Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/fycud_QsgJdSOmZK1x_5I050rzk.roa
File: fycud_QsgJdSOmZK1x_5I050rzk.roa (raw, json)
Hash identifier: /ALNTpdPu2Vq/icGm6iWNhi0PR7lKiKcbbIQojLRO8c=
Subject key identifier: 7F:27:2E:77:F4:2C:80:97:52:3A:66:4A:D7:1F:F9:23:4E:74:AF:39
Certificate issuer: /CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Certificate serial: 01856D4184D31F6F92E32580F31D2A8AE3B7
Authority key identifier: E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/fycud_QsgJdSOmZK1x_5I050rzk.roa
Signing time: Sun 01 Jan 2023 12:14:48 +0000
ROA not before: Sun 01 Jan 2023 12:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207944
IP address blocks: 45.151.176.0/22 maxlen: 22
45.151.176.0/24 maxlen: 24
45.151.179.0/24 maxlen: 24
45.151.178.0/24 maxlen: 24
45.151.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:84:d3:1f:6f:92:e3:25:80:f3:1d:2a:8a:e3:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Validity
Not Before: Jan 1 12:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f272e77f42c8097523a664ad71ff9234e74af39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:85:5e:2e:f1:e1:2d:94:9c:27:6d:6c:aa:68:
e7:41:1e:28:c1:40:f5:17:d6:6b:21:76:fb:40:0c:
9c:69:a6:68:83:6e:ae:ee:70:57:af:42:f0:44:2b:
5e:7d:28:79:c5:25:91:74:3d:55:c5:85:27:4d:e2:
55:50:38:4c:1b:e1:cc:4d:3e:b9:91:18:1b:ad:7f:
9a:35:0f:4e:a4:9b:ef:d9:69:2a:a9:bd:41:06:c5:
9b:bf:eb:dd:82:62:b7:51:4d:9f:7f:3d:0f:23:94:
26:13:c6:d6:9b:9d:af:e0:37:a1:14:b8:d2:ec:ed:
24:ec:72:7b:a0:de:5f:ca:c5:b4:c9:ba:19:40:32:
65:f8:af:2e:ef:e2:c2:9d:a1:90:7d:4b:77:af:d1:
52:01:d2:28:dd:3e:03:85:c8:1f:97:b9:61:07:de:
ad:f3:d5:90:c6:e1:ad:26:17:5c:2f:38:c8:57:f2:
ed:e9:f3:a6:42:6b:56:72:32:a3:51:a0:2a:4b:f1:
23:f5:fa:15:d7:bd:7c:db:56:69:de:51:ae:1e:9a:
01:c4:a0:ad:5b:c0:06:81:b1:b3:98:eb:15:e6:34:
a6:4e:8d:50:67:47:01:38:b9:34:f7:79:d1:77:65:
29:bc:7e:38:d6:5d:47:38:da:0e:b4:d0:d0:39:c7:
48:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:27:2E:77:F4:2C:80:97:52:3A:66:4A:D7:1F:F9:23:4E:74:AF:39
X509v3 Authority Key Identifier:
keyid:E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/fycud_QsgJdSOmZK1x_5I050rzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.176.0/22
Signature Algorithm: sha256WithRSAEncryption
86:d7:03:6e:c1:08:1f:98:c1:8c:b9:51:d8:8c:75:06:88:a0:
64:34:e4:41:cf:3b:a8:3c:36:5b:38:d8:0a:99:22:cd:d0:11:
b1:fa:3e:6c:d4:ee:0a:16:93:1f:f2:c7:1e:ba:ef:33:af:e4:
0c:12:62:53:a7:8a:97:72:fb:a4:f7:5f:c4:81:5e:e7:bc:df:
7c:57:63:da:a3:70:e7:d0:a7:26:ed:d0:90:b3:1f:5a:d9:4b:
7a:c7:86:cd:43:ce:6b:91:0c:8f:e4:de:16:74:84:d9:fd:a7:
d9:fe:24:63:eb:68:7b:ac:f7:a4:65:3d:68:ee:5b:c1:15:0d:
a4:fd:95:40:da:fb:b9:fe:f6:d8:c0:92:b6:e1:b5:41:84:63:
fe:d0:3f:ca:f7:ab:43:b7:57:87:7d:bc:9e:6d:8e:2e:4e:da:
f2:a4:00:f5:71:a7:45:f1:f5:47:6e:a4:37:36:45:ba:3d:8d:
9f:b4:d3:6f:ec:de:ac:ec:38:0e:f3:e5:72:23:f6:de:04:8d:
7e:e0:c5:8b:d4:3b:86:bb:d0:67:eb:d3:bf:56:ec:c3:a8:5c:
0c:bf:8c:d8:ba:4b:41:7f:db:9c:a8:83:13:08:5b:a2:d6:a7:
bb:7b:33:58:09:67:3a:6f:fd:8f:59:47:f8:4e:b1:26:d5:0c:
60:2a:50:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:21 2024 by rpki-client on console-ams.rpki-client.org