Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/h_4kiG3FntjK27uYLQk5qOhjk1I.roa
File: h_4kiG3FntjK27uYLQk5qOhjk1I.roa (raw, json)
Hash identifier: aBeFUa3rfV/eBnS3Oc2Aq5Kys6/IJRcXB0lFJhZLgGE=
Subject key identifier: 87:FE:24:88:6D:C5:9E:D8:CA:DB:BB:98:2D:09:39:A8:E8:63:93:52
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01856BC0F33B06E47ECCA51C46D4D1AC7033
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/h_4kiG3FntjK27uYLQk5qOhjk1I.roa
Signing time: Sun 01 Jan 2023 05:14:45 +0000
ROA not before: Sun 01 Jan 2023 05:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 45.150.66.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c0:f3:3b:06:e4:7e:cc:a5:1c:46:d4:d1:ac:70:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jan 1 05:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87fe24886dc59ed8cadbbb982d0939a8e8639352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:00:dd:f9:67:e0:7a:00:b4:dc:7f:12:c8:f2:
ad:0a:3a:a7:7b:38:58:e9:9c:33:f2:72:47:ae:71:
87:85:c8:60:98:df:66:f5:a9:a9:c2:21:8e:54:6e:
00:50:7c:3a:79:83:38:fa:a1:24:7b:59:15:78:8b:
bd:08:7d:8e:e4:68:83:4f:e8:38:86:c3:75:be:82:
cd:d5:52:e9:9d:67:f7:4d:53:58:2d:f6:08:0c:87:
91:a0:38:80:28:73:76:04:21:2a:41:80:71:18:4d:
14:fb:57:62:1f:12:40:69:e8:7f:72:e1:de:7c:36:
f0:c8:44:af:60:20:10:61:e2:23:07:3b:52:af:e1:
2b:93:25:71:6f:9b:ca:f9:6b:8a:46:3a:8b:35:20:
f8:12:20:8c:aa:63:e3:0b:1a:f6:42:aa:89:f8:27:
d0:b9:13:b2:c6:3f:9c:35:f0:5a:ea:2f:c4:0a:50:
48:f7:a7:27:06:f7:e8:01:49:cd:8a:ae:80:c9:e3:
91:98:75:21:7f:37:9f:28:a4:47:df:f0:5b:9c:db:
92:40:48:65:b4:31:e6:f4:f9:f1:b4:72:6f:09:c0:
c3:30:e1:f6:69:8b:2e:92:84:1d:8c:aa:19:da:f8:
c6:ac:64:6d:70:74:d3:00:0e:5a:94:25:17:5d:a7:
5d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FE:24:88:6D:C5:9E:D8:CA:DB:BB:98:2D:09:39:A8:E8:63:93:52
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/h_4kiG3FntjK27uYLQk5qOhjk1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.66.0/24
Signature Algorithm: sha256WithRSAEncryption
86:05:92:5c:1f:80:b4:9a:2a:4b:e1:02:c3:f4:e6:d7:8c:62:
3a:70:95:dd:29:52:9d:a9:9e:a1:a3:28:ed:38:f7:29:e1:39:
ed:20:70:98:9f:3f:dc:a1:b7:60:ab:a3:81:38:52:73:13:6c:
53:da:1d:e0:52:ec:42:f5:ee:2e:e3:99:ed:32:2e:91:93:db:
18:f4:00:11:9d:d4:71:21:62:13:e5:19:da:3b:d1:7d:77:3a:
66:b5:5b:70:3c:4c:4f:a3:bd:9c:6b:50:29:e4:d1:42:e6:0a:
66:92:cf:1f:1d:07:8a:ef:80:f5:90:db:e9:d5:3b:c3:3d:70:
30:7a:a5:87:30:38:41:e3:40:e2:08:6f:ba:89:2a:06:af:c8:
d8:8c:85:4e:87:eb:c4:46:d9:8d:32:60:26:68:62:50:75:f4:
61:6a:a0:24:83:f0:8e:4c:1c:07:10:0c:07:f5:0b:af:d7:58:
72:de:3a:0f:c0:a4:e7:e0:09:ed:21:2b:ef:e4:2c:f6:72:35:
87:39:2f:87:fb:30:6a:8b:87:06:2f:14:57:cc:81:d1:60:52:
f3:2e:c7:54:6e:a8:35:ed:e9:a2:f1:96:bc:a2:2d:c3:ef:39:
82:94:32:84:c1:8c:ab:27:e8:42:a0:9d:5e:47:9e:b1:9f:73:
d1:ea:0a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:11 2023 by rpki-client on console-ams.rpki-client.org