Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/3Oszp8fEmRfEgDS1Bp9D_mVeNQY.roa
File: 3Oszp8fEmRfEgDS1Bp9D_mVeNQY.roa (raw, json)
Hash identifier: VayrB6XKAqk+R4WOrxrDVRLIC8spfngTRqp6U8IYBZI=
Subject key identifier: DC:EB:33:A7:C7:C4:99:17:C4:80:34:B5:06:9F:43:FE:65:5E:35:06
Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Certificate serial: 0186FF532FFFAFE9A8E84F10F7D27E7B3649
Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/3Oszp8fEmRfEgDS1Bp9D_mVeNQY.roa
Signing time: Mon 20 Mar 2023 14:01:27 +0000
ROA not before: Mon 20 Mar 2023 14:01:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 45.147.71.0/24 maxlen: 24
45.147.68.0/23 maxlen: 23
45.147.70.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ff:53:2f:ff:af:e9:a8:e8:4f:10:f7:d2:7e:7b:36:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Validity
Not Before: Mar 20 14:01:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dceb33a7c7c49917c48034b5069f43fe655e3506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:99:be:27:31:1b:f7:57:18:7b:32:e2:89:3f:
4f:4e:c5:aa:4e:85:5a:28:2a:5e:24:df:e8:2f:72:
60:0a:23:62:ef:3a:8b:07:15:f1:3f:83:fb:6c:69:
c2:38:c9:80:2d:3f:37:4a:0d:cb:65:34:4d:6e:73:
9e:52:3e:55:8c:f9:8a:7a:8e:5e:e4:1f:c0:45:83:
36:32:17:ed:fe:01:fc:27:bf:4c:74:48:25:20:cc:
5a:10:62:9c:06:54:55:91:5d:14:49:0e:13:3c:45:
e1:8d:53:19:50:6e:ce:67:b3:ee:dd:7d:fb:a7:42:
e6:08:88:57:74:fd:8c:06:d0:02:4e:05:7d:e9:ed:
2b:58:75:1b:b9:c5:c8:77:96:7c:04:7f:24:ad:9f:
b8:f7:8f:ea:5e:94:7c:50:3a:4e:5d:8b:da:60:ed:
b4:87:9b:b9:f2:34:09:ce:56:22:71:0d:cb:5e:e5:
d1:02:d2:92:03:5d:41:ab:75:96:e2:ec:09:f3:a5:
60:63:2a:51:fd:7f:5b:b4:57:90:f7:6c:f7:9c:db:
7b:4f:d4:13:69:cb:e0:ac:78:d1:a9:ec:9d:6c:1b:
d1:98:03:72:4a:e9:1c:6b:8d:10:86:e4:ed:30:3d:
4a:22:55:8f:3e:bd:ad:f7:56:b3:e7:86:e3:6b:37:
5b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EB:33:A7:C7:C4:99:17:C4:80:34:B5:06:9F:43:FE:65:5E:35:06
X509v3 Authority Key Identifier:
keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/3Oszp8fEmRfEgDS1Bp9D_mVeNQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.68.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:b8:9c:3d:0e:9d:a4:08:cd:29:97:11:e2:0d:1f:94:01:28:
58:c3:be:04:16:fa:7a:01:1b:44:fc:09:e4:2f:d5:29:cb:f9:
ff:09:a9:21:37:43:3b:80:de:05:85:d4:41:a3:df:2c:cd:84:
ee:85:0c:ef:ce:64:34:fc:75:44:94:43:87:c3:ed:76:cb:01:
0c:91:b1:cf:6d:ff:bc:3b:72:55:32:fa:dc:7f:ec:5d:6d:95:
3d:0e:95:3e:dc:c7:9c:8e:d1:33:bd:dc:44:ef:06:1a:33:b1:
4a:b9:e1:48:ae:39:0d:bc:ae:a6:0c:63:1a:86:58:18:b5:70:
fb:d4:2d:97:67:d9:ff:0a:60:93:3f:a7:6f:10:ca:df:d2:c5:
00:16:9d:41:4a:b9:40:2b:0c:c8:c3:4f:30:28:05:8e:ae:b8:
9d:f2:14:df:b5:fa:c5:cc:fe:b2:6f:fc:86:5c:d2:db:2e:fc:
73:1a:58:19:1a:d9:83:81:8e:73:97:48:e9:ac:fa:28:0a:a5:
ee:da:8d:7f:4a:c2:17:1d:fb:0b:31:0d:e0:dd:b3:ae:f9:20:
19:67:06:29:82:17:38:a5:93:51:52:1b:ca:f2:54:25:ac:39:
db:bd:a1:a1:ca:fc:e7:e1:3a:88:b5:ac:3d:59:9f:0e:59:cd:
e1:67:a5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 5 17:41:04 2023 by rpki-client on console-ams.rpki-client.org