Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/E76N_Lo5JKo5FThjh9oWKm7Mlio.roa
File: E76N_Lo5JKo5FThjh9oWKm7Mlio.roa (raw, json)
Hash identifier: dBKqO53TBlQO8j4DkUW635ql7uyXngRnGfSIjt/XgVU=
Subject key identifier: 13:BE:8D:FC:BA:39:24:AA:39:15:38:63:87:DA:16:2A:6E:CC:96:2A
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 0185729ECA7CB8866127EAD1DBAA2E4C6E66
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/E76N_Lo5JKo5FThjh9oWKm7Mlio.roa
Signing time: Mon 02 Jan 2023 13:14:47 +0000
ROA not before: Mon 02 Jan 2023 13:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208198
IP address blocks: 45.10.149.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:ca:7c:b8:86:61:27:ea:d1:db:aa:2e:4c:6e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Jan 2 13:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13be8dfcba3924aa3915386387da162a6ecc962a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:57:fb:19:c9:91:d3:64:73:92:75:ec:f3:e9:
41:0c:9c:bb:9d:8f:2a:94:00:84:58:39:c7:fe:6f:
c6:24:1f:1e:d5:83:97:3d:58:74:2c:90:d6:c1:3c:
0a:53:1d:c0:97:94:39:eb:5f:05:fb:a0:ae:6a:f0:
f9:18:4c:23:00:14:d1:e0:f3:17:ff:1f:78:75:9d:
d7:c0:25:14:00:22:3b:33:13:7f:1d:e5:02:3b:d2:
eb:96:bb:48:fe:8b:5b:b2:ec:53:6c:04:d5:6f:56:
71:a7:63:83:6e:2d:63:5f:11:b7:00:b6:25:ce:78:
d4:ae:28:99:f6:56:3e:b9:40:5a:79:d6:02:a0:5d:
2f:ed:e8:87:19:9d:7a:b0:3d:c8:3c:9a:27:25:6c:
3e:0c:63:f8:d1:35:65:ae:ff:36:02:85:2d:74:7b:
fb:c3:70:91:b4:e2:3d:2c:f3:b6:bc:58:74:23:59:
14:29:77:d2:1e:2f:47:4f:5c:c0:2c:e0:96:37:79:
1b:e0:4a:db:f3:e9:92:f8:89:9b:bd:af:f1:f1:5b:
f6:84:40:e1:57:46:f2:70:ee:50:3f:ae:45:e4:9d:
60:ce:fb:1e:4b:38:11:9b:1b:35:a6:6b:86:bd:53:
d5:e9:01:d8:f9:b1:54:5e:20:af:d0:0b:c7:1d:10:
1b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BE:8D:FC:BA:39:24:AA:39:15:38:63:87:DA:16:2A:6E:CC:96:2A
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/E76N_Lo5JKo5FThjh9oWKm7Mlio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.149.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:a9:11:5d:5b:1f:44:ec:50:1d:10:eb:c8:05:08:35:e0:05:
16:d5:6d:b2:96:ad:70:98:0b:c0:c0:b9:fe:a0:3d:47:a0:3f:
ba:10:0e:c6:61:d2:23:f7:27:e7:36:8c:56:d0:e1:20:f8:61:
df:6b:8b:c4:29:20:4c:14:f8:4d:7a:45:aa:16:7e:11:76:ee:
da:e9:65:78:e1:de:ec:cf:96:f9:7d:d0:44:41:fe:13:b7:34:
47:76:b9:23:47:5a:46:bf:f0:27:97:3f:18:4e:b8:69:8b:e6:
77:95:13:af:05:d8:13:bc:23:74:10:5e:8c:11:ca:5e:30:8d:
f0:35:53:e6:58:23:44:ba:d8:00:64:1d:4c:81:c9:0f:34:15:
87:90:32:1d:bc:7d:7c:f3:9c:b3:28:9a:f4:52:a9:01:9b:da:
f5:e4:f6:ca:3f:29:72:42:0c:0b:b0:de:6f:0e:7a:b4:30:7f:
87:b7:b8:1f:e0:b6:19:b9:60:9d:51:2b:fe:b8:f9:9d:f2:ab:
5a:8c:5e:2c:97:f8:19:19:71:eb:dc:bf:c2:0c:c4:7a:7e:5d:
99:e7:ce:2d:83:cb:cf:bf:e1:20:b7:13:ae:cd:3f:21:1c:da:
74:69:82:28:a6:c9:0b:ac:2e:f4:94:4d:72:30:3d:6e:c2:1b:
7e:e3:3f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:20 2024 by rpki-client on console-fra.rpki-client.org