Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/t7ps_cChEclUob0mn7PzD2pFGGg.roa
File: t7ps_cChEclUob0mn7PzD2pFGGg.roa (raw, json)
Hash identifier: Ii2GNkTDVH/kx8j9dHmKu0Zv+hUfSJWOiriqLMcWD7I=
Subject key identifier: B7:BA:6C:FD:C0:A1:11:C9:54:A1:BD:26:9F:B3:F3:0F:6A:45:18:68
Certificate issuer: /CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Certificate serial: 01894EBF3C466BEE441F8BDB256B36459C17
Authority key identifier: A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/t7ps_cChEclUob0mn7PzD2pFGGg.roa
Signing time: Thu 13 Jul 2023 10:15:02 +0000
ROA not before: Thu 13 Jul 2023 10:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142062
IP address blocks: 45.157.69.0/24 maxlen: 24
45.157.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Aug 2023 09:33:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4e:bf:3c:46:6b:ee:44:1f:8b:db:25:6b:36:45:9c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Validity
Not Before: Jul 13 10:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7ba6cfdc0a111c954a1bd269fb3f30f6a451868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:78:13:40:28:41:9f:cc:9f:29:96:f8:e7:43:
86:32:10:bb:ff:f1:4e:32:44:f1:eb:82:b5:cd:c7:
27:4f:15:c0:4f:2d:67:02:a7:88:e4:8c:59:e9:5c:
28:68:19:b7:b7:69:e4:76:52:60:43:50:aa:cf:a2:
a9:65:25:17:8b:2a:3f:6b:87:bb:f2:4e:d6:3b:df:
43:45:7e:9b:9f:f2:8e:7a:14:9b:ea:f9:06:e6:72:
81:53:5b:5f:5d:62:7d:82:72:ba:5c:27:22:91:7d:
cd:9f:fc:bd:ac:3f:9f:94:5e:5b:91:6c:06:28:9b:
db:84:7e:7f:15:b7:d9:43:20:8c:38:41:75:2e:33:
d9:70:79:9b:e7:b7:85:74:e0:59:60:e1:ba:ad:f6:
95:ca:eb:1f:a2:7d:5c:cd:fc:98:f0:03:27:ef:f7:
63:9e:ec:3d:c7:26:8e:01:33:67:b1:40:7a:ad:43:
bf:1e:ea:07:66:e3:52:f6:0e:38:b3:f3:31:d3:8c:
90:6e:48:ad:e2:fb:04:5e:06:6b:5e:93:1b:c8:04:
98:fe:7f:53:08:c1:8a:ba:3e:cb:8d:91:78:61:6d:
27:b3:43:37:dc:bc:0d:ff:67:52:33:ec:42:da:50:
7c:9a:82:9c:d5:83:28:23:f6:83:e4:0c:79:70:44:
23:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BA:6C:FD:C0:A1:11:C9:54:A1:BD:26:9F:B3:F3:0F:6A:45:18:68
X509v3 Authority Key Identifier:
keyid:A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/t7ps_cChEclUob0mn7PzD2pFGGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.68.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:25:74:40:ca:d7:49:90:52:48:b4:9c:84:37:2d:31:db:0c:
72:f8:ba:9a:ef:9f:c9:92:5d:cf:9c:c0:8d:8d:e4:d5:97:88:
18:a3:79:ba:04:c6:a6:8b:3c:30:3c:88:23:58:ee:d5:4f:69:
3f:86:0a:60:30:bc:7a:ad:88:05:50:32:89:d5:24:ad:af:ec:
dc:9d:6d:d3:9f:cb:10:29:87:0f:4d:60:f0:2d:60:f5:73:a2:
ac:31:3b:6f:ea:84:71:ed:a4:9a:97:ed:eb:a3:bc:91:24:eb:
00:98:3c:4a:ac:dc:04:2d:cf:50:d5:ab:08:8e:a0:9d:45:2f:
94:41:f3:37:37:8e:f2:bf:1a:14:91:d8:1b:68:b4:9f:ad:5f:
0e:bd:28:e8:e1:a9:e1:c0:2b:3c:f6:5c:9f:81:92:1e:d5:1b:
bb:d6:16:b2:27:43:d4:6b:7f:8d:9b:14:22:94:17:95:76:76:
ba:67:56:fc:a4:bf:8d:8c:da:21:f7:a4:50:99:fd:a3:47:b8:
f3:87:06:3c:f4:59:5c:5d:9c:90:27:9a:8c:73:da:a3:d6:c7:
0e:62:06:78:4b:33:4b:ec:53:fc:d6:ae:6c:e5:1e:36:29:b2:
4b:3b:55:37:e4:80:05:7c:63:00:9c:d0:76:44:b4:65:3e:28:
bf:c7:46:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:25 2024 by rpki-client on console-fra.rpki-client.org