Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/FxV5PouZ3S3uM8wUgkyt7zxsikM.roa
File: FxV5PouZ3S3uM8wUgkyt7zxsikM.roa (raw, json)
Hash identifier: xQBuBYzxydfd2h0Q4GVq29qmXqOZbEhjAfmDW7Qzzbk=
Subject key identifier: 17:15:79:3E:8B:99:DD:2D:EE:33:CC:14:82:4C:AD:EF:3C:6C:8A:43
Certificate issuer: /CN=0c477abf0a27ede886fbc42413d7a89c226b11fa
Certificate serial: 018572836569B7AAB4C12091C79037218522
Authority key identifier: 0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/FxV5PouZ3S3uM8wUgkyt7zxsikM.roa
Signing time: Mon 02 Jan 2023 12:44:51 +0000
ROA not before: Mon 02 Jan 2023 12:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39522
IP address blocks: 45.87.211.0/24 maxlen: 24
45.87.208.0/24 maxlen: 24
45.87.209.0/24 maxlen: 24
45.87.210.0/24 maxlen: 24
45.87.208.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:83:65:69:b7:aa:b4:c1:20:91:c7:90:37:21:85:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c477abf0a27ede886fbc42413d7a89c226b11fa
Validity
Not Before: Jan 2 12:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1715793e8b99dd2dee33cc14824cadef3c6c8a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d3:65:21:97:93:8f:8f:2b:90:33:19:82:55:
e9:02:71:08:7f:a6:52:ee:b6:7c:b3:ff:5a:26:5d:
59:71:d2:14:7b:c0:b8:e1:3a:b6:5c:18:c2:56:19:
15:7c:ab:e4:f0:74:0d:7c:85:75:2a:f6:23:c8:a7:
7e:c5:ce:26:35:61:99:88:e1:ad:a8:91:01:03:a5:
f8:18:44:4a:b0:dc:05:a8:63:69:ba:9f:48:06:5a:
6e:73:f4:6c:07:ee:37:78:05:e8:3d:0c:45:61:6e:
75:d4:66:41:43:ff:69:17:c9:ac:76:0b:5f:62:bd:
9e:31:70:53:a3:83:17:db:f8:47:89:e9:35:5b:1f:
3c:ee:20:b1:09:2b:89:17:59:de:09:83:8a:6c:e6:
d4:1c:f2:1a:01:6f:cb:f4:01:2f:b3:b0:99:c1:fc:
16:d1:ff:26:be:c1:67:ec:91:e3:f3:11:2d:cf:40:
7a:b0:56:fd:76:8a:62:79:75:39:f8:d9:e5:88:7d:
53:95:c6:7c:70:77:77:3a:83:a4:6f:0e:e2:b1:c0:
cf:a7:19:db:5b:f0:a5:77:75:7a:c4:80:64:72:2f:
38:5a:1d:33:62:18:6c:76:00:c5:7b:72:10:68:8e:
66:57:d6:a4:8e:07:0c:81:97:1e:8f:c8:e7:e4:0f:
0e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:15:79:3E:8B:99:DD:2D:EE:33:CC:14:82:4C:AD:EF:3C:6C:8A:43
X509v3 Authority Key Identifier:
keyid:0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/FxV5PouZ3S3uM8wUgkyt7zxsikM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.208.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:f9:15:77:4b:a2:04:ee:2e:e2:7f:96:87:b8:17:3f:e3:d9:
08:28:ce:6c:4c:ec:d9:ff:06:15:3a:0d:73:0f:bf:8c:5a:f7:
b3:c0:b7:38:ba:f9:da:2b:a0:cc:a6:68:4e:e5:c7:ee:92:cc:
33:01:bc:16:da:ec:b2:67:b6:05:e4:c7:02:27:77:2c:98:1a:
31:bb:39:f4:af:08:39:7e:59:50:68:0d:20:b7:c2:d2:f7:b4:
5a:9e:a7:45:e8:29:60:69:1a:02:43:ce:1b:4a:b5:c6:6b:b7:
e5:12:28:47:c4:8c:bf:bf:af:f1:2d:f6:9e:25:fe:74:a1:79:
3d:58:db:5a:9e:01:2d:1c:40:23:ac:4c:77:4d:80:14:9f:5b:
03:1d:06:33:a8:88:7d:92:1d:1d:cf:89:16:a9:9d:72:cf:b1:
1b:5b:a6:dd:bf:03:b7:84:94:98:fb:e4:57:5e:84:c4:1b:1a:
65:27:dc:87:0e:72:63:5c:2e:56:a1:59:f7:76:20:87:5c:72:
0b:b5:3e:9f:8b:0e:8d:e4:0f:42:5e:80:32:78:97:01:2d:87:
28:f6:bb:49:36:e3:58:20:fd:e0:1a:90:7a:0f:b9:f5:09:b2:
f9:5a:6a:13:25:ac:35:4e:7d:85:22:bc:17:75:b5:ec:da:df:
c1:28:f7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:53:18 2024 by rpki-client on console-fra.rpki-client.org