Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/WiyT7_zysy_hJc1dsNDtfSH4lok.roa
File: WiyT7_zysy_hJc1dsNDtfSH4lok.roa (raw, json)
Hash identifier: /GI/cCwBUU+wUPUqHd1BmBKK8oZGKQWIrtb1VcNLIi0=
Subject key identifier: 5A:2C:93:EF:FC:F2:B3:2F:E1:25:CD:5D:B0:D0:ED:7D:21:F8:96:89
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018B93ABDD2DF729FE1BF9AA4BEDB83D2BC5
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/WiyT7_zysy_hJc1dsNDtfSH4lok.roa
Signing time: Fri 03 Nov 2023 05:33:15 +0000
ROA not before: Fri 03 Nov 2023 05:33:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 45.137.196.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:93:ab:dd:2d:f7:29:fe:1b:f9:aa:4b:ed:b8:3d:2b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Nov 3 05:33:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a2c93effcf2b32fe125cd5db0d0ed7d21f89689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f9:28:e0:e6:df:8b:4d:46:08:21:15:2a:39:
41:03:d5:9e:c1:be:85:d4:fa:b5:be:b4:7d:da:4c:
b6:86:48:38:da:91:df:cf:e4:5f:a8:3f:f9:0e:43:
cb:ea:0e:7c:63:50:36:56:38:fd:06:65:f5:cd:7e:
0a:67:10:cb:51:ae:82:75:db:70:95:f1:72:f0:25:
57:89:6d:07:21:4f:a8:da:d3:b7:6b:b6:b1:5a:2d:
9c:7d:db:fa:54:23:b9:df:b2:c9:16:65:95:67:9f:
65:e5:78:0e:15:63:5a:8c:f4:70:ea:ac:68:71:d7:
f5:00:ba:cf:4c:7a:3b:3a:4a:dc:fb:14:39:bd:58:
de:ff:f6:09:5f:14:0b:3e:42:dd:fa:57:e6:32:b8:
68:b3:71:cd:e0:00:cf:82:95:d1:13:b6:af:33:d1:
f5:c2:1b:38:23:be:95:cf:de:cb:da:b7:57:32:31:
cd:7b:27:31:4b:30:55:d3:88:f8:80:c1:41:0a:18:
db:de:76:c0:dc:70:04:f3:49:55:ff:89:85:06:92:
fd:fa:a0:46:ba:18:60:6a:68:59:3a:61:f6:98:d1:
6f:b5:2d:66:d1:12:f6:d1:76:4a:5e:7f:16:e6:c7:
e1:ef:2e:94:cc:09:5e:e7:93:3e:de:d7:bb:a4:d8:
ed:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2C:93:EF:FC:F2:B3:2F:E1:25:CD:5D:B0:D0:ED:7D:21:F8:96:89
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/WiyT7_zysy_hJc1dsNDtfSH4lok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.196.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:27:f0:e8:37:d3:65:17:45:6b:61:54:cc:97:93:56:cd:cf:
27:56:d6:b4:33:b9:03:ec:0d:24:51:30:57:d0:3f:22:e7:ae:
37:cc:1e:f2:d0:3e:64:cf:23:62:43:80:50:e5:08:94:95:37:
30:3f:14:cf:81:57:26:51:31:7e:c7:3d:ff:a3:da:c2:e8:44:
e6:55:12:14:c6:18:a0:94:e3:f1:fc:76:b1:c5:ec:6e:41:bb:
e1:b5:7a:cd:d6:4f:81:40:72:7b:d5:0c:92:bd:c0:c4:09:b8:
27:76:b5:05:8e:81:a6:c7:a7:58:68:53:3f:45:b7:75:69:24:
a9:24:1b:fa:48:94:59:f2:14:1a:db:c7:b1:40:a2:a0:2e:93:
2a:d0:ae:f0:45:d4:27:0b:62:9d:e1:ec:7c:d7:a3:67:f7:c6:
7b:51:4b:c7:3d:90:37:db:20:85:d6:99:ab:77:04:f5:bb:69:
49:d8:45:79:01:e2:64:b5:fb:d5:b8:90:1a:a4:5a:0e:38:d8:
00:db:3d:e8:75:36:c7:26:4a:08:35:2d:e0:b9:90:db:1f:8c:
d1:0a:01:f3:8f:80:d3:5b:78:e0:70:48:79:43:47:1d:f8:5c:
37:f0:5c:1b:36:f6:5c:53:b2:18:8e:cd:a6:a5:f1:3d:32:6e:
96:4b:1b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:43 2024 by rpki-client on console-ams.rpki-client.org