Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/asyHH3XSMsK3fzo92OyYTE40YHU.roa
File: asyHH3XSMsK3fzo92OyYTE40YHU.roa (raw, json)
Hash identifier: EBf/y7zp6VrO222qPZxdBRpO2aW2ID01DtT4oQi6DYU=
Subject key identifier: 6A:CC:87:1F:75:D2:32:C2:B7:7F:3A:3D:D8:EC:98:4C:4E:34:60:75
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 01856ECB907A540711CEFB259BC604F969A1
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/asyHH3XSMsK3fzo92OyYTE40YHU.roa
Signing time: Sun 01 Jan 2023 19:25:12 +0000
ROA not before: Sun 01 Jan 2023 19:25:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 45.155.64.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:90:7a:54:07:11:ce:fb:25:9b:c6:04:f9:69:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Jan 1 19:25:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6acc871f75d232c2b77f3a3dd8ec984c4e346075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:06:8e:60:07:b2:7f:d0:fc:7f:e4:69:82:dc:
4f:a3:75:0d:fa:a5:f8:d0:1a:7f:5d:ba:d3:47:a0:
e2:05:49:79:c2:41:32:1b:12:07:74:a7:12:4e:01:
7c:33:b8:be:58:a0:31:9f:ed:fe:c7:a7:b0:e7:57:
9f:51:6a:da:28:34:d8:86:07:70:e7:db:54:f1:5d:
f8:b7:29:90:53:2a:ba:ac:25:7d:0c:d7:d2:38:94:
4d:d6:7c:ab:32:c3:6f:c8:6b:64:22:75:32:1d:7b:
de:c7:bf:32:2d:b4:73:e9:99:53:60:5e:5d:f6:54:
8a:7c:68:61:8b:ac:41:99:e2:45:67:ff:40:cf:fb:
44:1b:1f:ab:28:a3:38:85:7f:ed:97:cf:00:20:9d:
2c:03:7b:cf:ad:41:e4:7b:f9:3d:00:ae:d3:eb:a1:
53:11:36:1c:82:e0:71:a8:70:6a:bd:b3:23:6b:eb:
e9:34:8a:a8:54:66:cd:ed:fc:68:ae:c4:42:de:27:
54:60:95:bb:4b:8a:fb:b9:51:23:13:f8:a3:59:7e:
5d:38:68:d9:d1:d2:3a:b8:c6:6c:32:f4:74:fd:c1:
c8:09:ef:e5:38:c3:22:0e:42:74:71:62:b1:9b:3b:
ea:da:34:e4:40:72:de:ba:e7:94:3f:7b:e6:9a:e3:
b2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:CC:87:1F:75:D2:32:C2:B7:7F:3A:3D:D8:EC:98:4C:4E:34:60:75
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/asyHH3XSMsK3fzo92OyYTE40YHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.64.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:05:d3:4f:23:b6:a0:17:02:52:3a:12:20:bf:f7:f7:12:c2:
8d:f0:9e:5a:e7:c0:28:98:3c:04:c7:26:0e:59:a5:13:5c:d0:
68:87:f8:2e:3d:c1:8f:b7:f1:53:4e:4c:2f:0d:ec:f5:a3:39:
cd:bd:9e:19:8b:01:c3:0c:2a:d2:80:bc:e0:ee:5f:70:d9:95:
0d:d3:f6:6c:3c:ec:f0:e6:26:39:7a:ef:f0:50:9d:77:e9:08:
0b:cc:09:de:b4:55:8e:7a:6d:85:ef:32:b1:27:4d:46:ff:70:
52:fd:4d:ea:8f:4a:c0:8b:31:3a:99:4d:96:0e:fd:98:f5:95:
0f:52:9a:d7:85:a1:4b:ef:35:50:e2:18:23:db:1c:76:63:ce:
ed:ed:42:f1:4f:1e:ea:fe:f7:2e:77:3b:6b:b1:a3:28:ff:f7:
9c:51:18:f6:7a:d8:fb:50:07:a9:e9:23:5d:30:70:c0:83:5d:
a0:98:9e:fa:1a:21:a4:63:02:f1:cc:d4:8e:6b:03:37:de:a5:
09:cb:b8:c2:a3:e3:a7:ea:29:5e:ee:a4:d6:57:8e:c9:e3:e3:
aa:48:d8:6c:cc:87:f0:a0:17:c0:91:14:58:5d:e9:60:f3:d7:
12:0a:58:2a:82:d8:37:df:34:ef:cd:be:6e:94:40:80:90:dd:
e1:3e:1a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:57 2023 by rpki-client on console-ams.rpki-client.org