Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/CNwTlXKxfTSqn5dmTMd-LNSsrxQ.roa
File: CNwTlXKxfTSqn5dmTMd-LNSsrxQ.roa (raw, json)
Hash identifier: LL1tYE0Ko/LB1J/8nAJh+nym1nWfDb2jX5NhbRbU/dA=
Subject key identifier: 08:DC:13:95:72:B1:7D:34:AA:9F:97:66:4C:C7:7E:2C:D4:AC:AF:14
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01856F79783E5139B570D068AC74D3345F85
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/CNwTlXKxfTSqn5dmTMd-LNSsrxQ.roa
Signing time: Sun 01 Jan 2023 22:35:09 +0000
ROA not before: Sun 01 Jan 2023 22:35:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25151
IP address blocks: 45.134.223.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:78:3e:51:39:b5:70:d0:68:ac:74:d3:34:5f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 22:35:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08dc139572b17d34aa9f97664cc77e2cd4acaf14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d2:d7:a4:30:e7:c5:1f:ba:90:1c:4e:26:29:
ee:68:c0:ce:9d:6d:2b:8f:96:ec:39:72:04:cc:52:
ed:cf:32:4b:9d:4c:db:ee:ff:2e:b4:39:38:78:a5:
69:a1:80:56:d1:ae:a6:0e:2e:e4:60:34:11:c8:a4:
21:7e:76:ae:df:cf:aa:bb:78:ea:5b:e0:9a:a4:02:
87:fc:6f:2e:db:19:6d:b8:08:eb:7c:9b:24:ad:74:
63:8e:66:c3:f8:c4:dd:de:99:6a:cd:6e:1f:b6:e2:
e6:2a:4e:e0:7c:3e:cd:ca:f7:d4:79:68:93:65:a1:
c3:2a:fd:c7:03:59:d7:b3:24:ad:96:7e:1b:83:f3:
d6:53:87:9c:b7:19:fd:51:b2:31:d2:a5:73:4e:3e:
a4:d7:8e:d1:c1:20:c2:3c:9a:75:22:3c:5e:31:f4:
10:b5:61:a8:18:dc:0d:5c:f3:9c:12:8a:e6:f6:91:
68:34:d0:88:8a:bc:82:41:28:46:bf:78:91:fd:95:
43:36:31:8c:8f:1f:3a:15:ea:e0:57:af:e2:3e:1f:
85:70:ff:c8:a0:fc:ab:d2:ac:8c:60:0c:3b:f7:c9:
c6:82:c3:65:ca:38:46:23:5e:b3:ba:8d:52:f8:a2:
8f:43:4a:a3:ac:14:24:a2:73:70:99:d6:84:fb:d2:
c0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DC:13:95:72:B1:7D:34:AA:9F:97:66:4C:C7:7E:2C:D4:AC:AF:14
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/CNwTlXKxfTSqn5dmTMd-LNSsrxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.223.0/24
Signature Algorithm: sha256WithRSAEncryption
58:23:70:16:eb:fe:4b:0d:5a:4c:a5:2e:a7:8d:2a:2f:2e:ca:
03:8a:8f:ea:90:8e:19:56:3f:58:1d:b7:73:44:03:32:f2:fb:
08:6e:ff:f5:47:bd:8f:9d:24:67:3d:f3:71:46:78:f5:42:ba:
b6:f1:40:fa:af:f6:f7:21:d0:f4:54:fc:0f:ab:66:5b:9f:2d:
f8:ab:2e:59:10:99:48:cc:eb:97:66:6c:13:64:e8:0d:bb:ce:
25:05:25:03:c3:2b:e5:64:ce:00:1a:48:fe:0e:48:4f:a1:59:
a5:03:80:db:05:57:7b:cf:68:bc:11:af:d4:12:6f:c2:e6:ef:
5f:e9:14:87:27:d2:37:c1:3b:3c:9d:8c:39:32:37:e2:4b:f3:
93:fa:d1:70:bc:c4:58:84:1b:41:b5:18:bc:6d:4a:fe:2a:6a:
f0:c0:4a:53:f7:12:4b:83:e4:ff:5b:ff:12:3a:99:95:77:6c:
44:64:1d:4a:9c:83:84:5a:dc:ad:1c:25:a5:aa:4b:eb:ed:98:
37:9f:18:59:40:fd:85:5c:5c:ce:5a:0a:59:8c:5c:c4:11:61:
21:90:2c:2d:74:27:e2:d7:d9:da:a5:c0:d7:4d:93:44:be:b0:
a7:4d:9f:de:9f:3f:f7:1c:5e:27:fb:45:db:60:5b:f8:01:2b:
40:da:f4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:43 2024 by rpki-client on console-ams.rpki-client.org