Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/14LLkELrk92m-afZm7c-DB6puB0.roa
File: 14LLkELrk92m-afZm7c-DB6puB0.roa (raw, json)
Hash identifier: 08s9nrxiWveFu4TX/v4G8bwIw86pOv5F0Zb5TMLORNU=
Subject key identifier: D7:82:CB:90:42:EB:93:DD:A6:F9:A7:D9:9B:B7:3E:0C:1E:A9:B8:1D
Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Certificate serial: 0188E77E06984C5BA6A3853BE0CF0EDC76DE
Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/14LLkELrk92m-afZm7c-DB6puB0.roa
Signing time: Fri 23 Jun 2023 09:02:56 +0000
ROA not before: Fri 23 Jun 2023 09:02:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 45.135.136.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e7:7e:06:98:4c:5b:a6:a3:85:3b:e0:cf:0e:dc:76:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Validity
Not Before: Jun 23 09:02:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d782cb9042eb93dda6f9a7d99bb73e0c1ea9b81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:de:a1:aa:f1:95:a0:f2:59:d4:48:18:1d:8f:
8a:4d:05:58:50:3a:6a:eb:27:4c:79:de:0c:c0:35:
e8:08:e1:19:81:40:22:e3:26:05:fa:70:05:e9:20:
36:29:c0:a0:f6:4b:13:38:e3:55:00:83:1f:12:11:
9b:bc:e4:f8:cf:ce:b7:da:b7:9c:8a:06:61:2d:0a:
e8:0e:26:81:8a:20:3d:ed:4e:cd:0b:16:2c:23:ce:
51:73:9e:17:4e:52:6d:d4:49:8f:e5:6d:30:07:70:
90:19:21:b5:0c:2c:5b:f6:a6:07:64:bb:4b:e8:8b:
43:62:76:1b:b8:cf:53:2a:50:5f:de:90:85:72:ef:
a6:0b:e0:09:ad:87:6e:a2:71:5c:2f:67:43:a3:a8:
95:62:e3:b9:24:21:98:96:ad:a6:fe:3d:98:c4:34:
92:38:f9:fd:63:c7:51:61:20:66:3a:6f:38:c1:a1:
34:8c:8b:f9:c9:c0:6f:14:84:92:d1:f7:3d:a1:85:
c7:71:ac:5a:b1:d4:71:64:98:55:72:87:52:85:b0:
ca:40:18:74:92:08:23:f6:e8:13:23:6c:02:47:96:
6d:a5:36:a0:2b:ef:e0:c3:1f:b2:64:69:31:6b:9f:
2b:dc:8a:70:a0:9c:4f:ce:95:0d:94:6f:c2:42:fc:
cb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:82:CB:90:42:EB:93:DD:A6:F9:A7:D9:9B:B7:3E:0C:1E:A9:B8:1D
X509v3 Authority Key Identifier:
keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/14LLkELrk92m-afZm7c-DB6puB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.136.0/24
Signature Algorithm: sha256WithRSAEncryption
19:e0:b0:f0:74:3c:f5:02:0a:0d:f9:84:f6:e9:6b:2d:f9:d3:
cb:ad:6a:d6:b5:ab:1d:a7:4c:57:d4:c7:ef:de:d5:a7:58:6e:
81:92:2f:bb:58:e7:84:d8:af:9a:08:50:83:44:ee:33:07:3e:
aa:ae:8c:f6:3e:a5:c7:6c:0f:9a:db:43:cb:02:0f:5d:47:d6:
41:fb:0c:48:8a:3d:ce:8f:73:17:b8:21:fc:9d:f6:29:0f:bd:
3c:61:e8:6f:15:b7:9b:bf:3a:8f:03:2b:99:87:81:0f:bd:7e:
f0:2a:0e:f0:b6:9a:f9:56:14:b7:79:11:4d:a6:c3:eb:02:83:
69:c1:af:f4:f4:be:de:56:2f:6d:63:6f:ef:4f:06:29:59:d7:
6c:7f:a7:3c:15:57:e4:ed:56:51:f9:3c:90:3e:61:81:0d:3e:
af:bb:ac:b8:5c:6d:72:3c:d3:05:ff:af:7b:30:90:28:f0:79:
37:6d:ea:17:6a:61:aa:c9:30:fa:a9:9f:06:b2:26:87:0d:e8:
70:df:18:c8:fb:5a:59:b7:12:9e:61:92:10:b0:ba:53:20:94:
2b:08:c0:57:e1:5e:b1:9f:39:1c:24:fd:97:9f:64:0e:10:04:
c1:ea:ca:dc:a7:03:61:03:2e:71:87:73:bc:a4:22:95:37:83:
5a:e5:65:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:50 2023 by rpki-client on console-ams.rpki-client.org