Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/08cXbkUZQ3Cd-RnFUn95jxNw8k0.roa
File: 08cXbkUZQ3Cd-RnFUn95jxNw8k0.roa (raw, json)
Hash identifier: s12BhWbn4ut6NG2gzOiCSa/+6lK9HoH1luKYV1JKuUw=
Subject key identifier: D3:C7:17:6E:45:19:43:70:9D:F9:19:C5:52:7F:79:8F:13:70:F2:4D
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 0186167545451DBB85D231E081739FF02449
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/08cXbkUZQ3Cd-RnFUn95jxNw8k0.roa
Signing time: Fri 03 Feb 2023 08:47:09 +0000
ROA not before: Fri 03 Feb 2023 08:47:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42708
IP address blocks: 45.155.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:16:75:45:45:1d:bb:85:d2:31:e0:81:73:9f:f0:24:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Feb 3 08:47:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3c7176e451943709df919c5527f798f1370f24d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4e:31:dc:59:f3:87:8a:27:4c:d6:11:ca:91:
02:a2:23:47:d2:0a:0b:a5:a4:35:2b:83:90:9a:ce:
9e:fc:21:4d:a8:eb:0e:1b:cd:b6:61:78:30:db:10:
f6:d9:f4:be:f9:25:e7:90:fd:3c:e8:e7:46:e1:76:
81:0e:df:19:69:0a:82:d8:d0:cc:aa:c8:57:9a:c5:
de:50:e6:40:66:e0:41:60:eb:c8:6c:af:4b:df:e3:
ba:bd:93:15:24:d3:e0:f2:39:e5:ca:6a:f0:c0:3a:
4f:6e:11:b0:04:0c:cf:41:f8:18:f3:2c:61:1c:e8:
9c:7e:c2:85:c6:65:fc:d5:6a:e3:d5:2d:27:fb:5b:
7b:b8:06:05:ae:d3:50:96:df:78:2a:e7:00:d0:01:
ad:a0:a8:00:95:fe:87:77:5a:55:03:b4:2c:6a:f8:
4c:de:6b:97:38:64:c6:dc:36:99:fd:96:14:3d:01:
f0:54:86:e2:1b:26:66:4b:60:5c:7e:66:5c:0d:7d:
04:7f:69:d7:a3:28:cf:c9:65:9b:61:35:ff:c7:e2:
a2:de:96:ee:ee:c2:42:b3:c0:82:d4:f8:36:1d:f3:
b4:d9:11:0e:be:68:62:92:d5:73:68:06:b9:f8:1c:
17:47:b8:54:13:78:6a:74:05:98:18:bb:09:8f:68:
d2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C7:17:6E:45:19:43:70:9D:F9:19:C5:52:7F:79:8F:13:70:F2:4D
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/08cXbkUZQ3Cd-RnFUn95jxNw8k0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.250.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:7b:81:c5:7a:c5:02:a8:ad:2d:c8:c4:81:e9:70:a2:68:0e:
44:d1:a2:3d:9b:1f:d5:0c:1f:d2:6a:14:34:41:93:20:6e:2b:
6e:42:8c:2c:f5:f3:b1:7d:21:da:e8:e0:6b:5c:f9:a7:b1:23:
d6:1e:09:d1:99:bf:b7:f8:a6:19:bb:12:98:24:f4:eb:92:0c:
c4:80:2d:e7:d2:f6:99:91:fb:f4:ff:b9:c7:4d:60:92:e1:a5:
45:08:78:77:c1:5c:67:d5:c9:ed:20:09:55:fa:b6:49:01:e8:
34:b9:54:43:36:63:f6:cd:89:f8:1a:26:95:83:f7:e3:38:92:
f3:0f:12:3c:82:76:96:2b:08:57:b6:ef:07:51:9a:6a:7b:3d:
ba:d7:16:25:3f:b7:ae:28:f8:10:75:10:a1:a0:09:5b:60:bd:
61:24:2d:c5:4d:fe:3e:0b:66:b6:7f:b5:3d:b2:95:f3:14:c4:
51:2b:4e:2d:b8:b1:de:38:19:d0:dc:e3:79:e5:c9:a9:45:21:
34:64:b5:54:91:eb:58:6d:fd:01:ad:31:08:07:33:df:23:bf:
c0:77:a2:d5:cb:47:e1:64:04:b8:cd:bd:a7:93:52:5a:78:1f:
00:34:0e:47:e7:09:93:40:2a:20:90:92:37:b9:06:3c:bb:69:
1b:a3:d1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:31 2024 by rpki-client on console-ams.rpki-client.org