:bd:9f:6b:
5c:3f:a9:fb:42:51:31:3d:15:4e:89:b4:1a:8d:24:83:72:aa:
5c:f4:d5:34:e2:41:4f:29:72:f8:71:9b:1a:ff:1f:ff:a5:48:
00:56:48:35:f3:5b:24:43:10:89:ae:8f:bb:31:6f:d2:81:9e:
22:c5:eb:49:57:71:76:1c:54:92:25:3f:3a:9e:d4:6f:fa:c5:
a4:ab:76:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:38 2024 by rpki-client on console-ams.rpki-client.org