Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/DeKEdntxeBGgt-3PaqJ2S7MOSl8.roa
File: DeKEdntxeBGgt-3PaqJ2S7MOSl8.roa (raw, json)
Hash identifier: SKEzVNje3J1rXSX0SH6J/a7jn0r6teqFnHJh863ypDo=
Subject key identifier: 0D:E2:84:76:7B:71:78:11:A0:B7:ED:CF:6A:A2:76:4B:B3:0E:4A:5F
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01856BC0EC0E1F84CF713DF6E2E4165367BA
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/DeKEdntxeBGgt-3PaqJ2S7MOSl8.roa
Signing time: Sun 01 Jan 2023 05:14:43 +0000
ROA not before: Sun 01 Jan 2023 05:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35758
IP address blocks: 45.144.28.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c0:ec:0e:1f:84:cf:71:3d:f6:e2:e4:16:53:67:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jan 1 05:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0de284767b717811a0b7edcf6aa2764bb30e4a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4e:25:40:4b:19:06:b6:8e:28:71:8b:d5:d1:
8a:fc:9d:1b:3f:41:70:88:02:7e:62:0d:77:06:8f:
13:42:a5:f5:78:bc:6f:be:4c:15:58:14:ee:4b:0d:
88:87:f1:4d:48:b5:16:4e:16:f6:80:76:02:7d:72:
53:f3:b3:ce:db:ec:4f:ce:e6:4f:8f:a1:37:e3:53:
3e:8a:37:ff:85:b2:48:06:c0:3d:f7:45:66:e1:00:
d1:c1:5d:b3:82:79:45:31:31:ba:ad:88:92:bf:a7:
63:53:13:81:71:fc:cb:47:2e:cb:95:77:67:8c:e4:
e9:ad:01:57:43:df:aa:a6:0d:b7:a3:69:79:d8:30:
52:78:c1:3e:18:ca:25:89:76:a6:9a:ad:ba:0f:d1:
37:20:07:a4:82:8d:93:18:74:fc:51:e9:60:ca:c8:
09:e5:04:a2:5e:4f:e0:6b:ca:d7:a3:21:49:99:07:
f5:3b:cc:d3:64:9c:e7:0f:a6:d5:eb:7a:db:63:26:
b9:00:3d:fb:3a:f3:6c:9e:e8:ff:b2:d3:ab:bf:fe:
b7:b3:d8:bf:63:0d:7a:76:98:aa:8e:7a:ff:0d:b3:
29:1c:16:5d:f7:c2:23:b1:bd:4a:8c:5c:1d:97:a3:
ac:4f:36:5a:9e:25:e2:bd:25:bc:59:cf:61:69:63:
f0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E2:84:76:7B:71:78:11:A0:B7:ED:CF:6A:A2:76:4B:B3:0E:4A:5F
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/DeKEdntxeBGgt-3PaqJ2S7MOSl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.28.0/24
Signature Algorithm: sha256WithRSAEncryption
03:18:3e:48:60:f7:23:81:29:f1:a2:ca:13:30:b8:02:92:b7:
73:0a:d0:a0:fc:83:21:4d:82:99:1e:99:ee:62:2c:de:7b:29:
0f:e1:53:21:90:1c:34:50:ec:65:fd:1d:38:17:a5:e5:6b:3a:
0b:4e:c0:dc:ce:04:eb:ee:2c:89:a4:e2:4f:5b:d6:c3:01:43:
af:83:ce:d9:da:10:a8:27:8a:53:cc:b5:3a:e3:4f:1d:26:a2:
42:0a:12:4b:71:64:35:0b:c3:09:33:a8:51:a9:6f:c7:9d:91:
95:5c:0e:9a:01:62:4b:b2:b3:2f:4a:ae:42:f7:b8:4d:a2:ae:
bd:98:c8:91:0c:90:1f:a3:5e:d0:a2:35:77:aa:6c:f3:c0:fe:
e6:61:45:39:44:da:dd:bf:83:a6:a5:a6:57:31:c2:91:9e:63:
aa:a9:33:62:66:07:76:5c:d3:18:9b:e0:bd:24:99:f4:31:bc:
17:b1:d1:94:50:da:b5:22:a6:75:85:8b:bc:c5:8d:a7:c9:5b:
4c:86:9d:4e:94:ae:19:91:88:bb:5c:f1:76:3e:1e:9c:68:8a:
1b:77:7c:53:a3:8f:ea:b5:b4:74:a6:02:21:95:81:46:1e:e5:
d3:e0:96:2e:b3:ce:2c:31:6b:e9:cc:7d:33:13:66:2e:09:88:
44:b6:f1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:23 2023 by rpki-client on console-fra.rpki-client.org