Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/B7JJqoEr8XyTLY6R-njotvyNKjI.roa
File: B7JJqoEr8XyTLY6R-njotvyNKjI.roa (raw, json)
Hash identifier: LqyIDrfz9BapkzcNTti4NAYSSSs2HT3Om7sUaT6aKNQ=
Subject key identifier: 07:B2:49:AA:81:2B:F1:7C:93:2D:8E:91:FA:78:E8:B6:FC:8D:2A:32
Certificate issuer: /CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Certificate serial: 018A9302A6868D50A5534AB8BACB301B6D19
Authority key identifier: D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/B7JJqoEr8XyTLY6R-njotvyNKjI.roa
Signing time: Thu 14 Sep 2023 09:25:39 +0000
ROA not before: Thu 14 Sep 2023 09:25:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212853
IP address blocks: 45.81.254.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:93:02:a6:86:8d:50:a5:53:4a:b8:ba:cb:30:1b:6d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Validity
Not Before: Sep 14 09:25:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07b249aa812bf17c932d8e91fa78e8b6fc8d2a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:95:6c:ae:08:06:a0:97:56:2f:af:1b:06:db:
09:67:08:ef:54:5a:82:f2:c7:c9:f4:26:ee:18:2b:
16:26:b7:b7:10:4e:63:75:84:0e:ad:5e:77:f6:3e:
18:78:5b:f1:6e:ec:e8:3c:b8:51:98:f7:d2:3b:cf:
c6:fe:50:a1:1e:2e:41:66:d1:c9:87:6a:47:56:3d:
a7:e7:9a:1a:73:ea:d3:f0:60:b1:df:4c:9d:c9:71:
89:f4:66:e1:5e:d7:6d:85:1c:36:46:95:a9:04:48:
10:67:92:28:a7:e9:3b:8a:da:8f:18:6d:f2:1e:9c:
ae:b3:35:ea:0d:ce:ed:1d:f3:9f:9f:24:ab:48:e5:
5e:b9:6e:04:75:61:2d:4c:a7:58:b3:a0:1f:5b:4f:
f2:b8:66:2d:3f:ac:21:f3:79:ef:08:0f:72:e3:84:
5a:af:e4:1a:db:d0:f8:21:27:d2:27:5e:84:0b:78:
d4:c2:29:8f:09:ce:0c:8d:6e:8e:bf:e0:d8:87:c3:
24:fc:2f:f7:a6:27:88:fe:69:4d:18:e1:49:51:38:
60:27:d3:24:10:32:ea:b3:62:c6:f9:30:27:06:31:
d2:78:41:0d:86:12:79:6d:8f:d0:7f:8a:14:2a:4d:
de:47:03:b4:8c:99:22:e0:98:6e:dd:ec:2b:82:86:
bf:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B2:49:AA:81:2B:F1:7C:93:2D:8E:91:FA:78:E8:B6:FC:8D:2A:32
X509v3 Authority Key Identifier:
keyid:D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/B7JJqoEr8XyTLY6R-njotvyNKjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.254.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:11:76:2a:e5:0c:45:6b:98:52:06:7e:35:0b:5d:90:25:1c:
45:1f:7b:14:ab:c4:e0:2d:fc:0e:82:fb:5d:cc:d4:95:38:9d:
b4:ea:a5:27:50:10:6b:7a:31:8c:0a:1b:23:b3:dc:d0:13:d5:
9d:8d:dc:9f:0e:72:de:6f:8f:1e:a1:df:f6:43:18:d5:ac:8d:
fe:ed:be:be:2d:b2:b4:b3:ea:f2:b4:62:26:0e:1c:96:ab:82:
64:4e:c9:3f:5a:7c:4c:30:67:1e:5b:8b:04:19:b3:1e:10:a2:
7c:cc:12:70:f1:04:bb:2b:eb:45:a7:0a:52:38:91:ba:16:06:
cb:b1:84:0a:88:96:5a:23:8c:41:ef:24:53:d2:f4:68:e9:77:
7c:e5:e4:db:80:79:94:04:f7:82:10:70:fd:cb:1c:d1:27:19:
90:60:6a:4d:45:76:ba:a2:59:e5:76:64:23:50:30:5e:98:dd:
6e:d4:cd:8a:ab:47:42:10:13:d8:08:a7:c2:4a:47:09:ca:56:
d9:64:4d:ab:e4:f3:28:bf:ad:a5:ac:86:1c:56:ee:05:1e:dc:
8a:46:ea:42:0a:b2:e4:83:61:bd:ed:e9:af:86:8d:87:1f:77:
64:5a:6a:11:c6:5b:8d:93:b9:d6:78:17:4f:d1:d1:5d:d8:1d:
f1:97:c4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 11 11:25:38 2023 by rpki-client on console-fra.rpki-client.org