Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/VbuK2_GN9Use7QJEii7eXY-6D50.roa
File: VbuK2_GN9Use7QJEii7eXY-6D50.roa (raw, json)
Hash identifier: SgxMcwRFpehgtJWZpTqJrHS2Rbbkzau1ka1iXoMJ5AU=
Subject key identifier: 55:BB:8A:DB:F1:8D:F5:4B:1E:ED:02:44:8A:2E:DE:5D:8F:BA:0F:9D
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018788E993991705937D0F1CDDA24AEC2A4D
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/VbuK2_GN9Use7QJEii7eXY-6D50.roa
Signing time: Sun 16 Apr 2023 07:13:41 +0000
ROA not before: Sun 16 Apr 2023 07:13:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.149.74.0/23 maxlen: 24
45.149.75.0/24 maxlen: 24
45.149.74.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:88:e9:93:99:17:05:93:7d:0f:1c:dd:a2:4a:ec:2a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Apr 16 07:13:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55bb8adbf18df54b1eed02448a2ede5d8fba0f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:12:97:70:87:5e:ab:88:06:bd:c5:aa:6a:a3:
c5:6c:15:10:be:9a:f9:67:43:bb:42:7c:b5:d8:8b:
38:bc:36:b7:6a:8b:8b:4a:bb:38:02:de:31:a4:19:
1c:4a:f9:66:45:ad:8f:5b:cb:4d:9a:45:ba:44:fb:
94:be:01:35:d5:cf:a2:ae:9e:bf:1f:b3:28:cd:89:
c1:6a:ba:2f:e0:f2:b2:51:fd:89:4c:48:b5:dc:81:
b6:1f:cb:2a:59:98:f6:be:20:c7:e1:c5:14:7d:53:
1c:d6:9c:38:c9:f5:72:27:20:21:db:b5:6f:92:06:
8c:b7:a5:4e:92:bd:2f:cf:f7:b6:f5:9d:14:ef:d9:
cd:f0:99:df:bf:73:77:79:87:8b:3c:64:19:ff:7d:
20:03:4b:ee:e3:3e:55:7c:b2:b6:ac:9c:0e:a3:9f:
47:c1:e6:55:07:2e:ba:0b:37:c0:6a:e7:e4:dd:c4:
b3:96:a6:8f:be:ae:f2:9b:71:a4:14:96:5e:b6:69:
01:ea:14:37:23:59:e7:66:89:51:76:6b:14:9f:97:
4a:3a:f3:b1:8b:84:22:62:ac:bd:4f:1c:1c:b1:18:
52:6a:98:dd:f1:b2:49:79:15:e9:a8:38:16:06:e8:
3a:93:8d:7d:8d:df:8e:7c:02:29:b4:d8:cb:e7:f6:
68:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:BB:8A:DB:F1:8D:F5:4B:1E:ED:02:44:8A:2E:DE:5D:8F:BA:0F:9D
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/VbuK2_GN9Use7QJEii7eXY-6D50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.74.0/23
Signature Algorithm: sha256WithRSAEncryption
c2:87:8f:af:c3:e9:58:1e:c6:42:ef:3a:7c:7d:c8:96:1c:c3:
8d:b1:c0:40:67:68:89:bb:7b:04:e4:49:f8:3d:a4:c9:4c:06:
9e:9f:d3:96:7b:d0:d5:87:fe:8b:90:28:40:40:a5:69:e5:49:
27:15:b7:b6:1a:25:be:3f:c8:cc:3c:cd:e7:88:ee:6d:64:b3:
09:b1:61:a8:ae:aa:a5:8a:08:a6:db:5c:a9:ab:77:97:60:e6:
25:f1:ee:e9:59:8b:0b:d6:cd:da:96:1f:81:83:4f:1e:75:94:
12:90:86:27:4a:8d:ab:02:e8:e3:12:c5:49:a5:67:ad:7b:3f:
a1:10:ae:29:3d:9e:80:15:56:c9:14:dd:c5:aa:5f:fb:96:6e:
9a:9d:bd:7d:8e:d4:bf:ea:f4:ce:01:99:29:94:37:88:86:c0:
eb:60:0f:27:14:fc:35:6a:80:e5:12:03:f3:65:55:01:30:26:
ac:2e:da:d5:0a:fb:e4:76:46:40:d6:b5:a0:6b:ef:f6:f7:cb:
61:ce:fe:43:4e:78:74:3d:b0:3b:19:b9:ba:5f:6a:04:cd:53:
b5:0d:31:e9:61:6c:25:62:f7:1f:74:f2:b3:9a:d9:e9:4b:c4:
e8:77:18:90:fe:71:9b:aa:e3:10:31:c0:db:0d:6d:94:b3:b7:
6b:3d:7e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:32 2023 by rpki-client on console-fra.rpki-client.org