Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/CGsbhKRmqn2D5iU8zNx-ahzTXG8.roa
File: CGsbhKRmqn2D5iU8zNx-ahzTXG8.roa (raw, json)
Hash identifier: oGUm0vL1ua8y1pja8OvLU2TIGn+CZsY5uQMg3OfzmZM=
Subject key identifier: 08:6B:1B:84:A4:66:AA:7D:83:E6:25:3C:CC:DC:7E:6A:1C:D3:5C:6F
Certificate issuer: /CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Certificate serial: 0188338A0A82ABE93C708C9F9B8E5E8060B8
Authority key identifier: 7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/CGsbhKRmqn2D5iU8zNx-ahzTXG8.roa
Signing time: Fri 19 May 2023 10:24:24 +0000
ROA not before: Fri 19 May 2023 10:24:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.158.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 May 2023 18:14:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:33:8a:0a:82:ab:e9:3c:70:8c:9f:9b:8e:5e:80:60:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Validity
Not Before: May 19 10:24:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=086b1b84a466aa7d83e6253cccdc7e6a1cd35c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:81:d3:28:99:11:a5:2e:3b:57:0f:a7:6d:4a:
f1:31:2b:c5:e7:8c:4c:b1:76:db:36:af:ae:2c:6c:
24:2c:ba:b1:b3:19:f4:68:b3:83:39:1a:6f:76:bc:
e8:9a:95:0f:c4:e0:b9:7c:54:d0:19:88:5c:76:91:
63:23:7e:af:06:5c:af:c8:e8:85:43:a4:d0:35:a0:
c4:20:48:70:c3:cd:b4:90:22:13:c6:e7:91:37:58:
a3:c6:a4:aa:3c:f6:68:63:18:51:a2:f3:5b:2e:1c:
60:15:03:c0:67:1c:07:d1:e7:21:a9:8e:8d:bf:8a:
79:66:e7:06:dc:87:c2:f6:26:34:b3:a1:a3:c5:88:
92:82:21:72:10:45:12:18:b4:b3:a4:80:76:b1:7c:
ca:55:89:ee:a6:64:c4:4d:9c:69:c0:27:1b:94:98:
45:da:c4:81:41:b2:d7:ec:51:41:93:e1:17:18:07:
c3:1d:4d:a1:94:6b:ea:0c:6a:04:b7:6a:e8:d1:f4:
4d:42:e2:a6:fc:dc:af:be:54:08:63:37:f1:32:5f:
10:05:7b:5f:11:ef:91:c9:4f:7c:0d:a4:89:2b:6d:
e1:02:b9:3c:c8:34:43:d7:dd:6f:4f:e7:32:a7:2a:
2c:58:c0:1a:b6:ae:54:c3:42:38:7d:c6:09:75:fc:
93:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6B:1B:84:A4:66:AA:7D:83:E6:25:3C:CC:DC:7E:6A:1C:D3:5C:6F
X509v3 Authority Key Identifier:
keyid:7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/CGsbhKRmqn2D5iU8zNx-ahzTXG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.127.0/24
Signature Algorithm: sha256WithRSAEncryption
87:97:34:e1:d1:df:40:8d:8d:a4:d3:3a:e5:32:1d:58:54:c6:
a6:7b:1e:2a:f6:f1:bd:c8:3f:ac:e0:46:5a:a8:dd:18:32:ab:
c2:16:b1:1a:91:d7:f3:3c:6e:1f:09:12:63:04:04:a0:ff:3f:
0e:89:f3:b4:2b:3a:9d:79:a8:b3:43:85:2d:a6:d7:2f:94:7e:
86:14:0e:b7:5a:24:e0:c2:44:36:30:74:93:eb:8a:64:c1:52:
2d:e2:c6:5d:e9:e4:5e:90:6e:00:65:ef:19:91:d9:48:52:9c:
69:4d:6b:a8:99:e0:cb:bc:6f:55:ab:60:42:cc:fc:c6:87:b2:
76:9d:fc:e8:ca:17:5e:7f:27:48:f4:6d:a8:17:82:bc:2c:a4:
92:0f:f1:33:f7:67:95:86:b1:bd:cb:f8:9b:d2:e4:28:67:9e:
26:6d:1c:b7:9b:d1:cf:5b:95:5a:4e:5a:6d:b2:39:32:cc:6b:
86:71:96:4a:04:40:c1:91:59:e1:e7:42:8b:51:8d:3e:2f:63:
24:a4:20:b5:55:03:bf:18:a9:60:5d:ec:96:f0:f4:9c:9a:48:
fe:26:5a:1d:af:a4:f4:93:8a:ef:20:5e:30:ef:ab:84:a8:6b:
e9:8d:a4:cc:88:4c:89:d1:e0:be:83:d8:8c:03:9d:5b:52:a7:
ab:b8:e5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:45 2024 by rpki-client on console-fra.rpki-client.org