Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/7G88B-YfwBmwjN-uDckf6por9iQ.roa
File: 7G88B-YfwBmwjN-uDckf6por9iQ.roa (raw, json)
Hash identifier: UARobjR6g1YGhT3YZ+na6tA9X+iquaW3hmjEAn7gjtU=
Subject key identifier: EC:6F:3C:07:E6:1F:C0:19:B0:8C:DF:AE:0D:C9:1F:EA:9A:2B:F6:24
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 0186A16D2326518E3C8015028CC38A290484
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/7G88B-YfwBmwjN-uDckf6por9iQ.roa
Signing time: Thu 02 Mar 2023 08:25:29 +0000
ROA not before: Thu 02 Mar 2023 08:25:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 139660
IP address blocks: 45.148.255.0/24 maxlen: 24
45.148.254.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a1:6d:23:26:51:8e:3c:80:15:02:8c:c3:8a:29:04:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Mar 2 08:25:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec6f3c07e61fc019b08cdfae0dc91fea9a2bf624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ed:7d:81:74:76:69:d9:ee:d3:0b:cc:41:e9:
a3:2d:e2:a5:29:f0:84:ee:68:c9:d8:d7:1b:74:58:
fc:dc:a5:b2:4c:17:86:25:9e:ee:09:4a:41:0d:23:
cc:fc:a7:9b:e4:66:21:4f:49:d5:76:fa:02:26:bf:
8d:b6:d9:3a:c5:74:95:bd:8b:fd:62:a9:67:b2:42:
50:45:8a:cd:18:c8:30:fc:9f:0d:2e:76:1f:48:9f:
f5:4b:d3:0b:98:61:bb:d6:e9:5c:8e:77:3a:6a:df:
f9:a5:4d:cc:5a:ac:de:03:50:4b:8d:80:ea:77:48:
d4:0d:8f:d6:52:c3:8a:04:11:d7:62:c7:50:d1:db:
02:74:d7:23:f9:01:11:48:37:52:77:e5:22:35:62:
23:5e:fe:44:75:78:e7:f4:61:76:b6:a7:7a:80:27:
df:62:24:d7:b0:93:3c:41:6e:28:5c:d6:96:06:33:
fe:38:27:22:f3:38:58:96:63:2d:96:7a:00:a6:d9:
18:0d:ac:1d:72:e5:33:6b:d3:39:bc:0f:39:97:6a:
60:5d:2b:de:8a:06:ba:09:0e:9f:fe:37:f6:1f:9a:
f7:09:db:20:bb:75:7e:39:26:b6:43:f7:fd:07:7a:
32:b7:e5:59:6d:b6:f0:35:90:f5:1f:d0:e8:90:dc:
24:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6F:3C:07:E6:1F:C0:19:B0:8C:DF:AE:0D:C9:1F:EA:9A:2B:F6:24
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/7G88B-YfwBmwjN-uDckf6por9iQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.254.0/23
Signature Algorithm: sha256WithRSAEncryption
83:c6:f1:eb:3c:2f:49:88:94:a5:9e:9f:da:90:03:d4:23:ac:
ec:38:b8:98:e1:62:29:e2:a7:ff:16:dd:04:e8:ce:4e:89:e9:
2f:8a:36:18:49:63:29:5d:ea:5e:e6:9b:f4:b1:c3:5e:0e:ce:
3e:f5:da:92:5a:62:3b:a0:91:66:5d:94:d8:73:b0:74:0d:3c:
af:6e:9c:06:60:bc:c1:bd:db:00:9f:29:e5:f4:ed:95:c0:75:
30:df:9e:47:41:bc:02:c2:8e:ba:3f:3e:4b:6f:aa:0a:93:c2:
2a:7e:f2:1d:f9:82:b0:f0:e1:88:34:71:a2:77:d5:ff:74:3b:
92:61:48:0a:50:0c:d3:ba:63:38:87:b6:98:43:5d:64:8e:97:
82:af:79:88:e1:81:47:88:13:e3:77:0f:79:8e:b6:d7:54:5d:
fd:d6:9f:18:4e:49:e5:d2:77:0d:15:90:32:53:c6:c8:b6:a4:
1d:f2:cc:d2:ad:49:08:74:e8:e1:2c:5c:2e:a3:46:a4:b0:47:
92:63:05:fa:58:18:ee:7d:d0:b6:6f:14:20:fc:b0:cd:0b:e3:
56:f2:76:ed:1d:82:6d:62:d2:19:dd:0a:5c:5c:77:13:82:47:
5d:07:1e:b9:97:eb:c0:69:ee:51:79:af:ff:fd:fb:19:88:85:
58:33:17:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:32 2023 by rpki-client on console-fra.rpki-client.org