Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/fKFVvYE-kwJ2OrTxkfzYRtf2CPU.roa
File: fKFVvYE-kwJ2OrTxkfzYRtf2CPU.roa (raw, json)
Hash identifier: ns/U0hOigMXKWH4eUE809+9qxqb4V+ZUUS0w99vH75I=
Subject key identifier: 7C:A1:55:BD:81:3E:93:02:76:3A:B4:F1:91:FC:D8:46:D7:F6:08:F5
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 0185729EC9F57972A00960A207C79D82E204
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/fKFVvYE-kwJ2OrTxkfzYRtf2CPU.roa
Signing time: Mon 02 Jan 2023 13:14:47 +0000
ROA not before: Mon 02 Jan 2023 13:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 45.143.99.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:c9:f5:79:72:a0:09:60:a2:07:c7:9d:82:e2:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Jan 2 13:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ca155bd813e9302763ab4f191fcd846d7f608f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:13:e4:af:c7:d5:3e:f3:99:f1:e7:5b:ab:76:
b6:03:c7:ca:e0:b0:80:1e:56:47:da:9f:58:af:26:
10:f7:60:a2:f3:3b:85:6f:93:37:7a:97:b9:4e:82:
b2:51:9c:27:ed:e6:91:7f:9e:37:93:eb:1a:69:06:
b9:01:70:0c:89:9e:96:10:95:e5:77:91:67:a6:34:
a4:3c:7d:3f:22:c3:9a:d3:44:8f:3a:3f:8c:22:15:
59:2c:69:22:47:43:ba:6b:3f:d5:6b:96:50:f1:cb:
c9:72:bf:0e:3a:42:e5:24:d0:1b:6a:ae:bc:93:bf:
2b:2f:6e:60:a6:65:5b:54:ec:ac:03:c4:08:cb:5c:
af:f0:36:9e:e3:9f:6e:1d:ba:9e:b6:76:09:43:06:
76:a2:49:34:dd:ab:be:e4:d1:84:e4:5b:9e:43:44:
ed:e1:08:c2:39:bb:8b:5c:2c:1c:2d:a5:05:e5:03:
70:0e:2b:e6:33:28:a4:76:cd:e9:c5:34:6a:29:6d:
01:c4:27:52:11:7c:94:af:e4:87:b8:93:20:24:49:
c3:e7:47:ba:5c:69:0a:fe:ca:a3:c8:c6:e3:19:43:
90:5c:35:b5:29:3a:5a:94:91:b2:49:b0:a3:d3:0b:
5d:fe:8e:40:7c:f0:f9:ea:69:08:a5:26:13:56:9e:
67:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A1:55:BD:81:3E:93:02:76:3A:B4:F1:91:FC:D8:46:D7:F6:08:F5
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/fKFVvYE-kwJ2OrTxkfzYRtf2CPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.99.0/24
Signature Algorithm: sha256WithRSAEncryption
be:9c:22:c1:b4:ab:d2:c6:91:e7:38:0e:9c:e7:d5:a2:9e:70:
1c:2b:e2:17:2a:81:d1:e9:3a:02:55:ea:4b:89:e7:8c:a5:03:
00:69:ad:fb:20:2f:03:73:73:df:e3:78:ab:c5:00:a6:43:85:
ac:2d:9f:52:a4:9c:61:18:73:8d:01:1c:ef:94:06:65:ed:ac:
81:93:5d:ba:9f:c4:a8:7a:1e:b7:3e:de:aa:d7:27:80:61:cc:
a8:fe:fc:71:a2:49:b5:75:12:81:f8:31:29:75:39:1c:2b:86:
74:54:59:0f:90:c5:eb:79:74:5d:37:29:c7:e5:1a:7c:61:53:
94:ba:c3:56:a8:8c:11:bf:59:c3:43:b6:58:8b:32:73:fe:65:
0d:f3:13:9b:b5:16:c7:33:7b:5b:e0:87:39:9d:2e:98:35:ad:
ef:63:b2:8b:37:7d:42:e2:b6:7a:83:59:f8:c9:75:72:31:e0:
24:b9:32:d3:43:d9:1c:b4:90:14:32:bd:0f:ff:19:42:d1:56:
cf:32:90:3d:d1:fb:55:07:eb:22:d1:b9:d1:2c:ff:e1:13:2a:
09:09:8b:fb:49:42:f2:ee:55:2e:7e:29:20:af:a1:2b:cc:0a:
92:e1:e2:1e:54:42:4f:f2:78:6a:c2:bd:56:85:d1:bf:c4:4b:
19:93:10:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:13:42 2024 by rpki-client on console-ams.rpki-client.org