Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/_OTMIg5GPhtdFROA7ony1Moj7kQ.roa
File: _OTMIg5GPhtdFROA7ony1Moj7kQ.roa (raw, json)
Hash identifier: YqI/cNmHsKQsc6wrLGRmt1SeGpJwpJd30bCP1xmiaCk=
Subject key identifier: FC:E4:CC:22:0E:46:3E:1B:5D:15:13:80:EE:89:F2:D4:CA:23:EE:44
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01874A754CC819771927430DE284C52C0340
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/_OTMIg5GPhtdFROA7ony1Moj7kQ.roa
Signing time: Tue 04 Apr 2023 04:10:14 +0000
ROA not before: Tue 04 Apr 2023 04:10:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.148.255.0/24 maxlen: 24
45.137.197.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4a:75:4c:c8:19:77:19:27:43:0d:e2:84:c5:2c:03:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Apr 4 04:10:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fce4cc220e463e1b5d151380ee89f2d4ca23ee44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:70:e7:85:b7:fd:de:72:85:30:3a:ab:ee:f9:
20:fa:31:08:94:58:8f:a5:e6:d4:d1:39:32:a0:e1:
66:8c:4c:06:d8:08:5d:3e:c6:97:f6:25:02:db:a5:
fc:0d:8c:b7:0c:46:f9:46:10:31:51:64:bd:53:f4:
3b:71:c5:3c:14:4b:75:b7:b4:f1:54:40:44:89:1d:
53:00:02:0e:8c:69:ad:ee:29:d1:00:5e:66:50:da:
1e:56:89:f7:e4:f0:26:72:cb:3e:de:19:d7:36:58:
8f:ed:4a:0e:19:51:f4:cb:6e:2b:ac:8e:1f:33:5e:
39:60:ce:bb:73:3f:85:67:dd:9b:fe:2d:66:85:c7:
0e:cc:3b:f0:d5:a2:5a:5c:ce:bf:ee:4b:5f:c1:ac:
51:a6:13:7b:ae:37:1e:8f:aa:07:c0:11:1a:66:21:
de:0e:d0:7c:be:a9:65:73:1b:21:1d:44:57:ac:d9:
ec:75:95:83:5f:89:9b:01:1d:8e:70:ff:e6:bf:fe:
5b:df:49:2c:71:44:e5:6e:94:98:51:75:26:21:44:
8b:fd:da:9b:d3:53:81:be:c7:44:0f:50:67:3c:62:
fe:6b:12:80:64:70:0b:90:e7:65:0b:22:55:f8:cf:
2b:85:e9:c7:13:2d:cc:96:26:f4:11:40:f9:85:20:
bc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E4:CC:22:0E:46:3E:1B:5D:15:13:80:EE:89:F2:D4:CA:23:EE:44
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/_OTMIg5GPhtdFROA7ony1Moj7kQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.197.0/24
45.148.255.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:cf:4d:86:55:d5:27:ae:44:e5:d8:cb:fc:9f:85:66:6a:11:
46:7d:bf:a8:4f:bf:26:29:ee:44:ad:ed:de:37:09:06:05:dc:
08:43:f7:a8:43:a5:19:93:52:57:26:46:f1:af:1b:68:ec:61:
28:df:dd:2a:56:36:8a:d7:fc:f4:9b:7a:37:c3:af:c4:89:94:
91:a3:9c:9e:30:cd:b0:b3:e3:1a:90:80:39:8d:03:bd:42:5f:
34:5b:ca:39:d9:c6:a3:0e:60:66:e0:3a:98:dd:e0:73:19:65:
ca:1b:cd:ac:6a:01:0d:92:01:5f:a6:c6:2e:84:6e:10:d1:30:
f0:14:75:12:9c:6f:08:9c:d8:86:62:a8:80:b3:e3:50:19:02:
79:5b:07:80:2f:9b:0a:d0:80:0e:d1:58:e6:0f:2f:bf:1b:57:
ff:6c:db:8b:39:22:a6:6e:77:1e:35:17:51:be:b0:a4:73:0b:
44:1b:3b:f7:a0:fa:82:41:67:71:bd:55:75:34:61:e1:ba:77:
7f:1e:7f:e6:8f:77:08:9d:ec:9f:00:7d:4f:9f:c5:0c:d2:a3:
32:84:a6:1b:da:44:2d:c2:c9:1d:70:f1:48:0b:cd:13:6b:e1:
4c:c0:55:b0:c1:c1:5c:9f:22:bd:b7:14:93:c7:ea:f3:07:e9:
75:d1:62:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:32 2023 by rpki-client on console-fra.rpki-client.org