Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/79x2PGm8UxfuHdBRyPIFT6LPRvw.roa
File: 79x2PGm8UxfuHdBRyPIFT6LPRvw.roa (raw, json)
Hash identifier: +tr60RQ6fIks6nuZYrauhZEkHVaMgr8f0a/sLNUjsog=
Subject key identifier: EF:DC:76:3C:69:BC:53:17:EE:1D:D0:51:C8:F2:05:4F:A2:CF:46:FC
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01856F7989AB8BFE8BFE4E341C7942EF455C
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/79x2PGm8UxfuHdBRyPIFT6LPRvw.roa
Signing time: Sun 01 Jan 2023 22:35:14 +0000
ROA not before: Sun 01 Jan 2023 22:35:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58955
IP address blocks: 45.130.141.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:89:ab:8b:fe:8b:fe:4e:34:1c:79:42:ef:45:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 22:35:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=efdc763c69bc5317ee1dd051c8f2054fa2cf46fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1d:55:ed:67:47:2f:12:bd:f6:6a:b9:d6:5c:
6a:bf:2c:65:98:1d:69:3d:ac:1c:e2:5f:e8:58:ec:
e7:92:ad:f0:d2:3f:1c:c8:ea:4b:b2:5b:06:ff:54:
88:7a:5b:f3:bb:7b:b8:1e:aa:05:05:ea:3f:67:74:
4d:b9:cf:9c:ea:aa:57:b6:39:b5:07:f8:53:45:4e:
f3:26:f0:05:4c:af:91:ba:b4:17:76:4e:40:86:9c:
2c:e7:6e:a4:3b:9a:bd:87:45:94:1a:8e:b7:b8:a6:
21:f3:f7:fb:21:0f:36:89:9a:7d:c5:be:41:83:e3:
d8:7c:d1:2c:8d:ac:23:66:e3:23:55:a5:05:5b:1d:
c2:9f:1d:2b:6f:41:b2:9d:53:f0:9b:b0:a9:07:e5:
91:b1:b5:61:3c:32:fb:28:16:7d:5d:b2:86:03:0e:
6f:92:77:66:8f:5b:d9:08:9a:28:3f:1c:ad:73:bf:
ad:32:12:8c:a7:78:af:2f:82:f4:6f:cf:bb:b1:24:
fa:44:4d:ad:93:28:87:ac:91:49:89:1f:f1:e8:cf:
c1:54:a1:42:18:14:db:fb:75:b3:52:55:06:10:06:
e4:8e:b7:c5:28:39:6a:a0:9a:d9:d7:81:76:7c:d2:
62:7b:12:67:aa:42:25:ad:ac:1b:3b:c6:50:29:de:
5e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:DC:76:3C:69:BC:53:17:EE:1D:D0:51:C8:F2:05:4F:A2:CF:46:FC
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/79x2PGm8UxfuHdBRyPIFT6LPRvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.141.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:3b:6c:18:cd:85:df:40:09:54:03:ba:4c:45:42:74:e2:9a:
38:d4:2d:67:d6:e8:50:ff:86:21:7f:9f:c6:45:35:36:b7:53:
89:d4:d6:45:64:84:ea:21:4d:b2:3e:4c:86:42:e8:74:4d:13:
fa:29:20:7c:35:4e:ad:e4:27:f1:ed:9e:0d:9f:e4:66:fa:0c:
ae:d3:15:cb:9c:ae:e8:cc:a9:1d:cc:35:6a:16:3f:7b:63:2c:
dc:45:8b:42:0b:6a:fb:7c:3b:76:41:20:b8:22:8f:c5:3e:28:
39:78:07:71:4f:3f:30:96:45:8c:bc:4d:3f:16:18:f3:c1:df:
0d:53:25:ce:cf:77:0e:be:bd:d5:48:fb:87:0f:21:29:77:be:
46:fa:96:1f:63:bf:09:57:80:16:78:b9:6c:d6:0b:d4:91:8c:
18:69:91:e9:7c:be:ca:00:8e:01:27:50:20:95:0f:d8:9d:d3:
17:0b:c3:f4:19:4f:c8:ed:d8:15:03:88:f5:ea:dc:bc:dd:18:
df:9d:b7:1c:29:73:77:ba:01:ca:75:9c:02:4b:a1:3f:e0:22:
5a:86:a4:ab:16:6b:03:24:96:72:0d:23:ba:b3:ff:e2:77:16:
40:2c:a9:70:d4:b4:40:3e:f3:8b:13:7e:56:0f:75:46:18:d7:
64:e0:1a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:57 2024 by rpki-client on console-fra.rpki-client.org