Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/PtrSIE5SS0IX9XIQ39lQomR4hcc.roa
File: PtrSIE5SS0IX9XIQ39lQomR4hcc.roa (raw, json)
Hash identifier: x4rDgnWZyt3s7g42Rr3R6EnMsmLFqdFs6srnTO2KLs8=
Subject key identifier: 3E:DA:D2:20:4E:52:4B:42:17:F5:72:10:DF:D9:50:A2:64:78:85:C7
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 018CB10007534711712103D9C130E7D9CD03
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/PtrSIE5SS0IX9XIQ39lQomR4hcc.roa
Signing time: Thu 28 Dec 2023 15:16:58 +0000
ROA not before: Thu 28 Dec 2023 15:16:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61390
IP address blocks: 45.130.70.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b1:00:07:53:47:11:71:21:03:d9:c1:30:e7:d9:cd:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Dec 28 15:16:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3edad2204e524b4217f57210dfd950a2647885c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b5:8d:42:d5:1f:19:2d:49:29:cf:8c:19:d2:
72:13:57:ef:e3:f0:76:02:63:06:a5:10:57:15:b3:
4e:9d:07:a6:41:9f:e3:86:16:61:49:e4:14:2c:06:
e4:89:1b:be:33:9e:e7:b3:93:e0:0c:13:0c:8b:7a:
f0:5e:cd:54:aa:e1:43:80:35:be:2e:ab:ac:9f:d0:
ce:ad:6c:60:5e:b8:b8:4c:21:0e:45:60:ce:c0:2a:
30:0d:8e:6c:01:57:bf:f1:12:c8:14:1a:b8:08:0c:
84:98:5e:d1:f0:24:c1:07:9c:93:f9:10:d4:18:6d:
6d:f8:b9:78:c6:52:1e:1b:48:fa:3e:f7:ab:c3:c0:
0f:7c:2f:91:7c:6d:48:c7:6e:1b:d5:64:d4:35:0f:
88:c4:b8:a5:15:5f:95:b3:45:fe:86:06:45:45:5f:
bb:69:0c:04:6a:f6:0e:7d:14:73:90:3d:d3:2d:d4:
70:dd:51:af:88:b7:68:11:a2:c6:52:c1:9a:88:5e:
f6:73:19:e3:1e:90:0d:f1:c7:31:82:84:e2:b1:be:
64:92:7b:7d:ea:60:a7:24:d0:ed:0b:ed:ee:1c:88:
43:82:bb:aa:60:49:c4:c6:1c:48:37:cf:90:c9:77:
c8:88:bf:9b:fd:72:2a:38:a7:7e:40:a8:eb:5c:d5:
11:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DA:D2:20:4E:52:4B:42:17:F5:72:10:DF:D9:50:A2:64:78:85:C7
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/PtrSIE5SS0IX9XIQ39lQomR4hcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.70.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:4c:8a:44:5a:da:c1:86:c5:14:16:17:62:c3:66:1b:36:03:
3e:15:4b:d6:c2:9d:6d:54:95:29:07:55:80:f6:1a:3e:2c:4a:
39:ad:24:3e:71:cf:3a:f1:1a:e5:79:ad:e6:69:aa:82:b4:37:
e7:99:63:4e:3b:49:c4:b5:e2:d3:47:9e:64:0e:16:46:5b:98:
63:79:83:92:a3:72:9b:7d:c1:ec:8c:1e:a6:93:99:b1:92:d9:
6a:ae:83:fe:31:e8:f0:05:70:8c:4e:18:57:95:7d:65:a1:36:
74:0c:a7:68:ff:57:90:59:94:70:81:8f:91:f1:bc:85:8c:ac:
e7:7e:1b:70:13:4f:e2:cd:fb:27:7d:d8:16:be:87:fc:8f:2b:
8e:d5:24:23:43:ef:25:c9:8e:32:44:e6:de:7e:48:70:51:a7:
34:5d:16:ea:5f:b9:be:bb:ee:35:9a:cd:ab:63:4b:05:ad:7c:
29:d7:1b:38:d2:5e:96:af:fc:06:26:db:85:21:33:e0:48:ee:
7e:36:78:2e:38:bc:ff:00:70:73:b0:64:ff:80:d1:da:f9:bf:
46:52:17:25:9c:6a:b3:be:a2:ff:c9:38:1e:21:60:44:7d:2c:
52:cb:b4:d8:27:de:96:5a:69:be:05:13:fd:31:b0:8f:6f:98:
49:d6:f3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:36 2024 by rpki-client on console-fra.rpki-client.org