Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/4U9uMaBy1rlW_Wt68yfIDrTAfsk.roa
File: 4U9uMaBy1rlW_Wt68yfIDrTAfsk.roa (raw, json)
Hash identifier: 0XfeQonvZsJJmxvMSSVk1Cl2ioNZxcW4OGHnTs9LcWY=
Subject key identifier: E1:4F:6E:31:A0:72:D6:B9:56:FD:6B:7A:F3:27:C8:0E:B4:C0:7E:C9
Certificate issuer: /CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Certificate serial: 018D0BF8F30C1EB241706656B6B779585FAD
Authority key identifier: 51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/4U9uMaBy1rlW_Wt68yfIDrTAfsk.roa
Signing time: Mon 15 Jan 2024 07:14:40 +0000
ROA not before: Mon 15 Jan 2024 07:14:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.158.60.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Jan 2024 13:06:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0b:f8:f3:0c:1e:b2:41:70:66:56:b6:b7:79:58:5f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Validity
Not Before: Jan 15 07:14:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e14f6e31a072d6b956fd6b7af327c80eb4c07ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:51:97:af:08:d9:61:59:b8:7b:ae:06:0e:41:
54:1d:f5:e5:a1:51:39:f3:e7:61:13:fe:34:10:11:
f6:5f:8b:35:1e:e7:d6:74:2b:98:bf:03:b5:25:8b:
f8:b4:7e:20:6b:e2:c3:93:bc:b1:a6:32:1b:0f:5c:
1c:78:3e:76:cc:fb:ef:2e:1b:e8:b2:38:44:42:7d:
5c:66:f1:79:41:32:d3:0c:9d:5c:e7:17:ee:fd:a1:
03:20:62:27:60:0f:b3:bc:57:00:ca:1b:13:82:b3:
44:ae:9f:b8:1a:9f:44:5e:e6:5b:91:9a:69:1b:22:
45:f5:09:b9:24:cb:11:9c:8d:2a:a3:42:7c:d1:b4:
2c:7d:70:5d:ee:eb:9b:3c:84:c5:b5:4b:4f:8d:bf:
d4:12:39:d5:3b:3e:69:80:f7:c0:5f:03:29:fe:a1:
78:1b:c6:e3:42:52:ba:cb:1f:90:be:bc:f9:ec:e6:
df:96:af:cd:48:0e:b9:55:29:ff:d5:ce:f0:d4:f9:
30:ab:85:b6:9e:b6:33:8e:58:4e:9b:69:3d:7a:fe:
9b:c7:16:f0:00:30:bc:17:41:5e:b8:5c:af:21:4a:
ac:bc:5f:d7:1b:5c:f0:b3:82:c7:38:49:ca:fe:0a:
16:d4:9f:93:7d:40:21:ca:e2:1d:28:92:48:d6:d8:
27:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:4F:6E:31:A0:72:D6:B9:56:FD:6B:7A:F3:27:C8:0E:B4:C0:7E:C9
X509v3 Authority Key Identifier:
keyid:51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/4U9uMaBy1rlW_Wt68yfIDrTAfsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.60.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:d1:13:bb:ca:70:bf:cf:be:83:c9:39:34:f7:a1:3c:80:30:
ac:eb:4b:9f:8b:56:e4:9a:32:d5:f8:8e:32:ad:1c:5e:e3:dc:
5d:95:7c:bb:b5:01:bf:99:58:2c:50:0b:8d:b7:07:d3:23:46:
1e:6d:4f:0c:81:c4:27:70:f3:e9:30:92:77:ce:32:fd:00:57:
4b:14:d9:e1:ac:a2:de:1b:33:90:b6:9d:8d:be:a3:94:16:db:
58:d6:95:16:4c:fb:15:5b:c1:40:bc:5e:73:8d:cb:92:58:52:
9f:fc:f3:aa:e3:e8:75:a7:bc:34:91:89:4f:61:d1:9f:32:e7:
2a:20:91:f1:ad:cd:cd:ca:dc:b0:7c:45:a4:e8:3c:02:0d:c9:
19:b2:0f:e6:f6:7a:57:8e:d9:56:d9:45:61:7a:ad:73:88:6a:
eb:a8:b9:a7:1a:f4:66:9c:d7:d1:44:72:0f:6a:df:b8:46:fd:
7f:26:ef:a2:63:e3:ac:44:f9:af:9f:6b:fb:22:9b:70:21:84:
d9:67:6c:37:d6:b4:84:72:c6:ea:3d:f2:67:92:c5:99:cc:78:
d9:6a:ed:d7:3d:3c:9e:89:a4:1e:79:34:9f:f6:58:09:88:53:
f6:fe:ad:c0:8c:67:c6:c0:85:77:2f:9c:c8:0a:63:5f:08:84:
c0:56:d8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 24 16:46:14 2024 by rpki-client on console-ams.rpki-client.org