Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/sipwiTT3HlT1jHEtpYHEIxh8r1k.roa
File: sipwiTT3HlT1jHEtpYHEIxh8r1k.roa (raw, json)
Hash identifier: eBbnF7gK6ueYReRhSS1tLim4iovtCTWZ08wmbPtmpx0=
Subject key identifier: B2:2A:70:89:34:F7:1E:54:F5:8C:71:2D:A5:81:C4:23:18:7C:AF:59
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018B4944522F88DD3AB0E8DC603A73C46022
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/sipwiTT3HlT1jHEtpYHEIxh8r1k.roa
Signing time: Thu 19 Oct 2023 18:48:16 +0000
ROA not before: Thu 19 Oct 2023 18:48:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 45.144.215.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:49:44:52:2f:88:dd:3a:b0:e8:dc:60:3a:73:c4:60:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 19 18:48:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b22a708934f71e54f58c712da581c423187caf59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:92:66:07:4e:7b:8d:d3:2d:2b:bd:71:51:fa:
f7:43:40:2a:2b:01:9d:e6:26:11:17:2f:aa:3c:b7:
1f:bc:14:97:ce:9b:ad:b2:7b:b7:b1:c4:7e:d4:76:
dc:e0:3a:7d:fc:03:d0:a7:e5:64:2d:ff:b7:47:9f:
ba:fc:a3:d7:44:e4:40:11:b8:bd:63:97:68:93:52:
b5:7c:a7:49:a2:84:e2:1c:62:e5:cd:ef:13:b6:60:
0a:48:cb:8b:af:da:55:42:87:20:42:6c:75:09:76:
5b:29:05:65:6d:21:76:da:08:15:00:3e:57:44:6e:
49:a8:bc:d3:98:44:07:f4:8a:b6:77:f9:39:ee:6e:
ee:fb:99:7d:e3:ff:fd:c0:3a:21:71:5f:9a:ac:3f:
cf:fd:1d:a3:f3:87:1a:60:10:48:3e:b6:70:95:61:
1c:a6:ed:e8:15:04:db:82:46:d0:45:17:22:ef:a6:
cd:36:17:ff:66:e2:d3:49:ec:77:74:27:ad:58:b6:
26:e7:db:7e:97:66:1d:0d:85:a0:dc:85:9c:6a:72:
83:d7:77:05:8d:3b:fd:b5:3c:2d:7c:40:41:ba:10:
1b:6a:8f:e9:99:dc:c8:26:79:f1:2a:9d:4c:83:0b:
6a:e0:06:87:72:5f:4a:3e:be:44:d5:17:de:bf:d2:
4d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2A:70:89:34:F7:1E:54:F5:8C:71:2D:A5:81:C4:23:18:7C:AF:59
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/sipwiTT3HlT1jHEtpYHEIxh8r1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.215.0/24
Signature Algorithm: sha256WithRSAEncryption
89:6c:33:19:27:c0:ed:25:5e:4e:e8:d2:d4:d3:f4:5b:63:7c:
73:5f:5e:fe:61:18:45:d9:00:de:73:97:4e:18:e9:7b:7e:4c:
0a:c8:a3:b7:e4:67:97:65:32:df:00:0c:df:86:c0:89:0e:b8:
d0:a8:77:d1:50:e2:6a:f7:ca:e4:9e:00:fc:bb:55:3d:0a:a9:
f2:a8:4f:3a:22:7a:f9:75:ad:9a:d8:34:fa:73:6e:70:74:72:
27:46:7e:b3:5d:63:1b:4d:b8:2e:59:13:79:41:ec:1e:73:f2:
e0:f4:cd:5b:30:f5:83:59:33:ca:61:ba:7c:2c:94:84:63:49:
28:10:ab:36:9c:06:0e:92:cf:9a:ed:f8:5e:af:85:53:94:a6:
b5:82:76:ec:d0:19:37:c6:8e:1e:c8:e5:92:95:e1:00:65:52:
dc:87:9b:85:16:4c:e1:47:6e:a7:c4:83:88:7e:82:b7:00:e5:
77:a2:34:f3:e7:76:9c:b7:83:1c:46:d7:d9:da:b1:5d:4c:dc:
99:61:c2:ab:65:72:1d:0e:88:28:51:fd:18:2d:d5:28:07:c9:
2f:a6:14:5e:46:fe:c4:9a:c9:77:f0:80:04:2a:a6:36:43:dd:
1f:35:fc:7e:ce:4f:26:be:ff:b8:ab:55:25:c8:e1:5a:c8:af:
32:22:64:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 18 13:43:50 2023 by rpki-client on console-ams.rpki-client.org