Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/AcntwQZn-seehOvhZybaVp8TyDk.roa
File: AcntwQZn-seehOvhZybaVp8TyDk.roa (raw, json)
Hash identifier: iEEClxnHOP/gVibDQkbh8Eeh2DudR8RObpJV41vxEe4=
Subject key identifier: 01:C9:ED:C1:06:67:FA:C7:9E:84:EB:E1:67:26:DA:56:9F:13:C8:39
Certificate issuer: /CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Certificate serial: 0190E8D8DDF04A0AE7A71CE8E7801C460150
Authority key identifier: 7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/AcntwQZn-seehOvhZybaVp8TyDk.roa
Signing time: Thu 25 Jul 2024 07:44:04 +0000
ROA not before: Thu 25 Jul 2024 07:44:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214496
IP address blocks: 45.158.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Aug 2024 10:06:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e8:d8:dd:f0:4a:0a:e7:a7:1c:e8:e7:80:1c:46:01:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Validity
Not Before: Jul 25 07:44:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01c9edc10667fac79e84ebe16726da569f13c839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a0:6b:9d:e7:44:77:b6:31:59:f1:71:e6:b8:
51:fd:9f:f5:d1:d0:05:0b:09:ad:c5:ab:7e:91:e7:
ea:7e:e0:5d:42:6c:ea:cb:aa:38:c8:22:e2:fa:53:
83:a4:ca:1f:07:df:51:5a:8d:34:cd:75:39:91:b0:
ee:d3:b8:dd:6a:e6:69:1c:79:70:ca:be:0f:be:ee:
fc:97:22:3b:8b:87:55:93:6b:49:66:c0:03:e8:0f:
1b:a5:3f:b4:8b:c3:2d:ba:11:7e:a0:7e:27:15:37:
b4:ba:4c:0a:b7:8a:a9:4a:37:9b:16:79:be:08:6d:
b0:ff:b6:c7:b6:b0:11:92:55:d5:e0:60:56:ef:58:
ca:7d:10:b7:ae:d9:d8:6a:0b:86:a3:16:34:40:14:
4c:43:f0:2a:2b:e9:b0:37:0e:b8:9a:b9:70:c6:55:
61:4c:ae:0a:14:34:f2:6d:ce:49:b2:eb:34:96:a5:
32:39:cd:22:dc:02:4f:11:b8:66:bb:d4:82:7a:18:
d4:ef:ad:50:46:07:90:19:88:ac:e9:59:f3:32:9a:
fd:99:bf:88:2a:f1:be:e9:3c:d0:c7:48:b4:2f:3b:
b3:cb:d7:f4:af:25:e2:5b:1a:bf:b1:0b:f1:ff:23:
9b:2d:3b:3c:dc:50:e5:37:55:43:f8:cb:c2:1d:7d:
31:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C9:ED:C1:06:67:FA:C7:9E:84:EB:E1:67:26:DA:56:9F:13:C8:39
X509v3 Authority Key Identifier:
keyid:7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/AcntwQZn-seehOvhZybaVp8TyDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.127.0/24
Signature Algorithm: sha256WithRSAEncryption
47:5f:fe:c6:c4:39:92:d3:75:9d:33:10:ff:a2:0c:98:cd:7c:
13:db:75:8b:bc:94:c1:4b:55:59:7f:30:b1:05:33:f4:e8:25:
41:4d:9b:3d:f2:ed:ad:34:c4:7b:aa:85:2f:4d:c2:11:b3:46:
7c:a8:46:83:50:1f:4a:e5:76:70:19:ed:3d:19:b6:ac:cc:1d:
32:6f:be:a5:99:33:da:43:31:29:2d:dc:8b:99:62:ad:e7:65:
a6:93:ff:b8:a0:e3:75:ae:8a:69:eb:4a:cb:73:fd:72:ae:41:
2e:15:61:03:67:cb:54:ef:c6:ec:c2:d4:d9:8f:59:40:c3:04:
01:9b:48:8f:00:87:09:9e:43:d4:9b:f4:6e:aa:48:a2:37:74:
48:6b:97:20:c0:2c:11:90:26:60:95:5d:36:a1:0f:27:6a:3d:
3c:0c:f6:25:03:18:e1:5e:a5:55:3d:75:55:c3:05:1a:a4:78:
be:bf:f8:7f:5d:b1:af:9f:f2:c5:87:31:a4:dd:6e:ae:ce:af:
4a:cb:28:d1:8e:9f:ac:de:f7:ac:df:55:85:44:3c:72:b9:f5:
7a:72:60:59:95:19:08:6a:57:05:70:33:ba:d0:24:b8:88:b1:
5d:0e:ff:6e:0b:85:bd:3f:8f:43:e7:ea:02:e5:ab:ac:ac:f9:
15:81:66:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 13:14:59 2024 by rpki-client on console-ams.rpki-client.org