Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/rT01Q0GvHCqFe623UvJAeCteQ6Y.roa
File: rT01Q0GvHCqFe623UvJAeCteQ6Y.roa (raw, json)
Hash identifier: lodDUOaeY+9tzAPDn2mmIC+hovBkucQUVLz+dRyIzww=
Subject key identifier: AD:3D:35:43:41:AF:1C:2A:85:7B:AD:B7:52:F2:40:78:2B:5E:43:A6
Certificate issuer: /CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Certificate serial: 018631877E870C14126EFF4176BE00DFB13B
Authority key identifier: D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/rT01Q0GvHCqFe623UvJAeCteQ6Y.roa
Signing time: Wed 08 Feb 2023 14:56:48 +0000
ROA not before: Wed 08 Feb 2023 14:56:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212853
IP address blocks: 45.81.252.0/24 maxlen: 24
45.81.254.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:31:87:7e:87:0c:14:12:6e:ff:41:76:be:00:df:b1:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Validity
Not Before: Feb 8 14:56:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad3d354341af1c2a857badb752f240782b5e43a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b3:ea:36:f8:77:63:76:21:45:51:b8:7f:6a:
66:97:92:11:f8:70:2e:c2:e7:c8:e7:36:c2:47:1c:
a1:8f:7d:ab:4e:f4:c0:d7:34:10:65:f9:ff:01:29:
73:20:64:54:77:1c:44:bc:69:79:bd:40:48:14:57:
32:b4:89:a9:2f:83:39:6b:35:47:ff:33:ab:11:6e:
cc:08:e9:be:98:06:87:8a:99:5c:c6:97:ab:11:02:
9d:2c:23:04:3f:09:ea:48:6a:fa:e7:5c:94:c2:b4:
dc:ef:c0:30:a0:02:fc:21:17:ba:16:fd:94:63:be:
a9:60:1c:a4:d3:9e:c4:c2:db:46:0c:47:67:ba:c0:
17:7b:0b:7b:7e:b8:9f:b2:ca:63:ce:db:9e:a9:33:
d9:5d:07:78:99:61:d1:b5:f2:c6:a9:bf:21:0d:a7:
6a:c0:a2:79:a0:9a:5f:92:bd:1b:25:3d:6a:ab:8b:
63:5a:f5:cb:28:74:63:e7:59:a6:ce:5a:65:52:02:
a4:13:96:69:d1:f6:ae:30:19:1c:3f:32:b8:a5:cc:
06:fd:8b:03:1c:d2:2e:2d:a0:b7:0c:24:06:6c:02:
a7:9e:27:f3:a3:50:06:a5:f7:eb:fb:67:0d:93:99:
e4:84:ac:52:16:67:e1:2d:b7:e4:cd:46:10:5d:f2:
92:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3D:35:43:41:AF:1C:2A:85:7B:AD:B7:52:F2:40:78:2B:5E:43:A6
X509v3 Authority Key Identifier:
keyid:D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/rT01Q0GvHCqFe623UvJAeCteQ6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.252.0/24
45.81.254.0/24
Signature Algorithm: sha256WithRSAEncryption
01:3b:fc:67:bf:03:f1:3d:5f:0e:bc:ed:76:92:eb:c0:6d:1f:
6e:3c:56:b4:18:df:7e:08:c5:db:31:1a:98:00:45:01:d6:58:
91:21:3f:78:d7:9b:56:be:bb:2c:43:b4:6f:ff:ce:43:5c:f9:
51:7e:8a:2e:ad:99:5e:90:e9:2c:69:00:53:9a:ec:6c:6e:20:
7e:41:ed:c7:74:6b:7f:57:ad:33:3c:3c:3c:28:2f:cc:18:fa:
03:58:98:3e:35:02:63:a7:a3:e7:c5:ff:b5:28:6b:bf:64:89:
c4:b2:6d:91:41:a9:f5:6c:57:04:2f:6d:c9:b8:59:2c:62:c6:
a9:84:b8:b7:09:8b:76:f7:fe:b5:68:29:3f:9c:2b:e1:c9:7d:
9c:5c:ce:25:20:aa:fb:3e:49:4a:21:8b:ae:a8:2c:a2:9b:b1:
f5:fd:f0:5a:55:f2:14:38:7a:37:7f:bf:cf:a1:07:07:92:e7:
f0:07:89:33:38:40:15:d6:a0:f9:08:3d:1e:19:28:9e:f5:6d:
17:e6:21:91:1d:48:d4:a1:76:45:bc:e5:45:5b:91:cd:66:98:
74:51:e9:15:78:cf:56:ee:b2:e1:a7:02:8e:56:90:ea:6a:1a:
b8:81:0e:a1:d4:9e:3b:49:05:41:b6:2b:69:8f:bf:d2:f0:1c:
97:8d:5d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:48 2023 by rpki-client on console-fra.rpki-client.org