Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/1-MG8tvTkVrI2mUYKnKPT2nYrSRc.roa
File: 1-MG8tvTkVrI2mUYKnKPT2nYrSRc.roa (raw, json)
Hash identifier: 4FDG1iNRSZCa3h6WFYktZKVFjVlAhBNi6WZehw6uNFo=
Subject key identifier: F8:C1:BC:B6:F4:E4:56:B2:36:99:46:0A:9C:A3:D3:DA:76:2B:49:17
Certificate issuer: /CN=234e9f75c7326f765c8966c2edc00a982a5ea7f0
Certificate serial: 01864F762FC445AB0121B4BB76387F5C9EE9
Authority key identifier: 23:4E:9F:75:C7:32:6F:76:5C:89:66:C2:ED:C0:0A:98:2A:5E:A7:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/1-MG8tvTkVrI2mUYKnKPT2nYrSRc.roa
Signing time: Tue 14 Feb 2023 10:26:30 +0000
ROA not before: Tue 14 Feb 2023 10:26:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211732
IP address blocks: 45.157.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 25 Feb 2023 11:05:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4f:76:2f:c4:45:ab:01:21:b4:bb:76:38:7f:5c:9e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234e9f75c7326f765c8966c2edc00a982a5ea7f0
Validity
Not Before: Feb 14 10:26:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8c1bcb6f4e456b23699460a9ca3d3da762b4917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:59:46:61:27:4c:53:18:13:e8:cc:7c:85:28:
4d:10:16:97:70:b1:72:96:9f:3f:16:52:46:39:a3:
a4:7e:72:43:fb:ad:88:47:89:cb:c8:49:d4:e6:35:
60:83:6a:9f:ff:e4:3f:bb:f4:c4:e7:ee:6e:55:b7:
73:f9:bc:f6:2d:5d:82:e9:f9:9d:fd:07:b6:23:b9:
b4:54:9e:4e:c5:65:aa:55:d5:cf:2b:3e:11:2d:2b:
eb:25:1c:fb:69:97:7e:1b:de:f0:67:ff:53:6e:29:
cf:f3:f4:37:d7:0d:d2:7c:57:6b:bf:a9:93:95:a8:
ce:2e:0b:a1:83:2d:b9:fd:a0:44:6c:fe:7a:d5:af:
55:14:ab:f9:63:9a:e7:83:cf:bb:1f:05:0d:58:53:
5a:7f:1b:30:df:d2:00:77:8c:7d:e1:5c:ed:f0:a0:
01:86:ed:fb:54:66:88:9f:05:84:56:84:2e:a8:0b:
f3:31:df:44:aa:de:77:54:49:d7:19:23:5f:05:5a:
b8:f9:fd:23:61:2a:b2:e9:22:97:ff:fb:ac:33:bd:
44:dc:8d:8f:32:c9:4d:df:24:7d:33:b6:53:3e:2e:
be:7d:00:83:eb:be:c3:7b:02:50:b7:80:ce:22:86:
45:ae:f6:ea:93:b4:62:da:3b:46:ec:92:95:6b:78:
90:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C1:BC:B6:F4:E4:56:B2:36:99:46:0A:9C:A3:D3:DA:76:2B:49:17
X509v3 Authority Key Identifier:
keyid:23:4E:9F:75:C7:32:6F:76:5C:89:66:C2:ED:C0:0A:98:2A:5E:A7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/1-MG8tvTkVrI2mUYKnKPT2nYrSRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.148.0/24
Signature Algorithm: sha256WithRSAEncryption
be:e8:89:ce:26:46:df:1e:45:7e:10:fa:64:09:67:0f:48:29:
ef:35:6d:ca:1f:d1:5f:b3:9b:29:d7:3d:49:44:88:1b:b5:c2:
39:fc:31:f5:59:df:9d:38:00:90:93:08:95:6d:56:03:a5:5f:
ab:30:2a:ab:15:03:58:2b:45:f5:5f:ad:9a:9c:4a:63:43:ee:
1a:eb:be:e8:e9:45:31:39:aa:21:e3:a0:79:1e:21:5c:a6:15:
f7:74:84:aa:f2:3e:3c:db:d2:82:cf:54:a1:9e:e0:30:cc:50:
56:eb:80:15:98:38:93:9c:8d:6c:fb:30:ed:29:cd:9e:ae:2c:
f4:fd:08:d6:50:72:e4:f5:23:63:85:52:4d:0f:60:1d:7f:ed:
b6:f3:81:ac:d6:b4:b9:e6:8d:73:1d:a8:34:df:f8:4e:f3:69:
2a:15:30:60:31:42:27:76:07:19:a3:31:8d:f3:ee:e8:d7:bf:
fd:d2:29:99:38:dc:44:b1:90:27:61:a6:31:f1:4f:55:bd:49:
25:bb:e3:61:ca:71:26:56:b0:37:58:19:7e:fa:de:e2:d2:80:
04:e9:73:eb:fb:2a:90:bf:24:1a:10:7c:72:28:25:11:32:6d:
2e:24:b6:06:c5:88:27:96:2b:6d:47:3f:17:cf:d2:25:18:a7:
b1:8e:8c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:56 2024 by rpki-client on console-fra.rpki-client.org