Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/fL8ssk_rhkSIX9841x0FeRIlTNY.roa
File: fL8ssk_rhkSIX9841x0FeRIlTNY.roa (raw, json)
Hash identifier: FAayTFp+bvs8zu14j3QcLVnVic3UkytjtJgJIhofivM=
Subject key identifier: 7C:BF:2C:B2:4F:EB:86:44:88:5F:DF:38:D7:1D:05:79:12:25:4C:D6
Certificate issuer: /CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Certificate serial: 01856F14DCD3E4BBE4B762CC5C4C2D32148A
Authority key identifier: A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/fL8ssk_rhkSIX9841x0FeRIlTNY.roa
Signing time: Sun 01 Jan 2023 20:45:16 +0000
ROA not before: Sun 01 Jan 2023 20:45:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136950
IP address blocks: 45.157.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Feb 2023 02:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:dc:d3:e4:bb:e4:b7:62:cc:5c:4c:2d:32:14:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Validity
Not Before: Jan 1 20:45:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cbf2cb24feb8644885fdf38d71d057912254cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a6:c0:4d:1e:4b:69:90:17:1b:81:e0:32:9c:
99:e0:00:ff:13:d1:f8:ce:69:0f:4a:eb:a1:0b:c1:
9a:10:cc:ab:58:55:2a:bc:fd:70:c6:94:40:23:c9:
47:6a:eb:9d:b9:fb:bf:c4:61:30:e6:75:e4:81:84:
d6:6d:34:ae:8b:66:56:6b:dc:36:70:16:86:9a:6b:
6f:a0:e4:9f:12:e9:5b:fa:3a:0b:d1:ff:64:0b:53:
7c:96:aa:8f:e0:dd:f9:0d:41:7f:76:f8:cf:56:d5:
f8:34:c7:16:4f:6b:b6:20:06:41:4d:36:b5:49:3f:
d1:69:05:37:81:d9:28:54:ed:d9:ed:49:19:7c:ae:
4f:09:dc:7e:6a:44:a0:34:a8:9c:84:a3:88:8e:0f:
fd:01:b2:02:dc:72:00:3b:87:a0:f2:bd:08:67:87:
ef:d7:14:cc:73:cb:06:dd:24:06:6c:95:2a:a7:bc:
fc:31:b6:d0:05:8b:46:ca:51:3c:5a:34:d1:cd:ba:
97:c1:ea:63:30:04:2b:30:88:fd:1f:fd:7d:0d:54:
4b:f0:84:ef:2f:f0:b6:42:e1:a6:65:80:ad:64:62:
b1:30:5a:49:de:58:af:50:32:f6:44:84:1d:11:81:
2d:24:78:70:31:5e:c4:17:2f:37:8a:62:dd:73:7a:
47:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BF:2C:B2:4F:EB:86:44:88:5F:DF:38:D7:1D:05:79:12:25:4C:D6
X509v3 Authority Key Identifier:
keyid:A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/fL8ssk_rhkSIX9841x0FeRIlTNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.68.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:9e:78:1b:89:c1:9b:7c:81:26:56:f1:f4:ca:00:a5:fa:68:
97:21:78:43:ba:89:3e:0d:32:cf:db:2e:5a:27:29:4a:27:00:
6b:04:d8:9a:e6:b0:e2:1e:33:55:14:d8:0d:0c:82:c6:b9:06:
98:2a:b5:00:39:06:fc:ac:2e:f8:15:34:c0:7d:24:dd:b1:84:
44:14:4b:39:01:c5:98:9f:e0:5f:fe:4b:8d:65:f7:66:ab:a6:
ed:b3:b0:ae:18:8c:50:de:1c:cb:23:12:e5:69:36:f7:09:8d:
92:72:ae:83:57:60:da:c7:bf:90:2a:de:c1:be:34:0a:97:b0:
7c:5e:af:98:1a:35:06:a8:2b:6b:c5:21:e6:67:d4:80:e8:f5:
0e:06:ca:7d:97:d4:0c:19:0f:b1:b0:55:7c:d1:5d:aa:f4:ed:
4c:ab:97:92:1d:47:bd:e7:da:e5:89:c1:76:01:02:00:10:39:
03:58:f2:fb:6a:81:c7:3b:1b:03:2c:b9:2f:9f:59:04:46:dd:
62:4f:1a:c8:14:d5:d6:04:a5:d2:66:12:bb:6f:49:7f:eb:53:
12:b2:3c:a1:5c:97:64:82:79:23:e8:38:21:fb:43:e5:15:c2:
49:ae:34:3e:fb:88:1d:a0:b7:3f:e6:1e:ca:6a:71:3a:e9:9b:
38:c3:d6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:59 2024 by rpki-client on console-ams.rpki-client.org