Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/1-nqLzCXQ8SKRSxjMZ7_85JK7VcY.roa
File: 1-nqLzCXQ8SKRSxjMZ7_85JK7VcY.roa (raw, json)
Hash identifier: o1DktjFGEMZr7lHO74t1iu9kgeFsRI1TyVG+WCX+NF0=
Subject key identifier: FA:7A:8B:CC:25:D0:F1:22:91:4B:18:CC:67:BF:FC:E4:92:BB:55:C6
Certificate issuer: /CN=d3d4e0da68c1446689419d103711b191ded567f4
Certificate serial: 018C5C760018CE8FE4E3BE2AFA9CFD7DF940
Authority key identifier: D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/1-nqLzCXQ8SKRSxjMZ7_85JK7VcY.roa
Signing time: Tue 12 Dec 2023 05:18:06 +0000
ROA not before: Tue 12 Dec 2023 05:18:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31605
IP address blocks: 45.139.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5c:76:00:18:ce:8f:e4:e3:be:2a:fa:9c:fd:7d:f9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d4e0da68c1446689419d103711b191ded567f4
Validity
Not Before: Dec 12 05:18:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa7a8bcc25d0f122914b18cc67bffce492bb55c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d1:e2:70:a2:f9:9d:72:b8:89:7c:0d:4d:18:
73:90:b6:51:a6:11:20:45:da:60:b3:10:81:7f:18:
5e:bd:d6:eb:bb:c5:48:ec:87:96:98:a1:af:20:77:
50:20:cd:33:1a:65:4f:ea:4b:a7:69:b0:8a:8d:a7:
54:61:99:2c:7b:46:7d:f3:8e:4e:e1:51:67:8f:4d:
a3:56:0a:4d:48:ea:e2:fc:4c:58:25:c8:9e:27:55:
e7:40:cd:96:38:64:ae:21:0b:0f:07:87:81:b2:26:
5b:6b:3b:dc:2d:d3:85:86:7a:68:59:a4:70:d0:d4:
27:c4:fe:2a:ae:4a:73:42:89:fd:35:b9:7e:de:40:
a3:fa:19:9f:39:72:da:4c:8d:eb:9f:23:27:38:9c:
89:73:49:b0:04:25:d6:14:43:53:ce:8e:35:d6:cc:
23:69:3a:d8:7b:63:5b:de:05:5b:db:ef:6d:39:ca:
a8:75:cb:cd:f7:eb:58:aa:77:ef:23:6a:a5:f3:8e:
4b:4f:e9:79:fa:8f:40:d5:60:08:17:7c:32:62:2a:
1c:83:67:56:40:ce:ae:42:88:2e:8f:8f:0b:a6:1b:
93:70:c3:b7:91:0c:51:34:40:27:e0:87:26:a6:67:
e7:9a:d3:04:c7:d3:5e:dd:00:e9:f6:b7:f4:6e:f3:
b3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7A:8B:CC:25:D0:F1:22:91:4B:18:CC:67:BF:FC:E4:92:BB:55:C6
X509v3 Authority Key Identifier:
keyid:D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/1-nqLzCXQ8SKRSxjMZ7_85JK7VcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.107.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:82:08:4c:de:c8:01:8d:f7:40:6f:8d:ac:5a:5b:6a:f6:e3:
ac:56:05:6b:8f:16:aa:33:67:b2:a5:70:84:91:a8:aa:14:08:
0f:6c:dc:24:df:4d:e1:39:e0:85:59:f2:2d:4a:25:97:02:8d:
66:78:e1:7f:fd:c4:2c:48:7c:58:57:22:82:4d:5a:af:b9:19:
8b:d9:f0:ba:d7:25:5f:60:e6:20:1e:10:65:ea:4d:d6:d7:90:
04:9e:5e:95:65:3e:ef:1b:85:39:e8:1a:c4:20:06:0f:06:6c:
6f:69:83:54:9b:c8:59:09:c5:fa:54:63:76:64:80:80:15:46:
be:a7:53:99:39:90:ec:bd:e0:96:88:19:cb:20:6f:e2:08:a4:
4c:dd:b5:a8:30:d4:6e:10:0c:bd:bd:f2:2d:18:a0:9b:d5:9e:
18:87:33:5a:89:fd:8b:06:94:58:76:dc:b3:b7:c3:41:ad:a8:
66:be:53:1e:4a:4e:07:06:3f:15:9f:2f:36:f0:37:95:1a:8c:
d4:e5:f4:14:9b:c7:d5:ce:cb:c3:c8:2e:73:b8:80:60:c7:cd:
1e:50:5e:82:7b:53:5f:e5:8f:13:17:d5:8e:f5:c1:af:f7:34:
be:47:72:98:ed:61:dd:f8:ca:6e:47:cc:fe:ea:48:27:6c:97:
e3:63:6f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:05 2024 by rpki-client on console-fra.rpki-client.org