Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/1-xWdKi7b7_SB9bHX-fql51RaYz4.roa
File: 1-xWdKi7b7_SB9bHX-fql51RaYz4.roa (raw, json)
Hash identifier: ttgQyaWus9w1QE0tKC6L+jZ7Ww1BAWlRPKmhpF+xRzg=
Subject key identifier: FB:15:9D:2A:2E:DB:EF:F4:81:F5:B1:D7:F9:FA:A5:E7:54:5A:63:3E
Certificate issuer: /CN=75f1a763745c25dad28f4a8116688e82ce12028b
Certificate serial: 01857169DC7B12E9B75ADA6B3CF5939B17E8
Authority key identifier: 75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/1-xWdKi7b7_SB9bHX-fql51RaYz4.roa
Signing time: Mon 02 Jan 2023 07:37:21 +0000
ROA not before: Mon 02 Jan 2023 07:37:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49468
IP address blocks: 45.8.47.0/24 maxlen: 24
45.8.45.0/24 maxlen: 24
45.8.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:35:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:dc:7b:12:e9:b7:5a:da:6b:3c:f5:93:9b:17:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75f1a763745c25dad28f4a8116688e82ce12028b
Validity
Not Before: Jan 2 07:37:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb159d2a2edbeff481f5b1d7f9faa5e7545a633e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7c:44:79:46:d5:44:43:84:d6:e8:c9:e5:b0:
86:82:8f:a1:20:b5:d6:7c:eb:c9:da:8a:1f:eb:a8:
67:28:bd:7f:2c:22:85:df:be:ea:2f:ed:76:82:3b:
7a:99:bd:87:62:13:f9:c1:fd:4d:c0:77:2d:bb:cb:
5f:0b:ba:a7:3c:a8:a6:99:29:00:7d:f4:63:8b:6e:
96:6a:f1:16:66:47:38:49:0d:20:6a:07:ff:6e:d0:
fa:b5:30:f3:b1:65:51:1b:f7:ff:6b:42:21:4f:f7:
a9:0f:f3:4c:af:36:78:8e:b6:e3:e9:55:af:b8:0d:
bc:1d:6c:da:be:bb:fb:e4:41:4a:cd:c8:60:df:0c:
d8:fd:01:a7:1c:74:38:af:67:7d:c1:ba:9c:a9:b1:
d6:78:95:48:d4:46:3d:be:57:62:ad:2d:a4:2a:f8:
17:78:33:af:ca:ec:43:70:7f:fd:a0:86:0e:95:8d:
f9:27:00:a1:6a:60:95:99:73:9d:f1:31:27:4c:58:
95:02:45:7b:83:90:2c:3f:6d:a1:ce:ec:a4:ef:1f:
8d:2a:a0:2a:d7:7d:05:b6:73:2e:b9:88:44:fc:9b:
f8:e5:30:46:00:cd:47:7a:3c:03:d3:ef:8d:46:e8:
f9:18:2c:10:ea:c2:bf:0c:a5:17:07:cc:c9:b6:81:
6f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:15:9D:2A:2E:DB:EF:F4:81:F5:B1:D7:F9:FA:A5:E7:54:5A:63:3E
X509v3 Authority Key Identifier:
keyid:75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/1-xWdKi7b7_SB9bHX-fql51RaYz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.45.0-45.8.47.255
Signature Algorithm: sha256WithRSAEncryption
75:8b:53:7f:cd:cb:d4:26:1d:5b:24:c6:a7:87:0f:b2:5d:54:
17:6f:32:9f:9e:fc:c9:23:22:56:e4:4c:87:e5:6b:56:2e:6f:
82:12:61:12:d8:d2:fe:20:24:18:18:ba:61:dd:d1:c4:67:45:
d3:d3:a6:40:b1:d0:e3:1f:27:1e:e3:70:74:92:59:5e:da:fa:
e1:3f:34:97:b7:0c:52:8e:f9:23:2c:40:ed:20:f3:12:eb:8e:
9f:ab:e1:48:02:af:ba:13:99:89:33:68:16:76:5b:ac:5d:df:
48:ae:67:35:cd:49:99:a6:1f:72:b1:14:36:ac:64:08:2d:53:
a6:cb:d3:46:a3:85:e5:18:46:25:26:32:dd:de:fe:c0:97:74:
47:64:31:d2:05:20:b2:e0:1c:c0:ce:52:9f:ad:db:b9:4b:26:
34:6e:19:40:64:b5:e1:3c:ba:ac:4e:8b:fe:4f:86:b8:29:7a:
ce:6c:e8:9e:90:8e:39:3b:bd:b5:1e:8e:60:0b:8c:a4:1f:a5:
95:9e:51:e1:b9:c1:06:b9:9f:f5:8b:f9:60:67:fc:44:96:c7:
20:d3:06:99:22:2f:de:53:e6:78:94:c4:51:f2:9b:db:e1:ce:
b7:e9:9a:5c:75:51:df:44:bf:ff:4c:c2:c3:c2:aa:19:73:31:
35:02:f1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:28 2024 by rpki-client on console-ams.rpki-client.org