Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/7dzl9xBJpKl8Z2I6k5YDmCyKEkA.roa
File: 7dzl9xBJpKl8Z2I6k5YDmCyKEkA.roa (raw, json)
Hash identifier: 9t/DoYFROOZB21g6eRd/51Xj5LMZlvOpWjkpo89gLI8=
Subject key identifier: ED:DC:E5:F7:10:49:A4:A9:7C:67:62:3A:93:96:03:98:2C:8A:12:40
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018ECB9DE6CEB6E19FA76A184BA3B720888B
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/7dzl9xBJpKl8Z2I6k5YDmCyKEkA.roa
Signing time: Thu 11 Apr 2024 05:25:06 +0000
ROA not before: Thu 11 Apr 2024 05:25:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.15.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Apr 2024 10:22:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cb:9d:e6:ce:b6:e1:9f:a7:6a:18:4b:a3:b7:20:88:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Apr 11 05:25:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eddce5f71049a4a97c67623a939603982c8a1240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0c:18:ac:f8:3b:13:35:3f:c2:d4:2b:69:cc:
a7:df:79:f7:b9:4f:22:9f:d6:5d:06:53:c6:7e:0c:
62:68:62:4e:80:f6:bf:e6:2e:45:1f:2e:41:4b:c9:
b6:6a:a9:be:1b:93:06:59:13:2b:aa:80:2b:47:bd:
0d:af:9e:61:02:3e:0c:21:ef:54:fd:83:b1:da:06:
6c:b5:a0:2d:5b:ab:3c:c7:23:70:8e:61:74:e9:9e:
0f:09:0b:f2:4e:fd:54:25:1d:c1:ab:76:36:51:62:
81:2f:5a:17:dc:42:55:a2:a7:49:22:61:2e:ca:37:
61:2b:04:72:e6:38:52:ac:b4:4e:ec:d6:e1:82:fe:
65:4f:08:82:84:60:85:e3:24:fe:93:dc:e9:34:79:
88:29:73:11:02:66:d1:1e:17:96:02:ab:a5:7f:9e:
93:ed:cc:77:82:88:46:c3:a8:17:d8:68:94:88:3c:
9e:57:7c:4f:ad:00:a2:88:8e:fe:0d:9a:df:f2:b1:
0c:59:db:f6:3e:ae:85:02:6f:37:ce:1f:2c:64:a2:
99:2c:71:27:85:a6:8a:9c:89:05:cf:82:6d:72:4c:
34:52:39:c7:e9:e2:7f:31:55:a7:8d:61:65:81:9b:
52:3d:2e:2d:87:d4:22:33:65:bd:3b:24:a4:94:34:
f0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DC:E5:F7:10:49:A4:A9:7C:67:62:3A:93:96:03:98:2C:8A:12:40
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/7dzl9xBJpKl8Z2I6k5YDmCyKEkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.177.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:2f:97:1b:42:e0:b5:f1:10:c8:4b:e7:d0:a5:07:36:92:a6:
b2:03:51:78:57:e2:da:04:e5:28:4c:5c:61:33:e1:2a:da:5a:
f6:13:45:20:9c:31:06:18:d8:f5:b5:a6:80:b9:a6:37:88:ac:
58:7a:f0:2d:f9:8b:98:bf:33:6a:b6:f5:80:cb:bd:73:63:19:
ad:8f:6e:33:c0:e0:c6:a5:80:04:5c:01:9c:1f:ee:14:0b:24:
78:58:61:82:e4:72:9c:9d:58:47:72:64:e3:02:7d:7a:61:17:
8c:cd:02:32:33:3a:80:32:b6:04:d9:bd:80:ad:98:e3:57:f5:
b4:5f:9a:9b:8b:0a:99:7f:55:83:59:f0:30:9b:45:0c:14:8d:
51:46:dc:7b:5a:1c:42:8f:34:17:40:cc:fe:84:f8:55:76:f0:
6e:19:76:2d:92:d8:4b:73:0a:54:8c:74:1d:f0:66:ab:02:4c:
ef:96:77:85:f6:12:fa:ed:3c:e9:af:1d:c4:c3:3e:e3:9f:c5:
ec:2b:45:0d:08:2b:a6:2d:c8:31:fa:8b:7d:a9:a4:68:51:68:
1c:04:50:33:7f:65:2c:24:40:67:28:59:ad:e8:a1:96:e8:92:
bd:ca:38:46:bc:d4:5f:d6:b5:d7:e0:f0:a9:c1:b9:a8:ec:5f:
91:53:92:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 11 13:52:08 2024 by rpki-client on console-fra.rpki-client.org