Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/Te8lYBncCNDLLApYMC2X21YCFSg.roa
File: Te8lYBncCNDLLApYMC2X21YCFSg.roa (raw, json)
Hash identifier: 2EU+q8AMB+Jzt7bfQD6vMfoS1s0aT79hqXFli28obqQ=
Subject key identifier: 4D:EF:25:60:19:DC:08:D0:CB:2C:0A:58:30:2D:97:DB:56:02:15:28
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 01857246C88C6017D3DAD69CCFEE508CB721
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/Te8lYBncCNDLLApYMC2X21YCFSg.roa
Signing time: Mon 02 Jan 2023 11:38:39 +0000
ROA not before: Mon 02 Jan 2023 11:38:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212864
IP address blocks: 45.140.208.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:c8:8c:60:17:d3:da:d6:9c:cf:ee:50:8c:b7:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: Jan 2 11:38:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4def256019dc08d0cb2c0a58302d97db56021528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:58:fd:ec:57:38:fd:02:3b:88:0c:a0:5e:d4:
10:77:d3:1a:14:38:00:ef:20:79:a9:b9:32:ce:eb:
94:e7:36:08:3f:bf:c0:93:84:e7:6c:6e:35:21:3f:
ec:fd:c1:b5:3b:17:8e:48:28:3d:2c:47:3b:c1:eb:
e8:0b:3a:bd:b2:33:3f:7e:65:89:f5:28:c0:35:96:
7c:f5:ef:42:83:55:d9:18:f1:72:c9:df:5f:18:9b:
be:1e:24:82:5e:0a:91:cf:7d:94:7c:54:6b:6d:38:
0e:ff:87:07:21:46:b4:9d:ab:75:a9:94:a2:e3:08:
65:d2:a0:43:d2:75:9a:75:47:21:d2:92:9e:05:74:
04:b2:85:d8:98:4c:b0:c7:32:4f:34:85:5c:ae:99:
fb:c6:81:96:99:33:75:ff:cb:e1:71:91:e8:cb:b6:
b0:5b:a5:3c:d9:be:73:45:64:1c:11:d1:10:f8:73:
8c:d0:17:4d:28:4c:3c:ab:c1:55:6b:da:ce:62:f2:
9d:8c:fc:b7:89:6f:d3:e8:33:41:22:ca:d0:4a:b0:
59:87:b7:12:95:19:84:90:d4:0e:bb:dc:37:66:eb:
97:b6:98:1b:54:91:79:9b:52:f9:4c:0b:ec:4a:ba:
bf:49:cd:23:35:6c:7b:cc:10:ed:d5:fd:3d:26:ca:
6a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EF:25:60:19:DC:08:D0:CB:2C:0A:58:30:2D:97:DB:56:02:15:28
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/Te8lYBncCNDLLApYMC2X21YCFSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.208.0/24
Signature Algorithm: sha256WithRSAEncryption
59:4b:b7:ff:6d:30:91:ee:53:cc:6c:e8:fa:8b:c0:80:a8:36:
a1:c7:3b:69:ad:71:9e:1f:a3:46:b4:c4:e0:4a:5b:26:b9:b4:
4c:69:a7:41:17:f4:8f:f9:99:29:f3:83:c4:56:2b:d3:e3:fd:
c1:18:94:60:63:74:58:3b:1f:ea:29:47:c7:1a:db:94:d9:98:
49:02:c4:14:ac:8f:9c:95:a3:a6:b9:8d:b6:71:46:2a:ea:0d:
37:02:93:57:bf:9a:76:cd:c7:21:e1:e2:91:fd:a5:6e:79:e8:
3f:2b:a5:3c:aa:ac:21:7c:c1:3a:15:ae:44:d4:6c:9e:3b:f9:
f9:91:31:7e:91:88:a9:4a:7b:1e:d8:3c:e2:10:49:78:29:90:
e5:38:9a:30:37:d4:89:f5:af:5e:76:a1:cc:b7:9d:e0:77:cb:
e8:d3:01:aa:ac:71:9b:cb:19:5a:9d:a0:fe:32:20:57:5b:28:
28:6c:74:92:ba:37:01:15:ea:48:63:b0:58:15:b6:86:83:84:
07:4e:a8:f6:a9:1b:47:39:cf:17:ab:a5:5a:3c:cc:46:c7:73:
1b:82:da:4a:60:59:5d:70:50:2f:da:0c:17:50:94:13:e9:ae:
c8:ae:cd:18:d8:87:fd:14:38:75:98:80:14:c7:12:ac:00:6e:
9d:43:33:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:44 2023 by rpki-client on console-fra.rpki-client.org