Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/Qh-GAptUBE1khrtX1Ck7sTp0ULw.roa
File: Qh-GAptUBE1khrtX1Ck7sTp0ULw.roa (raw, json)
Hash identifier: V/Glho+9q3MlAh96y3wYcx7vX2DvhrQCCK+N+x9q+j8=
Subject key identifier: 42:1F:86:02:9B:54:04:4D:64:86:BB:57:D4:29:3B:B1:3A:74:50:BC
Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Certificate serial: 018CC794E01681BA5F9347103C4637447A6B
Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/Qh-GAptUBE1khrtX1Ck7sTp0ULw.roa
Signing time: Tue 02 Jan 2024 00:31:11 +0000
ROA not before: Tue 02 Jan 2024 00:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26042
IP address blocks: 45.155.78.0/24 maxlen: 24
45.155.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Apr 2024 09:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:e0:16:81:ba:5f:93:47:10:3c:46:37:44:7a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Validity
Not Before: Jan 2 00:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=421f86029b54044d6486bb57d4293bb13a7450bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5a:0a:9c:7a:66:5c:47:ae:fa:5c:14:19:2f:
8a:59:a2:26:8f:f1:96:fb:64:30:c8:e4:17:b5:8b:
3e:af:b9:e7:a4:b1:d7:4b:fe:d9:4a:7a:ae:7d:e5:
60:2e:dd:22:56:a0:a8:02:94:d3:2e:4c:b5:5f:25:
e1:59:6a:87:6d:e7:31:19:8e:19:89:05:5a:1a:90:
de:22:ed:b8:cd:38:62:3e:cc:0a:7d:82:6d:5f:69:
45:d2:e5:c5:50:73:26:99:58:a8:bb:ef:65:dd:13:
45:92:fc:ed:4d:97:fc:23:b7:61:70:39:01:e2:9a:
b9:8c:40:6e:91:64:a6:64:b5:68:80:9e:b2:2b:41:
f6:31:f7:84:ae:8b:a1:e1:7e:ac:23:86:1e:ae:de:
d5:37:76:86:e1:32:fa:75:9f:43:15:13:8c:08:89:
e5:24:9e:52:5d:c4:d8:6d:58:89:3d:42:eb:0a:6d:
6a:00:f7:0d:17:40:cc:12:74:c3:da:db:fa:35:7a:
09:1f:21:63:43:c3:8e:b2:78:36:9f:f6:58:7d:90:
64:c4:c4:69:71:dc:a6:f9:64:47:20:9c:c0:a0:65:
f8:a0:ea:c8:88:67:03:97:f8:6f:11:b0:60:fa:c2:
bc:79:40:9f:71:6f:e0:2c:47:13:60:6d:d6:6b:40:
4b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1F:86:02:9B:54:04:4D:64:86:BB:57:D4:29:3B:B1:3A:74:50:BC
X509v3 Authority Key Identifier:
keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/Qh-GAptUBE1khrtX1Ck7sTp0ULw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.78.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:9a:5b:bd:51:5a:29:e1:ea:29:c6:7f:40:e7:b5:d0:87:ae:
5a:95:ef:c4:64:c3:b7:69:f8:37:08:62:5d:99:0b:f1:2d:1f:
a0:fa:ec:60:2d:73:88:5a:d9:71:f9:32:f6:39:a2:4a:ba:97:
ad:2d:c0:6d:75:26:9b:69:ab:8a:e4:6f:18:ca:c4:c3:54:bc:
1b:ca:b7:27:f1:7b:1f:98:f6:43:3c:8c:a0:93:fb:11:67:6d:
37:32:55:c7:db:8e:c7:c4:c7:83:85:72:e2:15:a1:21:14:ba:
6b:8d:6b:c9:d4:67:7a:9d:af:14:78:48:18:93:11:f2:46:ab:
5e:a3:e9:5c:f2:fe:7c:e3:a0:e0:f2:48:5b:84:77:72:8b:1f:
ed:3b:09:97:d8:fd:b4:f3:76:91:ff:0b:1a:69:12:93:1a:03:
20:62:31:db:9a:a4:dc:50:47:7a:3f:a6:10:ac:6d:15:d9:10:
47:18:e0:d2:42:47:20:10:1e:a9:09:d4:b9:6a:11:4e:ce:2d:
73:c1:d0:34:d5:b9:e3:9a:50:d0:fc:f5:d7:26:b5:00:23:df:
82:1d:15:0b:f0:90:64:1f:11:2d:40:13:ca:97:c4:c3:10:76:
7a:08:8e:f3:9c:d3:7f:c9:a8:60:ad:b8:9e:98:ed:73:84:88:
a3:2e:2e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 11:24:58 2024 by rpki-client on console-fra.rpki-client.org