Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/QPjMJUVK6ybYKe0AZi0kMNuzhFc.roa
File: QPjMJUVK6ybYKe0AZi0kMNuzhFc.roa (raw, json)
Hash identifier: GRFzUzmX17bZYOl0juE2mlkFaOTjxVr7mDWUuVLMZr4=
Subject key identifier: 40:F8:CC:25:45:4A:EB:26:D8:29:ED:00:66:2D:24:30:DB:B3:84:57
Certificate issuer: /CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
Certificate serial: 01856F0B6EA64C97D9F66B759022E61C70BC
Authority key identifier: 71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/QPjMJUVK6ybYKe0AZi0kMNuzhFc.roa
Signing time: Sun 01 Jan 2023 20:34:58 +0000
ROA not before: Sun 01 Jan 2023 20:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208928
IP address blocks: 45.15.1.0/24 maxlen: 24
45.15.0.0/22 maxlen: 22
45.15.0.0/24 maxlen: 24
45.15.3.0/24 maxlen: 24
45.15.2.0/24 maxlen: 24
45.147.128.0/23 maxlen: 23
45.147.128.0/24 maxlen: 24
45.147.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 25 Feb 2023 18:29:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:6e:a6:4c:97:d9:f6:6b:75:90:22:e6:1c:70:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
Validity
Not Before: Jan 1 20:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40f8cc25454aeb26d829ed00662d2430dbb38457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:64:53:83:d5:ef:8e:59:32:c1:51:f3:01:f8:
c1:15:6b:a7:9d:a3:05:03:19:dc:48:88:5e:d6:27:
b7:d6:0a:09:da:c6:88:5d:3d:44:d4:eb:90:a8:83:
1b:4c:75:f1:8d:f1:b7:94:4f:63:12:30:2f:dd:34:
4b:2b:c8:46:e3:4c:ae:c9:b5:31:69:bf:9d:83:18:
a4:21:04:6c:61:e4:92:82:a9:71:9e:39:fe:97:f0:
ab:f1:58:01:d2:2c:57:36:32:91:da:e3:2b:e2:24:
61:04:5b:5a:7d:86:03:14:5b:a5:cc:af:ae:e4:f8:
be:c4:f6:ab:f6:00:8e:59:8c:ca:6f:3f:f3:5b:57:
c3:14:df:e6:13:c2:5d:b1:7a:6e:21:ec:25:3e:da:
94:4b:7c:b4:e3:18:d4:45:bc:33:28:92:ca:12:f8:
7f:ef:48:21:bf:88:77:b0:f5:56:be:a2:8e:70:97:
8f:07:75:46:cf:f8:96:23:6b:fa:1c:b1:27:03:54:
d3:e4:99:b1:e8:ea:20:75:cf:57:ab:99:27:9d:52:
00:74:82:36:91:09:33:bc:d3:4f:43:9c:12:48:54:
73:0c:d8:31:12:ae:17:2a:f7:90:63:f5:e6:4a:f7:
16:55:2f:d8:09:c1:70:30:04:8c:9c:bc:0f:f9:49:
9c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F8:CC:25:45:4A:EB:26:D8:29:ED:00:66:2D:24:30:DB:B3:84:57
X509v3 Authority Key Identifier:
keyid:71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/QPjMJUVK6ybYKe0AZi0kMNuzhFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.0.0/22
45.147.128.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:aa:66:8c:d7:ec:ab:d8:23:dd:e3:57:bf:de:09:22:4f:ad:
2b:28:4d:48:ce:64:aa:e6:f3:0b:1f:ee:c0:0e:7d:70:19:32:
4f:a5:70:6e:c1:91:53:75:0f:b4:8c:91:41:5f:3e:83:76:53:
ee:a9:e2:fb:be:cc:07:38:6b:00:ea:2b:e6:4e:a3:8d:d6:1e:
42:35:6d:2d:a5:f8:b8:f0:e1:d8:28:06:1b:c5:c4:02:40:d9:
d2:3f:b7:08:93:66:8d:3e:73:12:d2:9f:83:61:0b:fe:94:68:
53:82:1a:43:a9:2e:b3:3c:f9:ff:fc:94:41:3a:ae:25:4a:62:
1c:e8:15:d6:d6:b0:e7:24:c6:bc:68:a0:ff:ab:b1:d9:c7:65:
f8:cb:33:ed:1b:74:90:b4:10:67:d7:3d:b6:7a:9f:02:6c:32:
b3:ed:81:0c:e9:f7:4d:95:12:e8:2c:54:16:fe:f8:a3:09:5f:
6e:86:c8:30:95:4a:24:bc:27:ea:7e:92:5d:62:70:c4:e9:1f:
f9:9e:85:93:30:b4:9a:98:69:9d:50:d1:dc:bb:05:90:c1:67:
2d:22:4f:a5:71:3f:5b:05:7a:74:8a:8b:20:06:41:01:cc:9b:
08:c0:1c:7e:a9:0e:dc:ac:af:e8:d0:df:67:88:ec:79:72:05:
d6:e7:78:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:15 2024 by rpki-client on console-ams.rpki-client.org