Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/NTtzAQQPJUH2IzChnwcTpj-ifxE.roa
File: NTtzAQQPJUH2IzChnwcTpj-ifxE.roa (raw, json)
Hash identifier: ugXdOqt8Phuh7ddJLZskQZGl8L+mEoeIbj9lsHKZ3/U=
Subject key identifier: 35:3B:73:01:04:0F:25:41:F6:23:30:A1:9F:07:13:A6:3F:A2:7F:11
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01857390181F04053221E67F620099997769
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/NTtzAQQPJUH2IzChnwcTpj-ifxE.roa
Signing time: Mon 02 Jan 2023 17:38:21 +0000
ROA not before: Mon 02 Jan 2023 17:38:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213318
IP address blocks: 45.81.20.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:90:18:1f:04:05:32:21:e6:7f:62:00:99:99:77:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 17:38:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=353b7301040f2541f62330a19f0713a63fa27f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:91:04:96:48:07:01:ae:5d:b1:35:44:41:96:
5f:2c:b4:df:c0:28:17:f2:cc:37:a9:bb:70:2e:a4:
b1:6d:3d:45:aa:bb:02:f2:ef:c2:4f:f2:54:fc:18:
64:6f:9e:1d:15:f6:92:12:df:6d:88:26:ec:07:fd:
a1:e6:5e:3e:67:58:e9:81:d7:34:15:26:a5:cd:1e:
05:f9:95:ea:23:d8:b4:b5:44:f6:76:6e:38:95:95:
e6:d7:d8:46:1f:96:e5:44:1f:ed:7b:fe:78:ba:f7:
41:25:9b:df:df:19:22:a9:2b:8b:23:78:b8:28:15:
a1:8c:8d:3f:12:d6:5c:e6:14:16:10:4c:8c:9a:54:
aa:a9:f0:fc:c2:85:9f:0b:e1:f7:b4:4a:dd:c1:db:
6f:06:c6:0f:91:e2:14:d2:63:01:72:2b:2f:3f:68:
6d:1c:9d:3e:87:67:be:c8:84:82:50:f7:da:18:aa:
0e:4d:ca:05:02:c7:2d:43:cf:31:39:61:7f:06:4d:
98:98:80:0a:a6:fb:c5:4c:2c:b2:f9:f5:55:e1:77:
80:c7:cb:9c:d9:a4:72:e8:e2:39:94:3b:e3:71:39:
d6:dc:1d:f0:7a:b3:cf:fa:c5:28:f6:40:71:c1:82:
99:9a:76:9a:3f:15:4e:1c:3e:6f:34:03:8a:47:3c:
3e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3B:73:01:04:0F:25:41:F6:23:30:A1:9F:07:13:A6:3F:A2:7F:11
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/NTtzAQQPJUH2IzChnwcTpj-ifxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.20.0/24
Signature Algorithm: sha256WithRSAEncryption
09:26:15:e0:22:a2:8b:f1:33:a7:cb:92:0b:37:df:7c:c8:c4:
13:9a:70:1f:a3:db:72:45:13:76:5d:9b:cc:ef:98:1d:21:4a:
fb:77:cf:c6:74:69:6e:a5:15:68:bb:d6:54:ba:36:74:74:8b:
d4:05:71:89:bb:fd:c1:51:b0:e5:67:f6:56:6d:47:94:cd:07:
39:f8:e5:99:ec:d1:63:74:7f:59:ef:9a:23:11:05:d5:49:c8:
8d:c6:cf:42:36:99:c6:a3:12:3d:94:63:af:42:88:16:0b:a8:
90:6b:09:ff:f8:bc:6a:d6:ce:17:28:13:a4:2a:bb:77:6e:b8:
f1:29:a3:9f:e9:89:5d:b2:16:1e:3f:37:3d:ff:ff:d8:d1:e9:
81:e8:a1:9d:61:eb:fe:ab:cf:8e:56:cf:4f:e2:de:dd:cc:c3:
1a:28:4d:3d:f3:7b:f8:f8:44:9d:13:d8:19:eb:cc:06:9b:8a:
78:bd:68:14:43:94:70:2a:e9:cc:35:e5:84:93:8d:89:90:f6:
38:06:d2:2c:47:c7:53:eb:6c:52:b4:14:5c:0b:82:27:4d:86:
89:d5:ae:02:8a:55:66:7a:a0:f9:dc:7b:df:f3:e4:4c:df:94:
dd:dd:db:5f:f9:a6:53:a1:6f:2c:e9:a1:8c:6d:04:b6:67:2a:
aa:06:58:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 15 11:44:52 2023 by rpki-client on console-ams.rpki-client.org