Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/98izQ2es-1G34C9AJK417Go3WOg.roa
File: 98izQ2es-1G34C9AJK417Go3WOg.roa (raw, json)
Hash identifier: xO5w9aIxMW0ot3+UMIf2IvrjV1+2oBEZZ/fsxA76ufI=
Subject key identifier: F7:C8:B3:43:67:AC:FB:51:B7:E0:2F:40:24:AE:35:EC:6A:37:58:E8
Certificate issuer: /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial: 018CC56E617DFF51DABB0D71375C94C96A70
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/98izQ2es-1G34C9AJK417Go3WOg.roa
Signing time: Mon 01 Jan 2024 14:29:54 +0000
ROA not before: Mon 01 Jan 2024 14:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202973
IP address blocks: 45.15.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:61:7d:ff:51:da:bb:0d:71:37:5c:94:c9:6a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
Validity
Not Before: Jan 1 14:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7c8b34367acfb51b7e02f4024ae35ec6a3758e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:38:6f:81:1d:60:e9:e2:07:f5:b7:74:4f:e7:
a1:dd:4a:0b:54:b7:9d:7d:fb:1a:d9:6a:a3:a0:01:
35:3f:3c:e6:c5:8b:26:c3:3d:4e:67:ad:c5:b5:05:
2d:a8:15:e2:d2:d2:60:b3:eb:1c:ce:75:9d:26:2c:
9b:9d:92:31:0e:46:85:4b:10:b7:0f:47:20:a2:31:
67:cd:64:f8:5d:72:7e:27:8f:1d:c9:23:65:47:5b:
8a:06:f4:2a:9a:c1:b1:45:5a:17:56:e5:90:85:92:
63:80:c5:91:a7:60:f2:25:33:1d:f6:1c:3e:28:e6:
0f:c1:e1:17:8f:e1:8b:3f:4e:ff:b9:12:fd:07:9b:
09:d3:a4:da:17:ad:bf:cc:2f:45:9b:46:06:5d:0f:
c7:6d:50:17:7f:00:83:7c:85:0c:53:f0:bc:e7:c5:
08:2f:d9:f1:ac:59:ce:ed:fe:2c:6c:f2:ab:89:9e:
64:b6:6b:87:9c:34:30:7c:6e:a5:a8:ae:82:9b:01:
9c:43:1c:eb:36:fb:60:ad:a0:45:3a:1a:20:d4:81:
46:e0:01:7e:63:ee:bb:c7:a1:3b:90:7e:64:e2:35:
10:a1:e9:65:5d:71:c4:6d:db:90:88:c8:d6:50:48:
5a:7f:66:62:b1:9c:5f:da:c3:af:23:c6:47:2b:46:
17:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C8:B3:43:67:AC:FB:51:B7:E0:2F:40:24:AE:35:EC:6A:37:58:E8
X509v3 Authority Key Identifier:
keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/98izQ2es-1G34C9AJK417Go3WOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.157.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:c7:fa:b8:76:82:f2:82:1c:f2:ee:85:62:f5:38:e1:56:24:
cd:dc:5b:0d:8f:c7:45:bc:67:21:11:71:0d:3d:c2:22:5d:3a:
67:f5:07:77:44:ef:10:be:74:17:58:fd:f6:f3:89:b1:4d:8d:
4d:86:e1:bb:49:1d:a9:22:5b:62:d5:ce:c1:f7:f8:71:91:33:
7b:d0:85:28:e7:cf:e6:4c:06:0c:6a:4e:80:66:f4:82:5c:00:
1d:2f:ae:dd:d0:73:1a:e8:a2:43:8d:53:ec:14:71:cb:5e:1a:
db:ac:85:1d:62:a5:73:05:9d:05:0b:fb:da:e5:08:fa:ff:45:
ab:48:c5:d2:49:88:bb:bd:bc:65:73:a6:c9:7b:7f:ee:b0:6b:
d6:e3:a1:27:9d:90:fd:ab:04:84:d0:48:4a:42:f0:23:50:8d:
bd:fc:0b:93:96:ae:a6:85:96:d9:be:b0:42:12:62:4a:2c:c0:
95:24:86:f6:fb:ec:7c:ef:92:8b:a3:ce:5c:f0:8b:79:50:a9:
ec:94:69:4d:64:a2:92:38:c7:21:32:89:6f:dd:f8:c4:39:30:
f1:4b:a3:30:ce:61:67:50:20:f0:d0:0c:f0:c8:78:37:fe:a8:
91:f6:e8:0e:9e:cf:55:fe:77:5a:78:25:3d:d8:dd:87:29:df:
90:15:73:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:45 2025 by rpki-client