Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/NtlkuOCSRUVwbdNt9lpuqqvBsL4.roa
File: NtlkuOCSRUVwbdNt9lpuqqvBsL4.roa (raw, json)
Hash identifier: Ua/wi740ySTl0qr3xbOUT1zNmRJ4L+aKGVxJ2y+qW0s=
Subject key identifier: 36:D9:64:B8:E0:92:45:45:70:6D:D3:6D:F6:5A:6E:AA:AB:C1:B0:BE
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018571B646F2F46676D38B86A9849DAE6103
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/NtlkuOCSRUVwbdNt9lpuqqvBsL4.roa
Signing time: Mon 02 Jan 2023 09:00:49 +0000
ROA not before: Mon 02 Jan 2023 09:00:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210546
IP address blocks: 45.8.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Jan 2023 08:17:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b6:46:f2:f4:66:76:d3:8b:86:a9:84:9d:ae:61:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 09:00:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36d964b8e0924545706dd36df65a6eaaabc1b0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:62:dd:f3:dc:76:ca:43:8c:28:77:31:67:bc:
44:8d:6e:47:79:88:84:b7:ef:84:44:f0:39:38:24:
b5:4c:66:80:29:bc:75:d9:45:f8:d7:d9:e0:03:fc:
a9:cb:ed:e9:83:3c:be:09:7a:cf:9f:4b:55:98:8b:
60:af:bc:1e:45:f8:64:f4:a5:9c:5c:9e:22:b3:4e:
4e:51:83:cb:40:2f:de:d9:d0:7f:b3:7c:9b:16:3c:
ee:5d:70:40:8c:b5:4d:fe:96:4b:1f:bc:e9:ab:17:
60:f1:54:79:27:fc:bb:4c:ab:81:ce:4b:81:c4:51:
08:bc:af:a9:b1:8f:5a:38:9f:14:89:21:72:0e:e1:
23:2e:cf:49:29:da:db:57:52:ab:3e:bb:81:6b:36:
49:12:3b:c4:24:5e:78:a6:27:22:73:d7:0c:e2:14:
b2:e0:27:e4:1c:22:5a:52:2c:dc:ae:c0:63:46:97:
78:87:3b:d6:95:67:95:ff:1c:26:8e:85:9f:04:e3:
83:2a:1d:47:d6:f3:67:58:fe:73:eb:21:08:99:da:
34:51:5b:d0:80:87:54:51:7b:6f:d1:9a:fa:55:ec:
f8:a9:09:0d:15:bc:d3:f6:7c:60:f3:2d:35:d7:9c:
3a:3c:ab:70:d2:ce:b6:f8:b7:18:53:3f:69:eb:3c:
fb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D9:64:B8:E0:92:45:45:70:6D:D3:6D:F6:5A:6E:AA:AB:C1:B0:BE
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/NtlkuOCSRUVwbdNt9lpuqqvBsL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.23.0/24
Signature Algorithm: sha256WithRSAEncryption
82:8a:3a:34:d9:30:20:e9:86:76:5c:2d:46:a6:a4:03:c9:0c:
d3:ad:69:f0:5c:3a:3d:ab:99:9b:9d:7e:db:59:65:8b:06:a9:
80:59:54:b9:59:06:fc:08:c2:8c:39:d1:6a:48:60:92:58:93:
96:b0:15:20:5b:5e:45:7f:f5:10:05:82:45:5e:ca:ee:40:a4:
42:6a:0a:6a:73:be:cf:a2:86:76:d2:59:23:4f:64:75:0a:de:
d4:29:4d:09:64:a7:b2:64:9e:dd:ac:ad:06:99:c5:35:e1:30:
c9:70:00:55:d4:03:93:be:cb:6a:ea:96:3e:96:ca:ef:f8:7e:
81:27:9c:73:ad:49:01:d2:0d:0d:11:b6:49:41:57:7b:c7:be:
96:4f:0f:da:d6:ad:9d:47:90:22:07:fb:13:94:95:02:54:80:
51:0a:78:09:f3:97:96:fa:1e:36:fe:68:8d:91:1b:47:e8:d9:
4e:ba:5f:93:3f:18:ef:40:9b:04:5b:3e:75:d5:54:de:34:c6:
35:42:ef:f7:09:fd:1d:92:7e:49:15:d9:45:f1:2a:73:b3:a2:
26:fe:41:20:ac:2c:e7:24:5d:f1:f9:37:e4:07:75:70:9c:38:
51:62:78:9e:c3:0b:2c:1f:ad:3e:95:1e:3c:1f:04:70:84:09:
f2:f5:4e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:22 2024 by rpki-client on console-ams.rpki-client.org