Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/nlUf6FESgBzc3qJNSBF1cjQLtbM.roa
File: nlUf6FESgBzc3qJNSBF1cjQLtbM.roa (raw, json)
Hash identifier: Odn9FKAbQGSr/V1Obdb4ZsPSZ9JOpEss4FcgdRW7C+s=
Subject key identifier: 9E:55:1F:E8:51:12:80:1C:DC:DE:A2:4D:48:11:75:72:34:0B:B5:B3
Certificate issuer: /CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Certificate serial: 018660F3D28AECCFD9FF3532A69A1A2DFF81
Authority key identifier: 7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/nlUf6FESgBzc3qJNSBF1cjQLtbM.roa
Signing time: Fri 17 Feb 2023 19:57:17 +0000
ROA not before: Fri 17 Feb 2023 19:57:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 45.158.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 May 2023 18:14:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:60:f3:d2:8a:ec:cf:d9:ff:35:32:a6:9a:1a:2d:ff:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Validity
Not Before: Feb 17 19:57:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e551fe85112801cdcdea24d48117572340bb5b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5b:ca:f0:f8:d1:f6:89:29:54:4a:99:70:64:
94:1e:2f:8a:49:60:8c:8c:a5:ff:36:5b:d5:c7:78:
e2:d3:15:d3:ff:0a:e0:d7:e1:9b:99:be:16:9c:e0:
04:38:a2:fd:50:fa:7b:e2:73:f5:6a:52:b1:5b:ab:
ef:c0:d1:b9:75:9e:69:e9:fc:e0:e8:f3:ca:86:db:
09:44:89:63:e8:59:a9:66:8b:dd:27:7f:d9:29:0f:
08:98:c1:9f:61:ba:e7:ce:01:a5:87:25:d9:df:30:
f0:46:8a:65:37:1f:60:03:f7:ca:71:c0:84:8d:d7:
ec:a0:81:d3:38:b1:4f:7b:4c:ee:32:1a:fa:b8:2a:
2c:60:54:94:53:d1:0e:62:44:dc:8a:60:71:07:60:
c9:87:c5:af:db:ad:82:a2:eb:ab:9d:4e:d0:d8:2e:
71:26:db:05:33:2f:1f:43:09:fa:03:f5:7c:72:6f:
c0:c0:30:4d:54:7d:8e:7d:b6:11:ab:4d:9b:f1:d0:
85:8e:b4:5c:f2:5a:15:3c:0a:4e:87:00:51:13:19:
d4:cd:f8:0c:5a:5a:0f:dc:e2:eb:f7:c5:a9:f1:24:
11:99:39:f0:f2:86:15:75:bb:00:bd:84:4c:ec:8f:
ee:8c:31:f0:60:3c:be:98:8d:b6:77:3d:d5:92:e5:
a1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:55:1F:E8:51:12:80:1C:DC:DE:A2:4D:48:11:75:72:34:0B:B5:B3
X509v3 Authority Key Identifier:
keyid:7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/nlUf6FESgBzc3qJNSBF1cjQLtbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.126.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:bc:e7:13:93:9f:8d:e8:e5:d0:01:63:f5:35:9d:6e:c6:9b:
24:80:c4:9b:ad:e1:e5:f6:18:47:56:89:d9:88:e9:97:1c:79:
58:a4:f5:32:45:31:ce:36:66:09:2c:07:e0:80:c9:14:46:d3:
5c:8a:58:22:a3:55:b3:b1:f1:b4:4e:2f:fc:0d:09:94:88:91:
66:b4:81:aa:4d:d9:c9:d4:c8:2f:97:a9:b9:54:10:a7:d4:2f:
16:14:53:cf:b9:45:5c:69:55:ac:1e:53:95:82:b8:b7:8e:58:
47:e1:0c:54:bf:0f:b5:6d:7d:3d:69:07:7b:74:55:46:a8:f6:
4e:ec:0c:ae:00:6f:f7:90:66:df:c0:3d:83:5d:0e:c7:95:c0:
b7:bb:2a:e2:8f:63:8a:f2:ec:7b:f5:69:c8:60:86:c0:a4:38:
b3:44:03:26:ec:1a:cc:7f:d6:2c:9b:1d:07:17:8e:3a:15:56:
c3:33:6c:cc:f5:35:77:07:79:9f:e2:49:f9:18:64:af:32:c8:
3d:b3:6f:53:54:8b:ae:b0:d7:56:84:26:67:df:89:56:f6:46:
ba:bf:25:e3:c6:6a:85:74:9a:bf:15:c0:97:f9:99:a5:8d:33:
dc:65:2a:07:52:ef:25:a3:d0:4b:88:6a:f8:6e:f2:22:eb:25:
a6:32:71:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:00 2024 by rpki-client on console-ams.rpki-client.org