Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/hVoYbUh3BuQRkkQvJrwI7dNtUzU.roa
File: hVoYbUh3BuQRkkQvJrwI7dNtUzU.roa (raw, json)
Hash identifier: s8oHaAUitjaN3WIBDu0ZtM2YMv304qxaW7G0MnPsCNE=
Subject key identifier: 85:5A:18:6D:48:77:06:E4:11:92:44:2F:26:BC:08:ED:D3:6D:53:35
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 01856EA6CE641C616F2BE16101BE8036CABF
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/hVoYbUh3BuQRkkQvJrwI7dNtUzU.roa
Signing time: Sun 01 Jan 2023 18:45:03 +0000
ROA not before: Sun 01 Jan 2023 18:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210439
IP address blocks: 45.143.161.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Feb 2023 12:22:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:ce:64:1c:61:6f:2b:e1:61:01:be:80:36:ca:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Jan 1 18:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=855a186d487706e41192442f26bc08edd36d5335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2b:ad:42:5b:37:9c:aa:88:04:e1:c0:ed:fb:
c5:44:33:c4:41:af:d0:19:fb:91:fa:3d:b8:e2:43:
79:e2:54:1e:38:30:bd:4e:2d:ce:6b:b5:ed:82:50:
cb:b5:91:25:9a:64:d4:a0:92:06:1b:ab:ce:ec:94:
89:7f:7b:c6:09:68:44:0f:a3:c6:45:b0:79:0d:32:
54:42:d2:47:7c:cd:3d:47:87:2b:a2:cd:e8:fd:4b:
d6:71:79:32:8a:0d:a6:11:23:5a:5b:d7:e9:b7:bb:
83:c3:72:82:26:d1:d6:a6:58:4c:a9:47:4c:0d:5c:
76:8a:c2:0a:06:af:17:93:ff:39:5f:bf:f7:a2:5f:
cf:5e:3c:2b:33:14:14:68:66:6d:49:01:cd:f6:bc:
34:29:da:76:65:7f:1b:76:d6:fe:67:9e:91:bb:b4:
13:09:0a:02:a1:75:c8:58:b2:3f:d8:01:7b:e0:08:
b4:d8:24:3e:ad:ca:38:97:d0:21:78:45:ad:1c:9c:
4c:36:22:7c:a9:ba:b3:10:8d:6b:88:36:6e:95:1f:
9f:b3:2b:2f:fd:7a:dc:fd:9d:e7:92:8b:2c:30:65:
aa:7d:ec:99:0d:dd:e6:e1:fa:22:e8:86:39:2b:7d:
65:20:a7:0a:ae:43:c1:5e:6c:dc:4f:c1:97:39:a1:
60:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5A:18:6D:48:77:06:E4:11:92:44:2F:26:BC:08:ED:D3:6D:53:35
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/hVoYbUh3BuQRkkQvJrwI7dNtUzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.161.0/24
Signature Algorithm: sha256WithRSAEncryption
17:d1:92:5e:c5:cc:b5:db:f5:22:27:6b:33:f2:ef:7c:84:86:
67:fb:88:8d:d4:c7:8b:67:28:64:0d:29:98:f2:3b:32:81:6f:
2c:89:ba:5a:7f:0e:dc:29:be:ec:70:54:80:ba:94:55:02:d0:
fb:98:00:7a:59:7e:99:f9:12:19:be:b7:3b:dc:0b:80:5a:9a:
a7:ec:0d:be:ba:51:9e:2c:7f:53:f7:f9:94:65:d8:c3:46:42:
66:73:4c:e1:63:83:a2:08:3a:c4:b5:18:ed:fb:70:59:fb:b6:
11:0c:f8:0f:af:1e:08:aa:7b:46:da:ab:26:45:46:59:58:e2:
d3:ce:9a:cd:15:a3:a0:b0:12:0e:b4:33:8d:9a:87:f3:ba:8a:
58:a3:ab:82:3f:d4:d5:99:29:5d:e8:55:35:c1:63:f5:b6:05:
28:28:f3:7f:be:57:b2:17:e6:1f:af:e6:ad:b3:f0:08:1e:31:
58:cf:b4:76:a9:ff:32:6f:63:29:19:de:b4:b1:86:09:c9:4d:
39:d3:ba:8e:ff:a8:54:07:59:e0:7b:04:61:bf:55:f0:a6:57:
5f:16:f4:f3:c5:80:c0:31:be:78:dd:39:24:da:42:e3:e2:01:
1d:b8:9c:bb:0f:b2:a9:55:0f:4d:40:45:81:ee:6a:b2:8c:b4:
ea:26:ee:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:51 2024 by rpki-client on console-fra.rpki-client.org