Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/nBLIfcoYGLoAhVOMYZ9jxKuBcds.roa
File: nBLIfcoYGLoAhVOMYZ9jxKuBcds.roa (raw, json)
Hash identifier: H6WL7QChsmf+ovLCeD/e+lDk+nExtxAEB32x/qMhGNo=
Subject key identifier: 9C:12:C8:7D:CA:18:18:BA:00:85:53:8C:61:9F:63:C4:AB:81:71:DB
Certificate issuer: /CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Certificate serial: 018573039E80B531CB0DF4CA04A30AF60234
Authority key identifier: 29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/nBLIfcoYGLoAhVOMYZ9jxKuBcds.roa
Signing time: Mon 02 Jan 2023 15:04:55 +0000
ROA not before: Mon 02 Jan 2023 15:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202808
IP address blocks: 198.52.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:03:9e:80:b5:31:cb:0d:f4:ca:04:a3:0a:f6:02:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Validity
Not Before: Jan 2 15:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c12c87dca1818ba0085538c619f63c4ab8171db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0d:6b:91:35:66:0c:2f:ac:7c:a7:07:79:09:
2b:3a:de:89:38:ce:7e:b4:db:c7:1d:9c:b2:57:95:
cd:38:67:bf:32:15:d9:a3:45:60:bd:4c:0b:a8:af:
6c:55:61:75:82:ca:76:11:94:39:aa:d6:79:2d:1e:
2e:53:e7:72:77:d1:6b:f8:42:98:07:37:5a:a5:8e:
92:96:38:55:a5:00:ae:8b:cf:da:0d:39:5e:f0:c0:
b4:76:44:fa:ef:ba:59:30:46:36:59:e2:ab:91:8a:
b5:d5:a3:cc:44:a9:1b:b3:19:7a:45:c4:fc:ed:60:
01:27:a6:65:d9:fb:6c:2d:6e:89:09:98:6a:c1:e3:
c8:44:d4:20:99:59:8a:6c:f5:45:a0:e7:f9:10:f9:
91:f9:40:08:33:de:d4:24:82:2c:d8:df:72:52:43:
92:d4:6d:bb:ee:5f:64:f7:49:79:7b:e2:1d:ab:4f:
0d:37:ad:7f:cd:c6:b1:4d:b2:74:67:a2:74:06:7d:
de:6a:55:b8:84:2d:5c:60:80:cb:c7:30:65:98:db:
28:af:d7:bd:fc:72:10:f6:27:b0:a9:44:ab:70:c3:
d8:88:0b:84:bd:e1:ff:4a:17:1b:1e:4d:75:e4:f7:
02:e9:6d:2a:c6:1b:6d:3a:d9:33:04:f0:e0:85:5f:
f3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:12:C8:7D:CA:18:18:BA:00:85:53:8C:61:9F:63:C4:AB:81:71:DB
X509v3 Authority Key Identifier:
keyid:29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/nBLIfcoYGLoAhVOMYZ9jxKuBcds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.52.45.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:00:79:02:e2:d5:67:7a:79:54:e9:46:81:13:2f:db:82:a7:
c8:ba:a3:9a:dd:29:51:ea:93:4a:c4:5d:48:31:cd:0d:f2:d9:
2e:52:a5:af:b6:89:26:87:dd:2a:da:4e:83:52:4d:c0:d7:2d:
a8:42:fd:aa:c2:46:0b:4a:77:cf:b6:12:e0:ea:33:43:ca:cd:
2a:83:d6:5e:eb:0f:36:f0:3e:11:73:bd:2d:f8:b9:c3:50:da:
ac:b3:6a:bd:ec:6f:1c:80:98:03:bb:fa:93:55:f7:df:00:ee:
98:6a:09:6d:5d:f9:8b:98:fe:eb:af:28:ea:1b:0b:92:61:bb:
ee:c4:44:31:14:03:73:15:30:a8:ef:1e:45:9d:18:81:9a:24:
dc:04:dd:ef:92:f6:55:18:29:20:02:fe:da:73:40:ad:48:c7:
8f:14:25:32:75:9a:c2:ed:69:8c:c1:da:b1:92:a8:1f:a2:6c:
1a:56:ca:9a:50:20:2f:1a:99:69:dd:07:35:56:de:3c:b3:28:
67:c9:52:45:5b:0b:e7:ba:76:c0:c7:c7:bb:a3:e3:c5:d4:06:
38:ce:cd:4a:f7:25:bb:49:5b:ff:2e:36:be:ed:b2:18:98:88:
67:bc:ce:a4:63:25:01:d3:b1:07:0c:95:b8:5a:d6:93:5d:0b:
9a:15:9d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:49 2024 by rpki-client on console-ams.rpki-client.org