Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/fjaFhHXcEDlcrKFVWip2hddlPpg.roa
File: fjaFhHXcEDlcrKFVWip2hddlPpg.roa (raw, json)
Hash identifier: gQQjPWjeYw73o/TOO18VJ7BNumycIcN6oJ6VNI2LMYs=
Subject key identifier: 7E:36:85:84:75:DC:10:39:5C:AC:A1:55:5A:2A:76:85:D7:65:3E:98
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 018A63210B5B1A1387F51A0E774227CFABB8
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/fjaFhHXcEDlcrKFVWip2hddlPpg.roa
Signing time: Tue 05 Sep 2023 02:17:04 +0000
ROA not before: Tue 05 Sep 2023 02:17:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.150.174.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:63:21:0b:5b:1a:13:87:f5:1a:0e:77:42:27:cf:ab:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Sep 5 02:17:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e36858475dc10395caca1555a2a7685d7653e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2f:8d:6d:b7:e4:d6:46:82:fd:ac:2a:0a:11:
59:9b:84:46:f7:2e:09:96:04:81:88:f2:f0:63:ba:
0e:e9:8d:90:21:0e:0b:01:de:60:fc:5a:cb:04:cf:
99:c0:b5:a6:9a:2c:b4:c9:3b:6f:69:13:a2:eb:0b:
ee:7d:ce:1d:f0:8a:0b:42:3f:6d:23:53:45:1b:a2:
f9:77:8d:0a:39:6f:2c:0d:d6:60:be:ef:75:18:a8:
36:2c:5d:83:c1:c3:1d:04:7d:a9:39:00:cd:53:04:
2b:8d:0e:55:3a:8a:77:e9:37:2b:e2:36:c2:71:f7:
62:f6:eb:61:38:b5:fb:76:a7:5c:e5:5d:1d:08:4b:
30:4e:92:22:cc:b8:43:99:34:3d:4b:a1:b7:c7:71:
ce:42:df:0c:5c:1f:0d:1e:8f:e4:e6:a7:6e:80:2f:
ee:21:66:d4:08:4b:7c:bd:9a:cc:e5:1d:a2:59:46:
33:e7:e5:81:a4:ae:1a:18:9d:ab:02:a1:90:92:c3:
0a:9b:04:61:5a:3b:0b:8e:c9:69:40:61:07:3a:d3:
15:be:89:9e:a3:de:e6:9a:7b:1c:4d:2d:3f:af:80:
eb:b6:c9:ce:50:0f:15:3a:f4:c7:8e:95:69:a1:cf:
07:ad:44:c1:71:14:c1:9d:4b:34:e8:00:ea:63:e3:
9f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:36:85:84:75:DC:10:39:5C:AC:A1:55:5A:2A:76:85:D7:65:3E:98
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/fjaFhHXcEDlcrKFVWip2hddlPpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.174.0/24
Signature Algorithm: sha256WithRSAEncryption
25:df:31:2a:74:10:0e:2d:3e:8b:c8:3f:73:6b:5b:1f:77:fc:
93:a2:79:72:da:4b:38:6d:2b:e3:79:42:ab:78:20:4e:e1:59:
69:a1:88:09:3c:f7:02:d3:a5:7d:b8:b9:9a:b1:5d:16:6f:f1:
71:07:16:4b:82:5d:44:a5:48:00:19:f0:65:75:39:c1:04:78:
2c:03:0e:41:ff:1e:15:a0:a5:19:8d:d5:ce:d8:3f:82:6b:a9:
b0:c0:9e:f0:3a:a3:a7:69:49:3c:51:9e:82:0b:98:e1:36:e9:
36:83:ca:cf:61:0b:25:70:f5:39:38:96:cf:8e:c4:28:da:67:
60:61:aa:29:e5:b4:b4:44:07:21:4e:2a:4b:4b:50:74:06:03:
b4:e2:02:ea:a6:53:45:ad:ec:bf:77:f2:69:b5:ad:79:d4:3e:
f8:15:40:e6:ae:e4:8e:37:b7:40:37:e4:6f:30:92:50:f9:53:
08:a2:8e:ff:29:f2:04:b1:38:28:81:b8:49:31:0d:63:69:32:
25:8a:e2:da:30:de:c2:88:16:72:49:ad:86:99:28:02:a8:d7:
31:fa:d0:25:65:2d:99:fc:d9:61:06:7c:05:50:2d:c5:cf:74:
c3:8e:a0:3c:38:3b:96:6c:be:c0:43:66:c1:9c:bc:bc:94:c7:
cb:21:16:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 8 23:50:25 2023 by rpki-client on console-ams.rpki-client.org