Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/oT0O-aFAOHDkiRma-38crno2J1Y.roa
File: oT0O-aFAOHDkiRma-38crno2J1Y.roa (raw, json)
Hash identifier: n5W3d6/03UX9FDUhiKuYG79rTQFkq7mQ44+tt8ofIuY=
Subject key identifier: A1:3D:0E:F9:A1:40:38:70:E4:89:19:9A:FB:7F:1C:AE:7A:36:27:56
Certificate issuer: /CN=bd19d4535c7e62b921e859e6557b821f278e716a
Certificate serial: 0185CF008ABB504F9B4940924BF2FAE84347
Authority key identifier: BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/oT0O-aFAOHDkiRma-38crno2J1Y.roa
Signing time: Fri 20 Jan 2023 11:46:37 +0000
ROA not before: Fri 20 Jan 2023 11:46:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 45.134.8.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:cf:00:8a:bb:50:4f:9b:49:40:92:4b:f2:fa:e8:43:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd19d4535c7e62b921e859e6557b821f278e716a
Validity
Not Before: Jan 20 11:46:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a13d0ef9a1403870e489199afb7f1cae7a362756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a2:dd:76:77:d8:7f:9d:32:b8:5d:60:2c:d4:
73:14:85:3a:4e:07:cb:e7:22:33:a1:41:30:0d:7d:
0c:09:09:c1:4e:49:a1:04:5f:e1:fc:88:86:64:6a:
6a:a7:12:b4:b4:86:7a:9e:af:5f:9c:8a:8b:5b:5a:
34:bd:7d:c1:59:e4:83:e1:60:f1:d6:c3:4e:42:c5:
43:52:20:8d:72:e0:25:7a:56:a6:7a:22:23:26:f0:
35:f1:c6:0b:d0:4f:53:9e:32:c1:9a:db:0f:01:dc:
31:fa:d5:4b:b3:21:21:5e:3f:05:d9:31:1c:e3:2a:
01:1d:89:d8:58:19:c7:7f:ba:07:4f:21:57:11:68:
4c:e8:75:60:30:36:d9:6b:b5:d8:3f:40:39:28:71:
05:2e:3e:72:f5:80:2a:8a:07:a6:9c:de:62:25:28:
19:07:6f:47:2a:3f:9e:1d:7e:6b:9f:0b:fb:6b:3c:
1e:8b:71:85:e7:1f:9b:0b:a4:b9:4e:54:12:de:29:
80:66:78:fc:58:a4:a2:5c:5a:3d:d4:77:cd:7c:2e:
1d:83:b0:7f:28:84:88:ce:44:c1:55:4d:b6:d5:2c:
22:5b:59:ab:74:9e:78:71:ee:5c:92:1e:4c:b2:c2:
c0:e5:11:9b:8c:90:d1:72:12:e6:24:4e:74:f6:db:
1d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3D:0E:F9:A1:40:38:70:E4:89:19:9A:FB:7F:1C:AE:7A:36:27:56
X509v3 Authority Key Identifier:
keyid:BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/oT0O-aFAOHDkiRma-38crno2J1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.8.0/24
Signature Algorithm: sha256WithRSAEncryption
02:13:b7:99:57:16:15:e2:a6:f3:3a:7d:40:8c:1f:ae:35:05:
6e:ac:4c:45:06:c9:e0:c7:d0:e3:a8:ef:05:7c:04:51:eb:f2:
52:b9:28:01:b5:05:89:86:61:d9:9f:f1:04:f9:40:e6:5a:f8:
66:a2:7d:1d:54:3b:cb:d9:30:31:da:d1:de:43:7f:81:b2:0e:
d2:8f:26:0e:1f:28:4b:4a:6d:3b:ee:73:ee:6a:2b:e9:e7:fc:
0c:d1:cb:60:c9:30:e8:8f:34:b4:3c:b8:b5:fc:42:02:36:01:
c4:49:37:1e:cb:b3:ff:9a:52:c9:b5:49:1b:59:63:3c:ca:ba:
1b:99:24:52:da:4f:9c:c2:b9:ae:22:0d:f0:70:e0:62:90:c1:
52:1d:94:f7:92:73:e1:f2:2c:80:c6:19:76:b7:d5:fc:05:82:
e3:d6:d3:03:48:67:c3:b4:04:bf:09:a7:66:0a:be:b6:f1:2c:
ee:ed:a4:86:df:72:fd:9e:dc:e5:cc:82:00:3b:60:50:76:9b:
bc:28:70:b8:34:11:fa:3d:3e:a2:ae:b3:6c:9b:38:fb:c5:83:
b6:33:7e:5b:68:ab:2c:c2:b0:ed:9a:11:a0:77:b5:75:67:78:
93:f6:2e:4e:41:1d:5c:d8:36:84:e7:a6:37:5d:5b:c7:36:ce:
98:f5:a6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:29 2023 by rpki-client on console-ams.rpki-client.org