Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/bW5wpARhs2v8uu27gzv6aMx2Zvg.roa
File: bW5wpARhs2v8uu27gzv6aMx2Zvg.roa (raw, json)
Hash identifier: aYeSWqMb3T8CLP1UeZ3k7yDiyST4SPIDT+8Tc6YKqIo=
Subject key identifier: 6D:6E:70:A4:04:61:B3:6B:FC:BA:ED:BB:83:3B:FA:68:CC:76:66:F8
Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Certificate serial: 018CC94CCA77B6218DD55007A3EF488AA817
Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/bW5wpARhs2v8uu27gzv6aMx2Zvg.roa
Signing time: Tue 02 Jan 2024 08:31:42 +0000
ROA not before: Tue 02 Jan 2024 08:31:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212283
IP address blocks: 45.143.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Apr 2024 09:58:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:ca:77:b6:21:8d:d5:50:07:a3:ef:48:8a:a8:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Validity
Not Before: Jan 2 08:31:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d6e70a40461b36bfcbaedbb833bfa68cc7666f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7b:94:3a:73:7b:94:dd:de:95:d4:e8:71:1a:
36:85:d7:02:0a:45:01:41:af:85:c9:0b:f1:64:bb:
ac:88:92:09:28:1f:c6:18:a4:ac:79:79:39:d3:e5:
6d:f6:8d:eb:a1:76:48:3a:cf:9b:2f:0c:a2:34:e4:
8f:47:1a:4c:5c:1a:ac:8d:e7:49:5a:cc:07:4e:9e:
2e:c0:43:15:50:ea:de:d8:3e:74:ca:63:da:ae:dd:
6c:e2:d6:84:80:55:aa:e0:d2:21:d1:f3:24:7a:70:
20:ab:e2:78:50:09:27:5f:e1:00:b7:48:ec:07:11:
16:23:c4:15:42:3d:0a:ac:c4:7d:d6:ce:e7:05:25:
b1:d2:9e:6a:5f:df:09:e1:e0:0d:11:23:ec:33:17:
95:79:09:4c:fd:1e:40:e1:1e:85:49:1a:1f:20:5e:
50:eb:94:ac:a4:cb:da:18:a2:b3:50:d4:4a:b4:9c:
25:0a:e2:78:a8:46:e6:6f:20:f7:da:37:7a:fc:71:
50:78:f2:29:e7:e5:e9:e0:ab:9c:0b:77:71:ba:3e:
fe:a2:ed:44:57:60:86:23:dd:53:3b:cd:b6:c9:ea:
b5:2e:02:d0:c1:37:81:cd:54:af:01:f7:b7:ab:b9:
ae:4b:56:fd:5b:a9:3b:ad:57:bb:73:1a:c7:06:63:
53:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6E:70:A4:04:61:B3:6B:FC:BA:ED:BB:83:3B:FA:68:CC:76:66:F8
X509v3 Authority Key Identifier:
keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/bW5wpARhs2v8uu27gzv6aMx2Zvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.200.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:f2:5a:53:26:75:24:5a:0b:7a:0d:88:76:01:cb:dd:c3:6e:
6f:03:8d:4c:14:ab:01:bb:02:dd:09:b4:d6:05:93:5e:c3:48:
ea:b3:bc:4b:ab:50:45:d0:ba:1e:a9:c9:42:31:9e:7e:06:e7:
a0:ef:2d:31:e2:31:1a:3f:ca:b1:12:7b:71:f0:1a:97:46:e2:
b5:67:65:26:da:2d:03:23:49:51:6d:cd:41:23:e9:2a:c4:65:
c2:72:bb:95:13:5b:7e:5a:d6:8c:9a:3b:e2:aa:10:d1:bb:07:
04:6e:03:a6:15:31:60:17:c3:f0:20:14:da:6c:0b:46:56:3a:
a5:a0:d8:2d:9d:d9:d2:98:23:83:e2:d6:2f:8f:22:bc:f2:bd:
c3:a4:61:dd:9e:9f:98:de:55:b4:17:dd:55:dd:75:b9:1e:cf:
6f:76:d0:64:49:bf:bf:6f:f0:30:43:59:e3:8d:65:aa:72:fe:
02:35:73:5a:67:d7:ee:44:f7:28:36:27:a6:a6:fe:2d:1d:83:
33:4e:19:f5:69:9c:8d:1b:ba:ee:ba:2d:d9:bd:86:53:c7:ed:
bf:cd:9f:a6:d9:eb:af:27:45:da:a7:79:86:61:32:fc:a4:7c:
57:6b:e1:28:24:97:9b:5a:4c:08:6b:cd:12:64:20:0d:52:cc:
a5:30:c4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:29 2024 by rpki-client on console-ams.rpki-client.org