Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/fgaTV9sy4l6aRGRviHqW2vT89Yw.roa
File: fgaTV9sy4l6aRGRviHqW2vT89Yw.roa (raw, json)
Hash identifier: 5aFemCPwPggtHqP9t0SxtYGVn7L3QlrWcV+BazUiK7A=
Subject key identifier: 7E:06:93:57:DB:32:E2:5E:9A:44:64:6F:88:7A:96:DA:F4:FC:F5:8C
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 01869DAE92D5A8B4748C8B4C99AB90FFDFE3
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/fgaTV9sy4l6aRGRviHqW2vT89Yw.roa
Signing time: Wed 01 Mar 2023 14:58:29 +0000
ROA not before: Wed 01 Mar 2023 14:58:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 45.143.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Apr 2023 15:05:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9d:ae:92:d5:a8:b4:74:8c:8b:4c:99:ab:90:ff:df:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Mar 1 14:58:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e069357db32e25e9a44646f887a96daf4fcf58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4d:67:13:cc:a6:d2:a0:98:ad:bf:60:46:e2:
06:7d:16:a7:f8:5d:44:c6:22:13:cd:1e:4f:84:5a:
8f:2e:68:f4:31:c1:5e:a2:d7:2f:09:93:30:ec:c7:
3a:20:1d:d8:97:fc:06:07:ea:70:23:3f:28:58:02:
1e:3c:d2:cf:5c:b2:5b:76:fc:9c:11:97:81:f7:57:
0f:60:48:e6:79:7c:09:f2:92:39:e1:f0:c2:9a:f5:
2e:3f:65:3f:f9:87:67:9d:87:ec:c8:a3:ad:e7:d2:
4c:63:04:93:43:4a:68:88:48:29:e3:97:ad:a9:f8:
d7:0a:ca:a4:13:63:e5:8b:1a:aa:d6:36:7b:66:86:
0a:6c:ff:94:09:00:45:09:66:33:aa:82:ec:b6:b4:
bd:47:03:38:84:39:01:17:3a:22:20:38:3a:61:20:
72:3c:8b:3b:ca:a5:bf:4e:44:69:71:f8:40:b8:19:
9d:8a:c1:3e:6d:0a:a4:46:a2:d1:97:63:e5:9b:97:
52:ce:8e:32:92:25:6e:bb:b3:87:75:9d:ab:b7:ce:
53:4c:1f:8e:9d:18:ef:26:5f:08:74:de:58:64:ee:
ea:9a:e2:5a:3e:84:7c:b3:41:b5:68:93:b1:70:c2:
f4:a6:27:51:76:5a:4d:e6:53:61:8d:17:0f:cd:25:
09:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:06:93:57:DB:32:E2:5E:9A:44:64:6F:88:7A:96:DA:F4:FC:F5:8C
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/fgaTV9sy4l6aRGRviHqW2vT89Yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.163.0/24
Signature Algorithm: sha256WithRSAEncryption
58:61:76:ba:c4:75:7d:b2:da:41:9a:5d:2c:73:05:4f:98:5e:
dd:0d:60:4c:ac:34:46:59:34:f9:0e:88:75:97:a4:29:c1:a5:
3f:93:33:7f:5d:55:5f:fb:bb:b9:e9:be:21:24:8f:12:94:6c:
cb:ec:e2:58:9c:13:ce:98:bf:42:64:cf:d8:50:df:96:5b:ca:
32:0f:42:4d:e3:bb:99:21:70:12:90:03:2a:d3:63:59:c7:56:
0d:f6:66:17:28:6b:8a:f1:0b:34:36:51:9d:27:82:78:cd:1a:
ae:f9:43:a0:da:fa:7c:12:d2:ae:6b:96:a3:3f:44:81:34:f7:
f4:5c:dd:58:55:b0:f4:4b:76:79:28:ee:c4:57:24:31:4a:2a:
6b:1f:f3:3f:a1:de:6e:aa:c4:3a:f1:4a:fb:e4:de:d9:74:70:
89:44:0e:dc:e8:99:bc:52:c1:46:ce:af:c7:34:04:8f:24:8e:
54:8a:2b:ea:48:48:22:72:d3:49:d4:4f:43:e8:30:dd:79:66:
28:53:e3:3a:b3:49:41:e6:6e:22:fa:b4:bc:10:9e:95:91:4c:
75:1a:aa:8f:01:01:0a:bf:0d:5f:de:2e:2c:16:a5:8a:85:61:
bd:53:8f:dd:c4:5e:b9:6f:31:43:46:8c:f2:83:bc:7c:0b:b4:
2e:dc:0f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:08 2024 by rpki-client on console-ams.rpki-client.org