Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/scBjs6gFOP3L7PSn6bT1T5uNMN0.roa
File: scBjs6gFOP3L7PSn6bT1T5uNMN0.roa (raw, json)
Hash identifier: 82VNQqy3NULVBD2znnN9CZS0EpE42bCn6kQ5dNyvzbs=
Subject key identifier: B1:C0:63:B3:A8:05:38:FD:CB:EC:F4:A7:E9:B4:F5:4F:9B:8D:30:DD
Certificate issuer: /CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Certificate serial: 018D0BF8F38F48468A714868F67BD8F2ABD8
Authority key identifier: 51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/scBjs6gFOP3L7PSn6bT1T5uNMN0.roa
Signing time: Mon 15 Jan 2024 07:14:41 +0000
ROA not before: Mon 15 Jan 2024 07:14:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 45.158.62.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Feb 2024 00:17:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0b:f8:f3:8f:48:46:8a:71:48:68:f6:7b:d8:f2:ab:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Validity
Not Before: Jan 15 07:14:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1c063b3a80538fdcbecf4a7e9b4f54f9b8d30dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2a:95:d1:6a:cc:91:6d:57:87:be:82:e2:37:
5b:5a:4c:e9:c9:84:e2:9e:73:48:9a:60:6a:1b:1d:
64:82:b1:40:0d:b6:92:34:05:1d:8d:7c:03:a0:42:
0b:97:3e:22:9d:88:58:7a:c1:a5:38:6f:31:6e:6e:
45:72:e0:8e:3b:c9:5e:1d:0e:82:6b:91:82:f1:71:
51:8e:15:b9:4a:92:d8:3e:cc:b5:05:3b:08:30:54:
f1:b0:27:de:6a:a1:be:fb:55:fa:74:7d:a0:f2:c0:
31:bc:ce:38:94:6b:96:2c:9d:6b:a8:b1:cd:10:8d:
17:f2:da:8e:33:0f:e0:fd:ed:75:00:52:c8:af:9a:
04:b6:68:e5:14:fc:6e:1a:6b:d9:e3:63:51:55:13:
af:5b:19:53:bd:7c:bf:6e:56:fc:36:4e:0b:80:04:
a7:0a:83:61:b0:ee:30:66:c8:7f:e7:51:9b:dc:98:
1f:04:01:fd:88:4a:16:42:b9:ff:45:29:da:75:09:
ba:6a:02:24:78:a5:3a:9d:c8:16:b2:f2:2e:72:f5:
30:70:22:7c:a1:84:13:ab:f1:50:46:fd:cb:d6:f6:
ab:f6:fb:36:5e:0d:b8:3f:8d:28:e4:87:c0:2f:70:
55:57:b0:e0:f6:84:93:7f:92:1e:30:68:52:a2:45:
a0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C0:63:B3:A8:05:38:FD:CB:EC:F4:A7:E9:B4:F5:4F:9B:8D:30:DD
X509v3 Authority Key Identifier:
keyid:51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/scBjs6gFOP3L7PSn6bT1T5uNMN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.62.0/23
Signature Algorithm: sha256WithRSAEncryption
92:34:ef:7c:e7:ab:65:79:a4:47:33:28:08:28:f1:a9:7d:8e:
63:dd:94:bc:86:fe:60:42:b0:7f:e0:c8:98:99:24:a1:e7:60:
b7:59:84:5d:e4:94:8f:c6:5a:92:a0:03:b4:33:1b:df:4f:6e:
34:f7:b7:d1:23:03:f9:bc:18:ee:8a:e1:38:4f:9e:59:ce:5f:
85:25:79:a6:aa:0b:eb:79:cc:12:1f:a5:d0:2e:02:8f:98:be:
38:53:5b:58:2e:0a:cb:9a:4a:04:1b:9c:b5:8d:e4:8b:00:31:
aa:54:ed:57:1f:7d:a0:0d:37:b1:eb:16:d6:87:28:08:2f:fb:
16:a9:f9:e6:31:4d:aa:fe:5e:b9:9c:4c:91:83:38:14:44:33:
5e:29:55:97:8c:c0:bf:ef:8c:b3:75:31:ff:63:8e:a4:32:67:
3e:c5:9e:96:58:82:bd:4f:8f:b3:40:0f:0b:5e:87:17:a0:cc:
33:47:57:31:b6:02:db:25:b0:f2:8e:1a:fc:ac:95:38:8c:03:
d6:21:07:5f:ea:72:0e:a7:7a:12:63:1e:13:8f:93:97:8b:c9:
0c:9c:1b:2b:96:e0:7e:f4:90:cd:10:3e:f2:72:dd:c1:28:17:
5c:4e:4e:3e:9a:d9:e2:f6:62:41:83:be:d6:8f:e4:cf:7c:01:
34:fb:f1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 8 01:40:39 2024 by rpki-client on console-ams.rpki-client.org