Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/1-eoqRNXOzuGQL2R_q-RK9qHUr-o.roa
File: 1-eoqRNXOzuGQL2R_q-RK9qHUr-o.roa (raw, json)
Hash identifier: 5MfgK/Pudm5oOoKUi7SJuSgpdPl9IX6laFTIW1Gq6wM=
Subject key identifier: F9:EA:2A:44:D5:CE:CE:E1:90:2F:64:7F:AB:E4:4A:F6:A1:D4:AF:EA
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 018A770779B58F6AC2D454282B7F8F22E4F3
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/1-eoqRNXOzuGQL2R_q-RK9qHUr-o.roa
Signing time: Fri 08 Sep 2023 23:01:33 +0000
ROA not before: Fri 08 Sep 2023 23:01:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216357
IP address blocks: 45.150.174.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:77:07:79:b5:8f:6a:c2:d4:54:28:2b:7f:8f:22:e4:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Sep 8 23:01:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9ea2a44d5cecee1902f647fabe44af6a1d4afea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ba:30:7a:5f:49:5a:7b:2d:17:d1:2b:42:1a:
db:b7:21:6b:99:ae:2d:0d:fc:5b:9a:c8:88:8f:37:
8d:b1:bc:36:8f:ec:21:39:20:f0:56:6a:a0:be:0c:
87:24:73:c7:d0:66:71:4b:89:14:d5:c5:df:23:09:
77:53:31:24:83:4a:ed:c2:3f:54:b9:ed:75:68:fc:
2b:c6:6e:a1:15:75:f5:96:c3:9a:32:7d:12:97:47:
90:f0:78:c2:0f:d9:7a:f0:a5:0d:b7:27:db:9b:41:
3e:3b:81:65:6d:d0:7d:0e:89:b7:37:69:06:ac:44:
52:33:7c:d8:51:02:e8:12:ad:1f:4e:0b:36:ba:be:
89:fe:e6:5e:9e:ec:5d:42:84:4c:95:70:31:7f:5e:
44:55:b1:4d:d5:b6:7a:7a:e9:ad:9d:2f:61:36:e9:
82:aa:fe:d6:44:35:9b:45:16:fc:50:b9:6b:5e:75:
f9:3b:81:71:99:b8:ed:5c:08:3c:31:d7:ae:c1:60:
49:b1:e3:0c:02:d9:61:71:1a:cb:d0:42:02:69:a6:
c0:c2:9d:1d:3c:11:d3:28:64:22:50:5f:fb:10:b3:
4a:b3:ff:eb:96:5f:f8:aa:d4:a1:55:4f:9b:cd:9a:
78:44:9f:c8:aa:79:49:ac:4f:e6:95:7b:a7:ca:1f:
35:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:EA:2A:44:D5:CE:CE:E1:90:2F:64:7F:AB:E4:4A:F6:A1:D4:AF:EA
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/1-eoqRNXOzuGQL2R_q-RK9qHUr-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.174.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:f6:8f:e3:5b:8c:85:40:76:d5:b0:f0:e5:c3:b1:3a:1d:2f:
33:80:98:9e:30:6a:71:c4:59:19:7d:74:75:71:16:77:bf:1f:
2f:f2:d6:2d:c7:e2:37:4a:60:41:80:e8:b4:39:2a:ca:5c:9b:
a7:32:51:2f:71:04:cf:89:34:1d:09:25:68:5f:bd:b9:86:6c:
ef:8e:30:ad:e4:a0:c5:41:db:54:9c:73:38:49:ce:52:aa:52:
93:eb:b2:68:9e:3c:ce:4e:d4:df:b0:bf:ce:8d:83:73:10:b6:
2a:5f:c9:cb:74:dc:39:a3:1b:09:e8:1c:11:71:e5:3b:1a:53:
90:a3:57:f2:6c:74:a6:fa:12:88:27:9b:4b:25:26:cc:64:ec:
42:b5:8c:36:09:fc:60:e1:15:ff:1f:08:ad:e2:94:ee:01:24:
30:8c:63:4e:f1:1c:e6:a1:14:6a:c0:3e:ef:22:c6:78:02:18:
9f:01:5a:aa:ad:38:3e:55:52:40:23:3a:34:88:ef:2d:29:ac:
45:8a:89:4f:6f:19:c1:5b:f2:38:06:7c:45:6c:69:0e:88:21:
bc:dd:06:59:5f:11:2b:d5:21:df:6a:a2:b1:1c:7e:78:3a:21:
25:f7:b8:a7:f4:8b:dc:aa:e2:d5:4c:69:cd:f2:3f:43:ee:9c:
60:13:93:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:19:03 2024 by rpki-client on console-fra.rpki-client.org