Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/NypT5bKpJGq636oDI5oMATZqN0Y.roa
File: NypT5bKpJGq636oDI5oMATZqN0Y.roa (raw, json)
Hash identifier: QVWdszEcwJJKgFuj+zCTekeF6/r9KeuS4ehewL9JBEw=
Subject key identifier: 37:2A:53:E5:B2:A9:24:6A:BA:DF:AA:03:23:9A:0C:01:36:6A:37:46
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 018DFA1B4911E961ECF95D20CA560B2A2620
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/NypT5bKpJGq636oDI5oMATZqN0Y.roa
Signing time: Fri 01 Mar 2024 13:01:48 +0000
ROA not before: Fri 01 Mar 2024 13:01:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40975
IP address blocks: 45.145.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 09:23:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:fa:1b:49:11:e9:61:ec:f9:5d:20:ca:56:0b:2a:26:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Mar 1 13:01:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=372a53e5b2a9246abadfaa03239a0c01366a3746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:58:fc:01:bb:c7:5d:25:d3:79:20:7e:53:40:
f5:37:88:11:fe:9c:d1:bf:f7:4f:7a:d9:9d:0f:8d:
7a:b6:a9:fb:d4:83:69:e5:74:56:5a:8e:a6:9d:ad:
3b:08:9a:a0:40:15:65:c4:95:c4:f6:1b:15:0d:0e:
64:18:f5:0f:6b:c4:2a:55:a5:56:d5:2f:9b:f2:dc:
fa:24:a2:17:4f:94:04:8c:e9:f2:c6:9b:61:68:ea:
ad:01:ed:0f:a0:f5:67:7a:2b:e0:cb:23:1d:63:e3:
01:d4:3b:c9:44:10:ba:ba:ef:12:5b:f8:2d:c9:01:
d5:f4:b0:b5:ef:32:91:22:c4:b4:72:41:1f:12:04:
a6:3f:9f:56:35:7f:38:84:8b:44:28:41:aa:4b:4c:
c3:48:90:92:4c:29:01:ad:d6:d2:2e:37:81:14:b6:
4a:a9:b8:54:dd:67:2c:b7:6c:e3:2a:3e:f6:a2:84:
fc:ee:48:f5:76:98:ad:b5:71:01:58:3d:fb:5b:92:
e8:12:0b:3b:1a:c9:48:a2:41:b5:6d:6f:fc:7e:bd:
96:e3:bb:46:03:cd:50:9c:ce:6a:f5:0c:9c:49:bd:
34:37:3e:df:8b:5a:3f:7f:8e:23:36:42:0a:5d:1f:
54:8f:f4:57:4b:36:1c:06:1e:80:da:bd:d9:8e:de:
80:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2A:53:E5:B2:A9:24:6A:BA:DF:AA:03:23:9A:0C:01:36:6A:37:46
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/NypT5bKpJGq636oDI5oMATZqN0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.16.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:9e:aa:31:1a:ae:21:9c:1d:b8:8a:a5:0e:c2:b5:fa:e0:ea:
7d:d9:c8:75:79:11:38:51:b3:b2:c2:36:c0:50:9a:83:e8:fa:
ef:7e:e9:5d:ec:20:80:39:ab:77:de:99:4f:d7:cd:75:44:60:
57:49:28:58:21:ca:0e:e2:ef:2f:da:52:c2:18:99:93:f4:c9:
f3:18:9c:d7:54:b4:8f:1b:59:dd:5c:58:11:d1:93:06:14:18:
f2:b6:27:23:fc:ca:14:a5:c3:9d:a9:a1:eb:31:b7:36:1d:8a:
24:0c:97:04:f7:fb:7a:10:70:1d:71:b8:2a:75:de:7a:70:71:
9e:12:0f:1e:d2:a6:06:da:7d:eb:f0:41:e6:08:f1:4b:4a:df:
2c:26:f1:7b:c2:2b:d7:be:ab:10:ce:11:45:63:47:a3:a5:eb:
04:5b:11:7c:08:ac:83:51:d7:11:ec:0e:0e:f8:d9:be:70:95:
72:2e:78:96:8c:95:be:dc:c1:c4:86:c7:72:84:6a:98:a8:1e:
c8:60:06:55:c9:1e:2f:dc:d2:5c:1e:c3:53:73:75:a2:ef:42:
15:99:d0:1f:f0:49:0f:f4:d5:d5:9b:4f:90:92:be:7c:33:f4:
20:bf:29:54:e5:02:8f:80:b7:fb:69:14:52:3f:02:d0:76:95:
33:75:7f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 11:20:16 2024 by rpki-client on console-fra.rpki-client.org