Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/tNCXzE92AbNW_cU4zXgqoZtd5hw.roa
File: tNCXzE92AbNW_cU4zXgqoZtd5hw.roa (raw, json)
Hash identifier: CyEPGX9ETbVzOoBmawRH4zXXH/BKHeWPF10k1tHx9fA=
Subject key identifier: B4:D0:97:CC:4F:76:01:B3:56:FD:C5:38:CD:78:2A:A1:9B:5D:E6:1C
Certificate issuer: /CN=b7c40a747e3ac1acc611a4c403b6007398e7d79f
Certificate serial: 018AF114E03B222585DAE2E46701D7EC7F1D
Authority key identifier: B7:C4:0A:74:7E:3A:C1:AC:C6:11:A4:C4:03:B6:00:73:98:E7:D7:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/tNCXzE92AbNW_cU4zXgqoZtd5hw.roa
Signing time: Mon 02 Oct 2023 15:49:51 +0000
ROA not before: Mon 02 Oct 2023 15:49:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142594
IP address blocks: 45.67.15.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f1:14:e0:3b:22:25:85:da:e2:e4:67:01:d7:ec:7f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7c40a747e3ac1acc611a4c403b6007398e7d79f
Validity
Not Before: Oct 2 15:49:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4d097cc4f7601b356fdc538cd782aa19b5de61c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e7:6a:fd:ae:7b:bc:df:d6:5b:8b:e3:1f:2e:
e2:e0:24:12:df:5a:46:a7:4a:56:73:ed:6e:5f:61:
32:84:31:5c:d2:24:91:b9:d0:8e:89:84:4d:b4:9c:
e0:3d:60:01:d8:db:97:76:01:03:95:42:63:25:ae:
b4:61:87:c1:f1:40:6b:42:49:bc:d4:1f:45:77:66:
19:9d:72:05:b5:86:46:ac:ee:f1:dd:46:8d:45:4b:
c1:19:d6:7f:01:51:5c:37:eb:6d:d3:5f:c9:11:27:
20:88:78:53:fa:a9:61:5d:af:90:db:dc:59:48:27:
59:75:14:0e:12:9c:75:5c:f7:a6:aa:72:63:b4:be:
9a:a4:2e:b5:f1:68:89:cb:f2:b7:21:87:75:6d:98:
58:68:45:6b:65:2a:8c:b0:47:5f:52:e6:da:15:26:
09:38:ad:6c:e1:db:ba:b6:4a:ca:fa:94:46:da:b6:
24:5c:d5:94:99:7f:c5:26:7c:e1:9c:2f:83:25:35:
c8:27:54:66:98:c4:f1:50:93:24:e8:bd:65:9c:7f:
19:32:50:eb:c3:33:d5:f8:f6:2f:4e:6d:2b:53:ea:
20:40:10:2c:af:ee:5a:b0:fb:1f:de:e1:5f:53:f9:
fb:ea:99:af:27:0d:98:ca:bb:ec:45:e3:b0:ef:25:
5f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D0:97:CC:4F:76:01:B3:56:FD:C5:38:CD:78:2A:A1:9B:5D:E6:1C
X509v3 Authority Key Identifier:
keyid:B7:C4:0A:74:7E:3A:C1:AC:C6:11:A4:C4:03:B6:00:73:98:E7:D7:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/tNCXzE92AbNW_cU4zXgqoZtd5hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.15.0/24
Signature Algorithm: sha256WithRSAEncryption
53:11:1f:11:d2:fe:72:9d:c6:b3:5a:82:0e:ba:b4:09:2b:1e:
de:42:c3:14:a4:cd:54:ec:16:f2:39:6c:6d:66:01:a4:1c:8a:
5e:2a:b6:50:e9:61:4e:e2:63:03:7b:85:18:b0:df:2e:f8:66:
39:23:6e:0f:e1:d7:2f:29:98:0b:51:da:bc:7c:bc:1d:fb:a2:
24:55:b5:d8:6c:79:2c:9e:5d:6b:fa:0c:6f:a5:d5:83:d6:81:
01:fb:8f:ce:20:ca:65:56:6b:48:d8:52:38:c4:64:e5:e9:18:
c6:6f:d9:4a:1a:fc:41:96:5d:0c:11:44:9f:49:6e:ed:67:49:
3c:d7:86:79:ff:8c:a2:2e:02:29:0d:13:19:e3:6c:46:8e:02:
11:a2:26:43:e7:05:60:80:75:cd:40:55:32:a2:b2:48:df:94:
e0:a5:a8:0f:bd:e8:1e:cb:63:34:f3:d0:9d:15:fe:59:49:c1:
8a:c7:7a:77:b8:f1:0b:ac:9a:f6:9d:1d:33:21:e6:92:16:19:
03:85:2f:33:75:d9:b3:c4:2b:a4:79:d5:49:11:93:34:9e:81:
21:8c:ee:34:eb:5e:55:3d:ec:78:c2:4a:d4:bb:3c:ad:53:7e:
34:81:0d:45:82:34:4f:81:bd:e1:5b:f2:b0:37:e5:15:12:1a:
1e:98:96:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:18 2024 by rpki-client on console-fra.rpki-client.org