Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/k-7MQGFSWabCJ63JOAREWGRoZVw.roa
File: k-7MQGFSWabCJ63JOAREWGRoZVw.roa (raw, json)
Hash identifier: V0uS92NHa2nu9XCviD/ejmZl2eYB66z/84V35CSuICE=
Subject key identifier: 93:EE:CC:40:61:52:59:A6:C2:27:AD:C9:38:04:44:58:64:68:65:5C
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 0187A3C9C1EA15504293702F6F3E6FE39424
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/k-7MQGFSWabCJ63JOAREWGRoZVw.roa
Signing time: Fri 21 Apr 2023 12:28:41 +0000
ROA not before: Fri 21 Apr 2023 12:28:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 45.140.210.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a3:c9:c1:ea:15:50:42:93:70:2f:6f:3e:6f:e3:94:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: Apr 21 12:28:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93eecc40615259a6c227adc9380444586468655c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:23:03:9a:19:e0:28:79:57:4d:cc:fc:40:03:
81:3f:b2:f8:93:88:62:cb:c6:45:b2:e5:30:f7:25:
95:dd:97:cc:7c:fb:06:e2:02:35:62:02:84:b2:5d:
9d:6e:71:b7:24:f1:5c:66:9f:78:ee:d8:0d:75:7b:
a5:58:3c:cc:c5:5d:f0:d1:ce:86:22:05:c4:ec:85:
5b:f8:40:2f:f2:b6:80:00:73:47:c2:a5:85:e9:17:
bf:09:2b:f9:bb:c3:d5:f2:5b:e8:df:8d:b3:5e:df:
18:5f:5f:4b:fa:91:79:66:07:5b:c2:dc:e9:a8:1d:
04:80:21:f2:d7:91:34:1b:84:b6:b1:78:90:a7:2d:
b3:39:48:3e:57:9b:5e:99:d5:82:b6:dd:b5:90:f0:
b9:20:80:8f:1f:84:5c:c4:e1:fd:bf:af:a6:72:cd:
6e:ca:14:e7:70:71:7e:e3:7c:56:bd:13:12:55:1d:
38:30:f3:a8:2b:14:ea:34:25:26:36:46:58:a5:d9:
4c:50:cf:1d:98:48:89:d9:9a:81:f4:58:18:84:45:
8b:5f:97:c4:05:b4:51:23:e1:24:40:6b:6c:db:0b:
3e:26:41:55:b1:14:d9:91:e5:98:94:05:f1:d4:85:
9c:32:44:40:3f:8d:a8:d0:c6:34:66:53:19:c9:f6:
67:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:EE:CC:40:61:52:59:A6:C2:27:AD:C9:38:04:44:58:64:68:65:5C
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/k-7MQGFSWabCJ63JOAREWGRoZVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.210.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:e6:60:d7:a5:d6:df:29:a0:5e:fb:89:61:1a:37:0a:3a:30:
3c:2f:4d:06:c2:79:dd:85:bd:4c:27:06:c6:03:fe:47:20:23:
6c:fa:a8:f5:41:08:84:3f:06:bb:41:83:64:bf:c1:4a:55:45:
4d:90:4d:c6:be:5a:a4:28:d5:4c:8d:0a:14:d6:81:20:a5:c2:
b7:1f:54:ca:34:89:22:2f:5a:7b:f3:ed:cb:30:15:e5:5c:54:
ff:c8:2e:df:ee:99:2c:f2:f4:ac:eb:8f:e2:38:77:3b:f9:1d:
3e:03:aa:40:06:0d:93:24:99:83:b1:6d:13:c9:84:df:61:dd:
7b:5c:c6:b3:8c:a3:6f:75:cd:0a:94:a4:a9:8f:73:69:02:7c:
39:56:e7:24:56:b7:9e:1f:60:a6:fa:6a:65:12:a0:c1:f5:67:
19:22:36:46:12:87:df:37:59:a2:ee:bb:0d:e5:dd:e1:98:eb:
30:76:ce:1d:24:1f:b8:29:3f:31:8f:52:b1:7a:be:7a:88:1b:
05:6f:00:2e:75:bc:4f:e8:f4:fa:75:9c:54:47:c8:05:47:8e:
f6:af:96:f8:e9:b3:ee:57:3c:36:f1:97:90:d5:29:b4:18:20:
e1:bd:98:21:31:5b:0c:e3:2b:7f:18:9c:53:44:7f:b2:41:94:
be:b0:97:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:44 2023 by rpki-client on console-fra.rpki-client.org