Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/3nIKJfRduLdv57XsIC5PEasGjDw.roa
File: 3nIKJfRduLdv57XsIC5PEasGjDw.roa (raw, json)
Hash identifier: U/ZYn3yqEDO2cXcdrqFS7dtQBCpM+6J1uVkDy+tJ/b4=
Subject key identifier: DE:72:0A:25:F4:5D:B8:B7:6F:E7:B5:EC:20:2E:4F:11:AB:06:8C:3C
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018571E894634C46DDDF194C3FE24874591A
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/3nIKJfRduLdv57XsIC5PEasGjDw.roa
Signing time: Mon 02 Jan 2023 09:55:45 +0000
ROA not before: Mon 02 Jan 2023 09:55:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211373
IP address blocks: 45.144.215.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:e8:94:63:4c:46:dd:df:19:4c:3f:e2:48:74:59:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 2 09:55:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de720a25f45db8b76fe7b5ec202e4f11ab068c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f0:71:ed:75:26:f9:56:f3:e7:e0:1b:b8:5f:
ff:46:5b:13:3c:06:dd:b6:07:34:66:22:00:31:41:
41:c6:6a:5d:e9:81:05:98:0c:46:a1:1b:52:67:3b:
16:fd:80:d4:79:f6:39:d6:a9:b3:8d:8f:35:3f:77:
ba:2a:49:25:17:1b:a9:cd:f2:c1:8e:a2:6b:f8:48:
97:cc:ab:b4:e4:9a:f4:54:de:3a:9a:c2:b3:d8:dc:
3e:f6:c0:b1:6a:92:4e:16:ff:f6:eb:77:9f:a0:c0:
cf:bc:51:61:e8:1c:9c:3a:8b:c2:2c:17:43:df:ee:
3d:5b:9a:83:cd:6e:48:cb:13:85:15:6b:84:4e:1c:
07:c1:0c:ac:09:96:36:b9:59:8e:1f:85:a7:c0:c7:
b0:2f:be:57:91:1b:a7:e1:89:7f:02:8c:3b:b2:5f:
af:8d:a8:e5:8e:81:8c:e3:61:f6:bd:0f:11:4b:19:
aa:29:6b:95:c6:45:83:9c:1b:d7:f7:f4:75:10:2e:
c4:08:dc:9b:b8:52:dd:8f:25:f6:0b:1e:e9:4f:d1:
8e:80:ff:d3:ae:8b:47:a1:77:fe:50:00:fc:47:d3:
8f:2c:89:f1:d1:cc:38:3a:57:1d:00:84:8f:7b:f0:
52:8e:bd:46:98:5f:07:90:9d:5a:25:0a:fa:0f:6c:
2f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:72:0A:25:F4:5D:B8:B7:6F:E7:B5:EC:20:2E:4F:11:AB:06:8C:3C
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/3nIKJfRduLdv57XsIC5PEasGjDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.215.0/24
Signature Algorithm: sha256WithRSAEncryption
66:e4:d7:85:bc:32:c0:08:f5:36:03:6b:c2:4c:d5:a9:93:e2:
2c:1b:8a:04:67:f1:fb:64:12:6f:37:c3:87:76:2a:bb:95:90:
9f:71:da:29:32:82:50:cf:9c:0a:07:30:ac:58:dc:0b:37:a4:
c3:b6:0f:3f:13:29:bb:3b:15:e9:ce:f1:02:56:52:ff:19:43:
d5:44:e8:b6:33:e9:d6:e1:80:73:9f:92:9f:84:aa:a0:a8:1a:
fa:34:51:63:f8:cb:66:6d:04:c5:e2:2f:a5:0d:6d:66:81:25:
c5:c6:1c:0c:33:af:e3:61:77:4e:a2:08:78:ba:b1:dc:cf:8a:
27:ef:65:e1:15:16:7c:75:ed:8d:07:91:91:d8:5b:32:e5:1e:
13:4e:51:5d:b8:7b:eb:40:0f:08:b7:b7:4f:68:00:3e:ae:ec:
61:5b:a6:78:00:a1:8f:37:69:0b:fa:ac:34:d6:59:b9:df:6a:
02:44:eb:10:27:c6:ee:dd:65:02:58:94:34:00:15:4f:3b:f6:
34:e8:3e:17:92:18:a4:e3:9d:5c:47:73:52:fa:e6:5c:95:ad:
79:3e:df:d2:c8:cb:23:de:b4:8b:9b:cd:5f:e1:7f:3a:b5:3e:
ee:dd:7d:0d:d8:5e:1a:9c:e7:e6:0e:49:51:14:be:62:7d:80:
6e:cd:ce:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 2 05:15:55 2023 by rpki-client on console-ams.rpki-client.org