Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/jwHT_2hrLtYge4_ZwA063Ve_oF8.roa
File: jwHT_2hrLtYge4_ZwA063Ve_oF8.roa (raw, json)
Hash identifier: O06oRYWyDDwXp0Ek26sG8913zIf9M+vqUeaqf/sQVPc=
Subject key identifier: 8F:01:D3:FF:68:6B:2E:D6:20:7B:8F:D9:C0:0D:3A:DD:57:BF:A0:5F
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 0185A65AC5BC5879A0499AE0946118961AAE
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/jwHT_2hrLtYge4_ZwA063Ve_oF8.roa
Signing time: Thu 12 Jan 2023 14:20:44 +0000
ROA not before: Thu 12 Jan 2023 14:20:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200223
IP address blocks: 45.131.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a6:5a:c5:bc:58:79:a0:49:9a:e0:94:61:18:96:1a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 12 14:20:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f01d3ff686b2ed6207b8fd9c00d3add57bfa05f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c3:77:54:6b:30:4c:26:cd:33:ab:eb:59:cb:
df:1f:ef:3e:ab:8b:57:bd:04:d3:9b:37:6a:54:83:
07:5d:9a:40:80:03:d4:6f:fd:3c:bf:c2:b8:bf:24:
a0:5c:8c:51:31:90:6c:9c:53:1f:de:3f:91:ef:6f:
4d:73:c7:85:1e:4b:77:f4:51:5a:8e:a6:bb:56:b2:
6f:e3:3b:82:8a:d5:6d:7c:26:76:f2:20:d9:da:e4:
4f:16:d2:ea:80:67:8a:46:08:fe:8a:18:f1:41:8b:
02:9c:b6:4f:52:97:a2:d1:10:44:b5:e4:c5:ec:be:
17:f8:eb:6d:39:19:19:cb:43:5b:aa:20:93:a8:a6:
bc:11:b8:2f:1d:a1:c2:18:69:1f:74:a8:8f:93:90:
ec:12:21:f4:8e:37:b4:91:41:f5:25:9c:ac:ec:27:
56:8c:2d:45:dc:bc:93:8c:d3:a8:6f:a7:3f:f6:25:
a9:36:a2:f4:16:5d:c9:06:16:2c:aa:8b:96:19:f9:
93:16:d3:db:ee:dd:9f:b7:f0:18:02:29:6f:5a:8c:
21:22:96:47:b9:43:17:b9:85:a6:ae:cf:b6:85:18:
14:65:70:73:35:ec:c0:f3:ca:89:8d:57:34:75:22:
ff:e2:f1:ba:51:0e:31:a2:88:4e:84:38:c2:2e:fa:
de:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:01:D3:FF:68:6B:2E:D6:20:7B:8F:D9:C0:0D:3A:DD:57:BF:A0:5F
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/jwHT_2hrLtYge4_ZwA063Ve_oF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.60.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:d0:d0:ca:51:73:7b:aa:5c:84:cb:3b:c6:7a:d7:e2:c5:b4:
90:c1:de:09:f9:f9:c8:6c:d7:dd:9b:21:4e:04:73:5e:40:1a:
38:b2:98:86:52:82:53:48:08:10:f2:a6:69:2c:d3:c4:32:c0:
9e:d9:e0:ad:98:49:7e:02:c0:33:cd:59:fe:c1:84:61:2a:5a:
d9:d5:f7:f7:ed:e8:01:a1:56:70:19:6e:81:05:a8:a7:96:b1:
42:92:88:0b:e3:3d:05:fd:ff:3e:98:cb:d0:92:e5:de:f4:6e:
61:c0:ea:47:76:93:f3:46:1b:85:69:b0:59:f0:3a:66:24:3f:
6d:69:0f:e8:41:80:cf:92:a1:3e:e8:33:32:32:34:ef:4a:7b:
45:0d:00:7f:63:cc:fd:e9:87:49:ae:13:b6:c5:85:f1:95:aa:
a0:96:5a:15:e7:c1:61:ff:ad:bd:11:0e:20:01:b5:b8:16:04:
a8:a8:d7:d2:d0:d6:ef:97:22:8c:03:d5:80:dc:69:de:ef:9f:
61:8d:e0:78:a4:c4:24:d8:21:a3:cd:a6:9b:1c:7f:db:89:2d:
40:08:cc:6d:a7:89:65:0a:3b:42:0a:7f:be:49:cc:fc:04:d0:
c4:0c:47:6a:f3:e7:43:d1:4c:32:e3:9c:eb:1b:c3:9d:da:28:
3b:92:15:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:25 2023 by rpki-client on console-ams.rpki-client.org