Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/nFk4z5L7agg02y8iARnrW1tVkxI.roa
File: nFk4z5L7agg02y8iARnrW1tVkxI.roa (raw, json)
Hash identifier: 1g4/HYatRXiS+w1LxDZBJxDdULUft8oyDebD+CDRxTI=
Subject key identifier: 9C:59:38:CF:92:FB:6A:08:34:DB:2F:22:01:19:EB:5B:5B:55:93:12
Certificate issuer: /CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Certificate serial: 01880514316159545EC695839250671BE7CE
Authority key identifier: A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/nFk4z5L7agg02y8iARnrW1tVkxI.roa
Signing time: Wed 10 May 2023 09:53:09 +0000
ROA not before: Wed 10 May 2023 09:53:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 132325
IP address blocks: 45.157.69.0/24 maxlen: 24
45.157.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Jul 2023 10:15:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:05:14:31:61:59:54:5e:c6:95:83:92:50:67:1b:e7:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Validity
Not Before: May 10 09:53:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c5938cf92fb6a0834db2f220119eb5b5b559312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ca:8f:66:93:10:49:1d:08:4d:70:80:d4:b5:
da:bd:ef:57:d6:d6:5c:25:d9:47:e1:fd:ba:91:bf:
f4:92:3a:96:c8:94:10:c6:06:3d:29:b2:ed:1b:6f:
da:df:d4:7e:0e:48:0a:d6:ff:28:a6:2e:5b:c7:5e:
9c:94:0f:c0:7f:2c:43:d1:4d:32:90:1f:de:3e:6e:
d7:1f:f4:d0:cd:e1:13:8a:f3:67:9b:25:74:a4:1f:
1c:70:22:c4:92:de:a8:21:b9:01:01:c5:92:df:bb:
3a:0a:82:5e:ee:c3:cf:fa:2e:4d:05:6f:ae:4a:6f:
75:2a:8f:9b:97:2b:32:cf:f8:35:13:87:23:a3:e2:
81:d6:5d:4e:fa:b8:0a:4b:c2:f0:76:bc:15:e5:bb:
56:20:93:e8:e2:36:29:8c:5a:72:57:e4:c2:81:a1:
53:47:ba:32:5a:26:a0:c4:d9:59:b0:9b:74:26:93:
fd:3f:07:c0:db:17:03:b4:75:eb:70:0a:cb:cf:44:
c5:b9:cb:24:03:6a:36:8b:e5:96:7e:98:62:7d:5f:
e4:b6:13:d5:63:ef:6e:fd:f8:ca:e4:56:d1:e2:50:
e5:75:87:b1:8e:9d:a9:3d:e9:7e:40:da:d1:92:2e:
2f:27:8d:e4:7a:2d:22:79:8a:ba:c4:f0:76:04:e8:
f6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:59:38:CF:92:FB:6A:08:34:DB:2F:22:01:19:EB:5B:5B:55:93:12
X509v3 Authority Key Identifier:
keyid:A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/nFk4z5L7agg02y8iARnrW1tVkxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.68.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:2f:fe:c6:a8:14:60:06:cd:8d:31:f8:f7:ac:3b:c5:16:b1:
79:e0:46:2b:92:38:ef:4a:6d:62:33:df:7d:23:ef:99:d9:c9:
a7:30:70:1e:28:70:52:56:9a:8e:0e:19:b8:50:9c:f8:30:c9:
43:8f:64:30:84:d0:64:b8:5b:a4:2b:6f:1c:c9:ba:5f:57:c9:
26:4f:60:30:41:12:00:e4:8a:8d:af:3e:88:8a:e4:d6:ac:51:
2e:22:d2:12:0a:61:35:e8:48:33:4c:1d:f1:77:0a:55:e0:f6:
91:8c:81:de:e6:6e:7a:91:31:c7:94:25:b6:40:e4:04:a2:79:
03:cf:cd:b3:06:c3:23:b1:08:aa:d5:62:0d:d9:14:aa:9b:2c:
ec:7e:de:c0:54:d1:19:09:8e:c0:d5:df:82:cf:52:54:27:a4:
16:11:d6:82:b4:cd:c1:8f:08:dd:74:7b:b4:57:67:c8:a9:60:
78:65:a8:bd:42:1f:0c:97:86:39:c6:36:25:0c:a7:3f:b5:ee:
e4:10:45:20:8b:5e:74:ab:a7:ca:dd:87:b4:99:7c:b9:ec:c2:
24:9b:d8:09:3c:28:ab:c3:ad:d2:b8:4f:ab:70:33:6c:b2:5c:
8c:53:04:b5:c3:c9:71:87:1d:dc:bd:85:c1:df:a1:fa:25:ec:
f2:5f:c9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:59 2024 by rpki-client on console-ams.rpki-client.org