Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/9NWEDQYuIOkwPzkUJHQAK1j1R_M.roa
File: 9NWEDQYuIOkwPzkUJHQAK1j1R_M.roa (raw, json)
Hash identifier: Kf1AneseqVWve/0DKI/2XWbWqLdykWIK6277hLFMsr0=
Subject key identifier: F4:D5:84:0D:06:2E:20:E9:30:3F:39:14:24:74:00:2B:58:F5:47:F3
Certificate issuer: /CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Certificate serial: 018CC6B8B1DE68BF56B4819DDD6D0446E8B4
Authority key identifier: 51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/9NWEDQYuIOkwPzkUJHQAK1j1R_M.roa
Signing time: Mon 01 Jan 2024 20:30:42 +0000
ROA not before: Mon 01 Jan 2024 20:30:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.158.62.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 08 Jan 2024 06:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:b1:de:68:bf:56:b4:81:9d:dd:6d:04:46:e8:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Validity
Not Before: Jan 1 20:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4d5840d062e20e9303f39142474002b58f547f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c7:53:46:a8:c4:66:69:90:83:7d:c8:21:8d:
73:4d:1d:92:9c:68:2b:4b:bd:fe:2d:ec:3d:a5:ce:
40:56:69:5e:7b:ec:b9:5e:10:a3:a0:86:25:9d:2e:
c7:8d:c1:be:96:3d:cc:e8:d9:d1:4a:6c:43:d9:cf:
e7:23:ef:af:fc:79:e3:c4:db:4a:a7:7a:6e:f0:76:
e6:77:d1:e5:1d:4c:5f:1a:a1:7f:a6:97:df:1b:5b:
b1:07:c2:83:08:41:f4:31:69:10:86:14:e1:56:87:
20:0a:9c:60:80:b1:69:86:80:be:a0:6e:47:de:2a:
ec:11:8d:11:22:eb:c7:41:57:39:04:26:0d:f7:2b:
c3:74:45:a2:60:e0:8f:f5:4c:a8:71:0b:f5:dc:b4:
3c:9f:c5:f6:12:28:b7:69:e0:35:55:11:0a:22:44:
91:27:f3:34:23:8b:c4:74:3e:7b:24:00:37:d5:8e:
76:00:13:74:1f:f6:18:2e:a8:94:23:6a:a6:ad:7e:
5e:a9:c2:cf:24:8a:af:e9:54:4e:56:8f:6e:2f:9c:
0d:dc:ca:5d:96:db:28:17:fc:25:4f:12:89:35:0e:
7f:e9:a9:3d:64:a5:4e:51:43:03:f4:60:c0:5e:e5:
9e:6b:41:0b:07:80:1b:3e:76:f9:85:50:91:90:27:
2a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D5:84:0D:06:2E:20:E9:30:3F:39:14:24:74:00:2B:58:F5:47:F3
X509v3 Authority Key Identifier:
keyid:51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/9NWEDQYuIOkwPzkUJHQAK1j1R_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.62.0/23
Signature Algorithm: sha256WithRSAEncryption
68:1d:b0:34:2f:c7:d9:e5:0e:e1:e9:b3:64:9d:55:cc:84:ea:
3e:e8:f0:9d:90:f4:3f:d9:f8:a6:e8:3d:cb:00:1c:35:54:a8:
bd:4f:c5:84:0b:3f:22:e6:e5:c3:49:65:20:cd:b2:12:94:69:
bd:c0:3e:c3:34:2e:d0:d0:58:b0:c2:23:86:c2:55:b5:97:f6:
5c:cc:02:aa:da:9f:d6:50:24:90:ef:4e:e3:5f:1b:46:92:3c:
db:65:cd:87:0e:79:19:9a:93:a1:12:e5:f9:0e:72:4a:9a:28:
d3:bd:e9:c2:f0:7a:fc:af:9e:0b:95:14:5f:ab:94:e7:62:45:
a6:82:19:8b:be:69:12:3d:02:4c:30:21:d5:ff:2a:36:7f:b8:
4d:a7:b7:e6:c7:20:7a:0e:61:25:0b:63:1a:ec:d7:ba:76:76:
f1:31:4c:f8:42:24:59:11:62:c2:44:30:90:41:5c:91:1b:61:
72:5f:e3:14:f8:ed:67:7b:aa:81:b2:27:5b:1c:79:3b:23:2a:
a6:32:93:94:de:ff:1c:cb:c7:ce:74:42:3f:19:50:92:04:fb:
3b:b7:c3:09:c0:46:12:d3:d7:6d:2d:e9:e0:57:cf:29:f8:b3:
f4:96:b3:38:f0:bd:6c:dd:6c:40:50:da:fb:78:0d:80:24:41:
1a:d7:19:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 8 07:26:00 2024 by rpki-client on console-fra.rpki-client.org