Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/Bh9QAbsKE8sigK4P2WROlLRilro.roa
File: Bh9QAbsKE8sigK4P2WROlLRilro.roa (raw, json)
Hash identifier: 8exGRARKMU1OoJBXOJ0NkuM67m/usa485t48r1tthjg=
Subject key identifier: 06:1F:50:01:BB:0A:13:CB:22:80:AE:0F:D9:64:4E:94:B4:62:96:BA
Certificate issuer: /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial: 018997C0411355AE1E23A623A94C340C4644
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/Bh9QAbsKE8sigK4P2WROlLRilro.roa
Signing time: Thu 27 Jul 2023 14:28:26 +0000
ROA not before: Thu 27 Jul 2023 14:28:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210644
IP address blocks: 217.197.107.0/24 maxlen: 24
45.15.157.0/24 maxlen: 24
45.15.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Aug 2023 20:09:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:97:c0:41:13:55:ae:1e:23:a6:23:a9:4c:34:0c:46:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
Validity
Not Before: Jul 27 14:28:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=061f5001bb0a13cb2280ae0fd9644e94b46296ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f5:87:e9:fe:29:f6:3b:d2:75:9a:e8:cf:4a:
f4:a0:78:e0:37:5b:cf:41:3b:87:f9:4a:ca:6a:57:
ea:e2:b5:ec:3f:73:53:cc:2c:4f:61:c3:ee:26:d4:
32:85:4c:12:ac:c6:ae:89:64:0a:f0:0f:fa:68:05:
16:02:2b:87:a9:7e:c5:22:8d:a6:db:67:82:9a:34:
07:e8:26:e4:27:b9:78:29:c6:c8:09:77:fe:81:95:
73:fb:4f:62:c4:ff:83:60:c7:73:7c:d0:21:1e:98:
0f:d8:04:a4:2c:02:8b:76:3a:8b:87:db:32:db:2f:
00:19:38:aa:b3:6f:01:37:df:03:a8:34:3f:ca:a3:
c7:97:ed:49:ba:f4:0c:8c:d5:4a:80:f4:b2:5c:ce:
ad:54:79:f4:6f:af:6c:49:d8:d8:08:b6:e0:2c:79:
5c:6f:53:72:ba:84:59:71:47:b4:de:ed:8c:d2:b0:
38:60:42:39:89:ea:cc:53:92:cb:d4:4a:8a:31:35:
2d:a6:dc:11:42:5b:44:ef:11:0c:00:25:58:2c:23:
bf:aa:6a:4a:86:63:7b:69:d3:04:dc:38:24:85:e4:
21:f1:07:24:74:91:44:13:24:c0:1e:42:3a:eb:64:
5c:c5:c1:c8:79:7f:57:28:b8:6a:57:64:92:95:62:
a9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:1F:50:01:BB:0A:13:CB:22:80:AE:0F:D9:64:4E:94:B4:62:96:BA
X509v3 Authority Key Identifier:
keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/Bh9QAbsKE8sigK4P2WROlLRilro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.157.0/24
45.15.159.0/24
217.197.107.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:46:62:d0:5e:7a:3b:4e:a8:97:48:b2:9d:32:36:64:e3:fb:
22:8a:8f:a0:f6:d6:88:4e:48:35:a0:48:25:fc:75:67:14:38:
32:e8:67:3f:47:df:98:25:20:ee:0b:f7:ff:72:8b:c9:53:84:
1d:51:9e:b1:81:0e:4c:3d:cb:58:5e:fe:ab:5c:6e:dc:5e:4e:
90:c5:b4:04:f4:84:2f:17:7b:d1:77:0a:9e:cf:07:99:8c:29:
f4:65:cf:11:8f:57:5a:4a:a0:79:0d:dd:f0:a4:8d:0a:e6:bc:
2d:b2:f9:d2:5d:87:ba:80:72:b4:43:de:60:8c:50:53:59:d8:
ea:dc:e3:b1:19:b8:d7:72:80:77:73:0c:60:fd:cb:6c:a7:67:
7f:6f:81:2d:2d:5a:b8:09:ee:e0:64:a2:62:bc:b9:47:51:fd:
c9:a7:7d:c2:ac:f5:3c:98:52:41:86:c0:57:8b:f2:96:b2:3b:
31:a9:48:ea:01:a9:5c:51:2d:3c:c6:41:d1:14:34:02:d1:34:
6d:99:f0:6f:d2:6a:50:3b:4a:9d:7f:5e:21:c7:b3:28:8d:ab:
ae:17:71:aa:4b:18:6a:e0:18:e9:99:14:fb:46:16:1c:16:c6:
f1:9f:bd:64:e8:bb:59:d8:84:29:4d:9a:c3:ad:a3:8a:3f:b3:
b7:e7:3e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:48 2024 by rpki-client on console-ams.rpki-client.org