Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/_n8LWeT8HxBniMoVw-XKjU_YWQw.roa
File: _n8LWeT8HxBniMoVw-XKjU_YWQw.roa (raw, json)
Hash identifier: S5ASYEEY6WGuc0rN0HQt5CLF9eZg7zGRA5rjA+n6Qwo=
Subject key identifier: FE:7F:0B:59:E4:FC:1F:10:67:88:CA:15:C3:E5:CA:8D:4F:D8:59:0C
Certificate issuer: /CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Certificate serial: 01862DB25E3C3CFF9B42D22771C793CD73A5
Authority key identifier: 7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/_n8LWeT8HxBniMoVw-XKjU_YWQw.roa
Signing time: Tue 07 Feb 2023 21:05:09 +0000
ROA not before: Tue 07 Feb 2023 21:05:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 45.158.125.0/24 maxlen: 24
45.158.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 May 2023 07:18:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2d:b2:5e:3c:3c:ff:9b:42:d2:27:71:c7:93:cd:73:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Validity
Not Before: Feb 7 21:05:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe7f0b59e4fc1f106788ca15c3e5ca8d4fd8590c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f8:ac:6f:46:bb:e0:cf:8d:51:b7:fa:68:13:
17:c9:a4:14:93:5b:b5:e5:39:b3:d0:bc:ec:e9:51:
ce:c4:70:c8:0d:c6:49:08:67:64:8f:cf:63:55:2f:
b7:0c:47:a0:43:47:6d:03:db:82:13:5a:0a:74:fc:
58:6b:87:95:de:93:d6:0f:36:47:34:b5:5f:24:ac:
02:f5:76:37:20:f9:4e:d5:34:b4:96:28:a4:9a:be:
68:f6:37:dd:df:b4:00:c0:7b:03:06:21:db:47:03:
98:bb:64:c6:38:95:b3:0e:8d:b8:83:32:56:8d:b4:
9c:4b:1d:24:81:40:5b:eb:e4:91:f1:6c:a1:a7:c2:
a1:41:ee:1b:ad:2f:90:47:9f:87:cb:7d:fb:01:5c:
cc:9e:c9:0e:06:12:5f:97:47:1c:cf:57:9c:b5:cc:
05:51:10:0b:74:cc:09:22:23:ce:e0:af:78:fd:f7:
78:8d:4b:b2:3d:af:81:00:f3:ca:0d:57:4c:e3:30:
fb:e8:ed:46:24:92:76:d6:6e:8a:15:1d:70:46:ca:
72:54:24:1d:b4:a1:82:6c:46:51:54:04:c1:ff:60:
5e:d9:ec:97:7d:11:0e:3f:15:eb:9b:2d:a7:6c:49:
3d:96:4d:4e:56:24:9a:0f:54:54:d8:be:30:43:85:
d8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7F:0B:59:E4:FC:1F:10:67:88:CA:15:C3:E5:CA:8D:4F:D8:59:0C
X509v3 Authority Key Identifier:
keyid:7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/_n8LWeT8HxBniMoVw-XKjU_YWQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.125.0/24
45.158.127.0/24
Signature Algorithm: sha256WithRSAEncryption
32:f4:cb:9a:bc:f2:3c:dd:ce:ce:0c:a0:9e:ec:a8:a0:45:7f:
60:07:4c:df:5a:6c:59:74:c0:f6:ac:b0:8d:4a:fe:81:5e:46:
e4:d0:97:a3:52:6d:64:03:15:e3:bf:54:52:43:72:eb:54:fb:
50:4a:4f:8a:b3:8e:cc:5e:dd:e8:4c:26:fa:82:f8:2c:16:9a:
81:4a:ca:7e:fa:42:75:1c:89:cc:98:c0:07:64:6c:07:97:ef:
9e:10:85:31:fc:75:f9:4b:21:ff:b2:04:5e:7a:23:89:6d:2c:
16:c8:be:20:d1:39:b4:82:47:7d:1f:3f:b9:62:0d:b8:e0:ab:
41:45:59:69:c7:b4:4a:67:2d:6d:c5:bd:c2:cc:b1:c3:a5:c2:
66:4d:75:2d:01:51:1a:c7:4f:56:c8:7d:d6:59:69:9a:e3:71:
71:23:94:76:e4:8a:c7:2a:d8:76:a3:97:96:68:b8:3a:30:ed:
2e:ce:88:d6:af:91:08:5a:3e:88:66:d2:5d:4a:9c:2d:78:3b:
98:b6:ab:7f:e1:aa:e1:06:5c:18:d4:29:75:d1:2d:03:1e:22:
b3:4a:76:bc:b3:fc:e2:50:31:60:e5:2f:76:58:90:97:ea:b8:
56:73:a3:bb:86:a8:a8:b5:09:d5:df:02:ac:73:3a:0e:9f:1e:
2c:88:13:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:00 2024 by rpki-client on console-ams.rpki-client.org