Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/Qx60odZphcXFzrV5bYzOLDSwGj8.roa
File: Qx60odZphcXFzrV5bYzOLDSwGj8.roa (raw, json)
Hash identifier: zBcwNiCEeqLJZozlCtgPjUxRaQ0voJWBzdRugFasYEA=
Subject key identifier: 43:1E:B4:A1:D6:69:85:C5:C5:CE:B5:79:6D:8C:CE:2C:34:B0:1A:3F
Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Certificate serial: 018BF304D3D0E0ADDACADBFAA0C06395A2C3
Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/Qx60odZphcXFzrV5bYzOLDSwGj8.roa
Signing time: Tue 21 Nov 2023 17:54:21 +0000
ROA not before: Tue 21 Nov 2023 17:54:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 45.147.71.0/24 maxlen: 24
45.147.68.0/23 maxlen: 23
45.147.70.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f3:04:d3:d0:e0:ad:da:ca:db:fa:a0:c0:63:95:a2:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Validity
Not Before: Nov 21 17:54:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=431eb4a1d66985c5c5ceb5796d8cce2c34b01a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:80:5a:fc:5e:4e:50:23:f4:87:ee:10:67:77:
49:6e:05:b0:8e:b7:d3:d3:55:fb:38:dc:98:1a:24:
86:f3:28:8e:29:d9:f6:63:d7:c6:f2:cd:1e:1a:1b:
7d:73:9f:29:bc:c5:e5:90:b2:53:5b:ca:bf:86:7a:
07:4b:a5:0f:53:f5:fc:c9:ba:aa:db:44:7c:fe:6d:
4e:7b:94:51:8a:41:74:d6:c8:69:c3:2b:9d:a0:ec:
0b:83:81:ba:b2:44:2a:02:1a:50:76:3d:b8:41:35:
f4:14:7d:9e:ae:12:27:da:64:94:41:3f:0f:66:95:
2c:d8:4f:92:1e:28:58:21:ea:54:09:f0:7a:bc:4a:
66:74:00:e3:64:4d:c0:05:48:4f:28:c8:43:ef:d4:
f7:43:d7:ba:6e:f6:9f:f8:d0:f9:08:c0:c4:10:0f:
63:24:da:da:67:0d:4a:0f:b8:b5:64:ff:fa:ae:14:
e0:b3:41:03:5d:e6:6a:02:6f:ab:c9:a0:85:86:75:
d3:55:27:e2:13:88:2d:55:37:c6:03:43:c6:f0:7e:
28:e3:c4:de:73:1f:f8:25:39:1e:56:d4:6c:86:8e:
1c:10:9c:e5:f1:98:a0:73:04:bd:5f:c9:f2:97:81:
f2:25:a3:38:c9:c5:18:e8:79:96:3b:71:b1:b4:fe:
76:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1E:B4:A1:D6:69:85:C5:C5:CE:B5:79:6D:8C:CE:2C:34:B0:1A:3F
X509v3 Authority Key Identifier:
keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/Qx60odZphcXFzrV5bYzOLDSwGj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.68.0/22
Signature Algorithm: sha256WithRSAEncryption
46:a4:00:b2:48:4a:16:93:1e:df:5d:e5:21:26:cb:b2:b5:83:
dd:3c:92:25:91:13:66:43:17:79:3e:f3:f4:5f:8f:74:3e:63:
44:3a:92:39:a6:ee:14:0a:aa:6b:46:e5:6b:a4:e7:e0:a6:c5:
81:ab:d3:0c:64:96:b9:bd:3f:1a:9d:c8:7f:2e:db:33:c5:0a:
a5:ac:a1:f6:6f:9b:78:77:91:db:b3:e2:c1:44:2e:d9:92:b0:
ce:38:84:2b:91:8f:99:47:36:c2:e0:a6:c6:cb:b9:5d:45:c6:
e9:85:3d:f3:09:b8:d6:79:d7:4c:c2:2a:b1:4f:35:9f:66:f5:
54:94:1b:71:bd:b3:55:98:07:76:0e:3d:01:14:c9:09:a8:1d:
47:fa:af:bc:75:80:b1:be:88:e2:f8:c9:d2:dc:74:dc:5a:7e:
e0:0b:ec:45:d1:ec:78:4a:9c:25:26:0b:d3:70:c4:90:cc:5a:
9e:6c:63:1a:93:d0:9f:c3:8f:91:f3:fc:3a:c0:69:36:8e:d0:
a5:ef:47:de:a1:7c:37:fc:52:d2:0c:5c:12:2c:2e:0c:28:49:
9f:ad:4d:6c:1d:7a:ed:b2:e7:e9:cf:2a:6e:a5:6b:4d:fb:46:
a3:fe:49:1c:9f:78:7f:7b:24:c2:fd:71:79:06:5c:d3:64:9b:
6b:0e:18:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:13:43 2024 by rpki-client on console-ams.rpki-client.org