Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/8C9XHW2NlJASAYJC11fkKXAN-wQ.roa
File: 8C9XHW2NlJASAYJC11fkKXAN-wQ.roa (raw, json)
Hash identifier: Q07Ijbwi4stNQsLxLrsYAnPZ/dsx9RqwQKIjr9QhlpQ=
Subject key identifier: F0:2F:57:1D:6D:8D:94:90:12:01:82:42:D7:57:E4:29:70:0D:FB:04
Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Certificate serial: 018BF304D338A9D1145326A854E8394C3E5A
Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/8C9XHW2NlJASAYJC11fkKXAN-wQ.roa
Signing time: Tue 21 Nov 2023 17:54:21 +0000
ROA not before: Tue 21 Nov 2023 17:54:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 45.135.136.0/24 maxlen: 24
5.182.120.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f3:04:d3:38:a9:d1:14:53:26:a8:54:e8:39:4c:3e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Validity
Not Before: Nov 21 17:54:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f02f571d6d8d949012018242d757e429700dfb04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:02:0a:6e:42:17:6a:bb:7e:d7:89:ec:4d:72:
f2:c7:ee:69:fc:db:ee:28:67:57:77:ee:c5:2d:47:
bb:b3:73:db:06:6b:55:d0:40:f7:cd:df:00:51:d5:
27:72:71:42:24:3e:c9:17:9a:a5:2f:e2:0f:7e:61:
c9:78:28:53:52:54:c3:dc:f4:ac:32:c3:f6:df:3c:
41:ed:89:34:37:8e:7a:20:9a:f1:26:25:84:56:a2:
43:fd:da:f7:8f:2a:3e:0f:e8:db:4f:38:c2:13:3b:
9c:04:ef:89:d7:ac:dd:1f:ce:97:c8:16:49:36:6e:
04:1e:71:2a:21:6a:97:b3:6c:3c:ce:ad:e9:ce:73:
2a:32:81:e6:75:7a:af:ca:d1:8d:2c:43:5c:80:95:
56:c7:ba:10:98:e4:3e:68:16:41:90:d4:cf:54:df:
f2:3e:90:e8:16:a4:29:70:30:08:c2:b8:31:c1:15:
ad:61:91:09:bd:13:69:86:b4:33:61:3e:0c:97:1a:
06:32:d4:e5:be:2d:2a:cd:b4:34:98:84:5d:62:80:
c3:92:02:ce:a6:0c:f2:94:b7:09:87:5a:69:5a:34:
9e:d2:fa:f6:6d:da:61:2b:b5:87:cc:8e:42:e4:6d:
ba:57:5b:4f:49:cb:52:7c:17:a2:21:2c:21:dd:ab:
99:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2F:57:1D:6D:8D:94:90:12:01:82:42:D7:57:E4:29:70:0D:FB:04
X509v3 Authority Key Identifier:
keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/8C9XHW2NlJASAYJC11fkKXAN-wQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.120.0/22
45.135.136.0/24
Signature Algorithm: sha256WithRSAEncryption
71:18:13:40:52:3f:38:c4:41:dc:af:e4:98:ff:28:74:0c:1f:
e9:e4:ff:07:6f:bb:98:9c:20:d5:4f:9b:19:11:c7:aa:60:a8:
d4:02:bb:eb:45:aa:61:4f:23:fb:06:aa:68:2b:80:0a:0d:1a:
0a:df:c2:b2:82:cd:86:fd:fd:78:a7:54:df:d3:9a:dd:b7:1c:
f2:b2:bc:a5:a5:f7:f0:22:be:c2:14:4c:74:90:ca:eb:49:3b:
b1:72:0e:da:c7:98:da:fc:ce:c2:e3:21:84:40:f2:7b:7e:7a:
ec:92:5f:df:7a:7d:54:98:3f:2e:d7:cc:7f:2e:a5:75:f0:ea:
95:00:dc:38:d9:87:ca:39:6a:28:ea:41:4b:d2:78:bc:ca:14:
bf:86:cd:e0:44:d7:fd:e4:61:44:6a:37:87:30:04:d9:78:4f:
8e:6c:44:d5:29:6d:92:bd:c1:68:d4:5f:1c:9c:4a:f1:1a:81:
ae:00:80:e6:39:ac:f4:fa:99:04:80:26:c7:7f:d6:9e:0d:28:
7a:2d:28:27:a7:9c:e3:cd:d0:c5:a5:c6:fb:a6:73:0c:28:33:
d4:fb:a4:73:de:af:bb:6d:81:ae:94:65:7c:2b:99:b6:28:f7:
46:d9:80:3b:fe:db:46:a9:88:4d:f0:d3:06:3b:4c:e3:87:97:
59:3d:3e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:13:43 2024 by rpki-client on console-ams.rpki-client.org