Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/nTv20jrOGaq4sR8XtzCAGqT8N28.roa
File: nTv20jrOGaq4sR8XtzCAGqT8N28.roa (raw, json)
Hash identifier: zNv88Lnw8DlHMLGpdKHIVlHNoavJGY43Mhj2+tWpP3s=
Subject key identifier: 9D:3B:F6:D2:3A:CE:19:AA:B8:B1:1F:17:B7:30:80:1A:A4:FC:37:6F
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01856BC0EE20A4E44F899DDF68880CD0AC49
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/nTv20jrOGaq4sR8XtzCAGqT8N28.roa
Signing time: Sun 01 Jan 2023 05:14:44 +0000
ROA not before: Sun 01 Jan 2023 05:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47720
IP address blocks: 45.140.144.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c0:ee:20:a4:e4:4f:89:9d:df:68:88:0c:d0:ac:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jan 1 05:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d3bf6d23ace19aab8b11f17b730801aa4fc376f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:77:8a:9c:2c:c4:09:cb:d8:91:6e:3f:46:d3:
fd:a8:d3:06:33:83:25:79:40:d5:e0:c4:1d:c6:b5:
4c:b7:33:ea:99:12:14:d6:1f:e1:67:15:ee:f1:8d:
6d:9e:a7:63:fc:3c:3c:54:79:13:55:03:33:62:10:
4f:49:b5:52:fd:69:f8:4a:1f:19:b8:b2:00:d9:ac:
9f:96:a6:24:c5:07:95:fc:ee:fa:b4:20:d5:9d:82:
b7:56:f3:cc:14:29:e1:51:c6:a2:4c:61:41:7f:b0:
a1:48:ef:97:1d:fa:1b:26:76:7c:57:85:88:0a:74:
fb:d6:1c:37:eb:69:e5:13:05:e2:03:f8:12:49:49:
45:eb:2e:10:0d:cb:f6:a9:b5:e2:0e:9e:31:ef:78:
a2:1d:c9:19:9e:3f:9f:dd:9d:e8:f3:da:cb:6c:f2:
36:07:9d:bf:33:51:f4:52:be:a6:d4:5a:b6:f9:ff:
a2:31:20:0a:fb:22:70:01:23:62:83:6d:27:5b:3f:
25:2a:5c:25:61:f1:6c:a6:2c:16:cd:eb:ba:c0:0c:
06:8a:c9:5e:3c:2f:a3:93:ae:51:9d:fd:8c:ce:58:
14:65:24:54:ca:69:e2:f9:e9:55:3c:29:ca:6b:92:
3d:af:54:f2:7a:48:5d:a0:51:fc:c8:4b:5c:01:8b:
ca:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3B:F6:D2:3A:CE:19:AA:B8:B1:1F:17:B7:30:80:1A:A4:FC:37:6F
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/nTv20jrOGaq4sR8XtzCAGqT8N28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.144.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:13:ee:2a:cb:32:93:ab:30:89:07:df:60:0d:9e:d8:e8:fc:
9b:7b:c4:93:fc:e8:80:1b:2c:59:e4:87:f3:53:69:31:32:48:
79:c0:82:a7:ab:27:5c:76:11:3b:08:55:30:da:81:f0:c5:1c:
99:78:82:bc:78:2e:93:4a:dd:0f:92:6b:0d:a9:2d:2a:3f:09:
d4:19:a5:f9:cb:93:4d:3e:1e:bb:50:f7:10:94:97:02:19:a4:
f7:e0:9b:66:27:f3:9b:26:e9:51:f6:42:cc:53:e5:26:2f:e6:
4e:ef:d9:cd:cf:0d:df:48:c1:d8:eb:d6:5c:41:f8:dc:c3:3c:
e7:55:ab:2e:1c:da:43:f7:f0:b9:a2:01:c8:39:ca:28:03:e2:
f4:97:2f:ac:3d:59:6f:0b:af:aa:12:10:5b:d8:dd:fc:45:59:
72:7f:de:88:b5:5f:f0:18:23:63:75:20:a6:d8:63:a5:0a:1c:
d4:bc:ef:24:c9:18:f9:f8:36:d3:ac:ba:e0:18:98:0b:3e:ff:
23:f6:08:74:6f:bc:21:1a:21:2a:80:90:25:bd:05:ac:62:06:
2b:62:fa:59:ad:f2:60:bb:a7:42:9c:7d:ae:4e:4d:83:b1:37:
5c:e7:30:89:fb:5b:d4:4d:1a:a4:ed:fd:f7:90:c5:f4:7c:80:
35:a0:6c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:36 2024 by rpki-client on console-fra.rpki-client.org