Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/kncT4rCEARmNjlWlUzQS16RkbW8.roa
File: kncT4rCEARmNjlWlUzQS16RkbW8.roa (raw, json)
Hash identifier: y2kaHytrF3qZCShIiwxESh6KV/lNnrgibjICDo4Nu1g=
Subject key identifier: 92:77:13:E2:B0:84:01:19:8D:8E:55:A5:53:34:12:D7:A4:64:6D:6F
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018A673568FBCB87CC3103F0E53E70D0E127
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/kncT4rCEARmNjlWlUzQS16RkbW8.roa
Signing time: Tue 05 Sep 2023 21:17:48 +0000
ROA not before: Tue 05 Sep 2023 21:17:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204603
IP address blocks: 45.9.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Nov 2023 12:10:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:67:35:68:fb:cb:87:cc:31:03:f0:e5:3e:70:d0:e1:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Sep 5 21:17:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=927713e2b08401198d8e55a5533412d7a4646d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:06:96:08:e3:6f:11:ce:79:7f:f2:61:ff:75:
ba:cb:52:5e:c2:97:c0:87:4c:31:20:c6:2b:fd:30:
2e:a4:2e:d4:9c:0b:be:ed:f8:3f:af:d6:c6:5c:c8:
25:35:4d:21:fe:a8:11:6f:b7:f2:45:20:64:8b:b8:
37:45:bd:9e:87:2f:b8:ac:f0:2c:4b:30:7c:39:f4:
36:7b:c7:b9:d8:cb:be:12:ac:52:a3:e3:83:e4:17:
91:b2:38:41:14:8b:1d:b0:08:3a:07:9a:18:c0:88:
9c:84:f8:e0:db:5d:fb:2d:2c:ff:0b:4d:7c:9b:6f:
31:93:45:1d:cc:cc:23:cd:3d:6d:17:b4:ec:2e:37:
74:a9:96:2e:57:d2:ad:08:f9:63:bf:9f:da:91:cb:
d7:5a:43:d1:5e:33:b5:a4:f7:c6:8a:ad:f9:02:7f:
73:b3:aa:b4:f7:e9:bd:71:57:49:8b:15:12:b2:78:
dd:78:ac:60:93:0e:3b:a1:4a:c3:43:50:57:ba:a6:
34:58:55:7e:da:e1:89:fd:c6:c9:51:f1:df:ba:85:
94:5f:0d:d9:96:b6:2c:43:84:19:29:17:fb:b9:fe:
d9:7f:8f:ad:b2:5f:cb:26:67:64:87:8b:05:05:8e:
08:fc:35:36:e3:23:f2:9f:74:45:40:ad:5a:b2:fc:
2a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:77:13:E2:B0:84:01:19:8D:8E:55:A5:53:34:12:D7:A4:64:6D:6F
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/kncT4rCEARmNjlWlUzQS16RkbW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.74.0/24
Signature Algorithm: sha256WithRSAEncryption
37:a7:38:60:03:44:40:e2:63:ee:11:44:b5:a1:76:24:16:1a:
a2:ae:40:eb:81:8f:7c:95:3c:75:9a:de:6a:76:92:4d:15:fe:
19:c5:1e:bc:d1:a0:0b:5d:d7:97:33:70:94:e2:07:cb:f1:4b:
58:1b:9e:70:04:6b:9e:aa:02:e6:f0:a0:0b:b3:2f:35:87:74:
f6:39:2d:33:db:06:cb:ac:e2:a2:e2:a1:ad:5a:18:43:14:f6:
47:fe:ad:71:35:97:39:77:64:9d:bd:fb:ef:af:06:f4:bb:b8:
35:9d:d0:3d:1c:b0:d6:17:d2:be:41:1f:48:62:df:e7:bc:f2:
66:dc:3c:03:0e:35:e1:89:40:b1:80:af:bb:df:d6:29:7e:d8:
62:9a:a9:bd:bf:f8:b7:c0:8f:8c:cd:9f:52:50:3d:0b:96:95:
60:86:5e:7b:2c:3f:74:55:f9:14:cb:d4:da:e3:57:3f:67:a6:
10:15:30:ee:f2:28:2c:c6:7b:9e:9e:ae:63:ef:99:c1:b7:41:
b9:12:cb:b8:00:01:0a:35:fc:2e:e5:d1:d8:52:5e:ba:fe:ce:
d7:d5:56:9e:f1:c7:c5:a8:7d:86:25:4b:b0:eb:05:93:7a:a6:
77:88:33:36:a3:e4:a9:74:bd:0c:d2:ad:53:08:b6:95:65:b9:
e8:c0:52:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org