Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/H3gT1ucK_SfnMlmL96aA6flOXAA.roa
File: H3gT1ucK_SfnMlmL96aA6flOXAA.roa (raw, json)
Hash identifier: rRZ8q3sM8fyOgSKDuDnxmq/4kXdYx2elTfOy9C308Bo=
Subject key identifier: 1F:78:13:D6:E7:0A:FD:27:E7:32:59:8B:F7:A6:80:E9:F9:4E:5C:00
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 01863F35B0DF8B5145D92A061E69D38D3F1A
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/H3gT1ucK_SfnMlmL96aA6flOXAA.roa
Signing time: Sat 11 Feb 2023 06:42:08 +0000
ROA not before: Sat 11 Feb 2023 06:42:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212477
IP address blocks: 45.150.172.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3f:35:b0:df:8b:51:45:d9:2a:06:1e:69:d3:8d:3f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Feb 11 06:42:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f7813d6e70afd27e732598bf7a680e9f94e5c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c6:7d:32:f2:16:1e:17:7d:40:ed:c1:44:9c:
47:e0:c6:b8:0c:2b:ec:73:0f:04:5d:8b:73:64:17:
f2:7b:2a:03:ab:85:4f:44:4a:64:e9:95:bb:88:18:
c1:4d:4d:3c:ab:30:84:93:4c:8c:36:1a:c5:5b:42:
37:40:ab:8b:47:e1:fb:3c:80:5d:ad:04:6e:e6:49:
c0:28:b2:0c:3c:69:26:30:29:dc:42:6c:9a:d6:d0:
01:ca:f0:b2:ad:ee:ec:18:be:de:99:6a:36:11:18:
2a:80:90:31:31:2c:13:07:e5:0e:b5:3b:8a:da:a7:
c5:29:d0:4d:c8:65:a8:1e:01:4d:42:64:2c:56:8d:
80:4b:01:6c:4b:77:39:3a:db:05:b2:4c:99:62:b9:
d8:64:93:b0:2f:45:d6:14:35:ea:3e:d8:6b:aa:01:
93:4d:83:f1:17:4c:35:1a:85:3e:70:9f:eb:19:3e:
fa:f1:88:83:6e:90:d7:19:23:8a:f7:42:25:9f:51:
a8:e6:77:24:8c:4b:b9:f8:44:1c:32:fe:2b:96:26:
ef:d3:c9:2b:62:b3:d5:dd:91:ef:18:8b:20:67:a1:
11:01:ad:5c:e2:20:3a:48:73:cf:c9:3a:61:e9:c6:
16:89:45:fa:dd:55:fc:88:9d:d6:06:91:35:61:f6:
4f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:78:13:D6:E7:0A:FD:27:E7:32:59:8B:F7:A6:80:E9:F9:4E:5C:00
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/H3gT1ucK_SfnMlmL96aA6flOXAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.172.0/24
Signature Algorithm: sha256WithRSAEncryption
04:90:28:b5:d9:e5:6e:fb:e0:2e:b8:4a:9d:b9:5d:49:ef:53:
03:19:14:af:be:db:c3:cd:17:3a:25:91:9c:6a:81:32:a8:af:
82:17:a3:4e:17:6b:90:88:a5:44:ab:29:76:da:5a:cf:6a:79:
82:98:23:82:ed:03:cd:f8:07:4f:f0:de:9a:d1:ce:fe:90:f2:
85:65:68:b1:b8:f0:12:6d:b1:0f:95:81:1f:35:4d:07:db:e4:
fa:72:5b:34:b3:8d:4e:ee:10:57:4c:68:2f:72:cc:28:8e:24:
c9:b9:08:80:3a:1d:d3:1e:3c:09:b6:68:65:e9:27:27:79:b5:
60:2d:bf:1a:2a:96:c4:0f:33:3c:88:06:b7:4a:4e:a5:53:21:
4c:a7:ac:af:b0:43:d4:7d:bf:90:3c:99:3b:8c:96:1c:53:cd:
0d:d1:d3:ae:8d:e4:9a:a8:1e:37:6b:be:19:de:6b:ee:81:17:
a8:e7:e8:42:76:f7:d4:f8:a2:70:dc:eb:26:f4:c0:5d:43:a4:
1a:15:41:5f:aa:c9:35:20:9e:c8:ce:5c:08:1f:eb:a1:e8:90:
57:a9:a7:26:f9:6f:61:e8:15:19:73:75:5c:ed:c2:12:07:2b:
eb:35:d9:d9:54:ee:ce:45:91:a7:c1:39:9b:ee:b1:99:6c:93:
b2:b2:a5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:49 2024 by rpki-client on console-ams.rpki-client.org