Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/AWW9TBQKviHkffqI6UUFPOHMFHc.roa
File: AWW9TBQKviHkffqI6UUFPOHMFHc.roa (raw, json)
Hash identifier: bPEBVjoa2u8wKT9ePLVCVVdzd8OJ9A9GL9aqeaUc3uI=
Subject key identifier: 01:65:BD:4C:14:0A:BE:21:E4:7D:FA:88:E9:45:05:3C:E1:CC:14:77
Certificate issuer: /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial: 0188011CDF0F87EFBFEE5743BAE347990BAF
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/AWW9TBQKviHkffqI6UUFPOHMFHc.roa
Signing time: Tue 09 May 2023 15:24:09 +0000
ROA not before: Tue 09 May 2023 15:24:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210644
IP address blocks: 45.15.157.0/24 maxlen: 24
45.15.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Jul 2023 14:28:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:01:1c:df:0f:87:ef:bf:ee:57:43:ba:e3:47:99:0b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
Validity
Not Before: May 9 15:24:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0165bd4c140abe21e47dfa88e945053ce1cc1477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8e:28:cf:6d:0e:92:91:ea:11:c3:e2:08:3a:
2d:76:fe:85:43:69:15:0a:ca:cf:27:6d:dc:60:76:
7a:b9:fc:ca:90:52:33:46:e7:5a:05:e8:63:6c:6b:
c4:e7:41:5f:9e:be:04:34:91:f8:e4:17:44:45:5d:
bb:e1:7c:44:c5:70:d4:17:c9:68:fd:d2:22:00:1d:
eb:93:23:32:4b:bd:db:c4:94:5f:20:b1:5c:21:07:
c0:2e:f3:3e:06:77:63:2b:81:eb:c5:2e:c9:4a:25:
6b:6a:ed:10:e3:88:d5:a3:2f:bc:7b:39:ef:cb:45:
2a:53:65:de:90:15:3a:78:70:c4:a5:b3:b5:2a:ab:
02:5e:25:e6:66:1e:ad:d8:98:21:3e:af:d3:51:38:
79:2c:82:14:99:3d:b6:08:c7:88:93:35:e1:e8:f9:
cf:26:41:18:01:37:00:0d:04:2a:16:59:5e:a0:af:
d9:0b:36:87:72:4a:3d:1d:d3:87:db:a8:e9:08:9a:
bd:48:91:2b:e8:ab:d5:51:19:69:13:45:73:4e:91:
71:0b:dc:05:c3:fb:ad:43:1d:e9:e2:b6:d4:1d:06:
ca:03:d7:67:e1:01:55:fa:36:86:aa:80:e8:c6:16:
36:76:35:75:80:6a:ee:71:b3:25:8f:45:be:f2:b0:
98:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:65:BD:4C:14:0A:BE:21:E4:7D:FA:88:E9:45:05:3C:E1:CC:14:77
X509v3 Authority Key Identifier:
keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/AWW9TBQKviHkffqI6UUFPOHMFHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.157.0/24
45.15.159.0/24
Signature Algorithm: sha256WithRSAEncryption
67:60:9f:58:b9:b3:8c:ab:36:36:c9:a9:a8:0b:dd:b7:80:88:
d7:81:80:78:af:ea:7c:ff:a6:2e:5c:08:90:f2:ec:b6:f1:0a:
1f:2f:1f:ef:9c:fa:ea:ec:fc:24:d9:e0:e4:7c:d0:d9:27:04:
dc:39:d0:d3:72:32:4c:49:72:62:0f:9f:fa:25:05:89:98:e7:
80:37:ae:19:3d:a0:a9:2d:87:03:db:24:a3:1e:5e:df:63:0b:
9a:59:3d:e5:e0:5e:1a:ad:e6:92:27:4a:5a:d2:6c:66:19:1e:
5d:57:4a:e0:5e:fd:1b:91:16:00:07:8f:3e:11:ae:b3:fb:8c:
e9:fb:67:73:33:29:6b:ba:86:ad:0b:f2:87:f7:5c:8b:6c:dc:
9c:45:73:7d:2f:d3:03:ef:d4:fb:ad:9b:e5:86:3d:cf:23:85:
9e:6f:fc:89:f6:ba:92:ad:78:2e:2b:d9:58:67:fb:b4:56:63:
06:2d:41:ba:3f:c6:5f:56:e6:9c:aa:00:d2:71:e1:a1:02:5c:
bb:03:d4:d4:1a:94:d3:de:e0:05:c7:1e:f3:6f:6b:63:5e:f4:
ac:a6:db:e3:67:f7:75:a4:10:14:ef:23:d5:f6:f5:4b:24:88:
2d:21:bb:bf:0f:3f:11:60:92:42:ba:74:c4:17:5f:65:be:96:
37:59:32:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:48 2024 by rpki-client on console-ams.rpki-client.org