Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/rL9maaZcSnyFcgjtKcLdRkjw_Sc.roa
File: rL9maaZcSnyFcgjtKcLdRkjw_Sc.roa (raw, json)
Hash identifier: zSnDUGxOHa2Vgm0tXL/MmglykxTLR1l9skR9ReSAHI8=
Subject key identifier: AC:BF:66:69:A6:5C:4A:7C:85:72:08:ED:29:C2:DD:46:48:F0:FD:27
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 0189680B82F0A02914066198D4A7BCD5BC0D
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/rL9maaZcSnyFcgjtKcLdRkjw_Sc.roa
Signing time: Tue 18 Jul 2023 08:08:52 +0000
ROA not before: Tue 18 Jul 2023 08:08:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 45.150.175.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:68:0b:82:f0:a0:29:14:06:61:98:d4:a7:bc:d5:bc:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jul 18 08:08:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=acbf6669a65c4a7c857208ed29c2dd4648f0fd27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:1a:3c:fd:2f:b6:74:69:24:48:43:ae:4e:ef:
84:59:91:de:1e:4e:30:2d:58:7f:fe:b3:8a:f8:62:
71:73:a7:1f:a7:4d:36:f2:70:03:1e:d5:da:fa:ce:
d5:3b:d0:6b:30:44:5b:47:7d:b7:fc:e3:3d:05:47:
1f:6a:3a:fe:0f:f6:58:19:27:26:b7:f7:71:0b:eb:
bb:ea:2f:9e:d1:e3:dd:dd:e4:44:0d:e4:fc:fb:ab:
d1:d2:e8:95:db:48:a4:fa:1a:e4:58:b0:72:e1:c4:
4f:6c:7a:e8:5a:68:db:57:60:ca:71:37:46:2e:12:
17:43:f3:d6:6a:ef:5b:ee:4c:2e:bb:13:38:64:3e:
7b:e7:a8:58:a8:25:4a:06:9b:25:1d:38:72:82:49:
46:51:31:a4:a9:5e:ca:8a:05:03:9e:4d:a1:b4:b6:
3a:aa:39:61:84:ba:be:77:1a:06:9f:67:00:2b:d1:
a5:cb:33:2d:3e:5f:0e:a6:c3:98:f9:92:15:b8:fa:
55:9f:dc:f7:7d:5f:f3:b4:ce:52:70:10:4f:84:1b:
5b:a0:91:9e:22:a2:a9:05:f2:e6:d4:fb:95:42:dd:
e0:3c:75:38:53:3c:a2:a8:29:ba:d6:8c:74:3e:2c:
ca:37:35:2f:10:f0:74:d9:78:3f:8e:34:2a:3a:29:
af:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:BF:66:69:A6:5C:4A:7C:85:72:08:ED:29:C2:DD:46:48:F0:FD:27
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/rL9maaZcSnyFcgjtKcLdRkjw_Sc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.175.0/24
Signature Algorithm: sha256WithRSAEncryption
59:57:f8:50:21:82:33:00:ed:59:f3:4c:eb:54:67:fe:e4:8b:
e6:ed:ca:b2:f4:33:e6:dd:d0:7a:74:f6:1b:09:d4:1e:f8:c7:
0b:40:14:78:31:5d:9a:a4:71:cd:51:8f:17:4b:3a:40:88:73:
93:d4:b7:9e:c5:d7:79:35:76:ea:d0:3c:8b:28:74:dd:01:81:
fa:a0:37:b3:84:0f:90:6d:35:ae:93:1a:8d:96:a7:fc:c8:40:
d2:e9:94:97:d2:7b:90:ce:95:6f:c4:03:f9:51:5b:d3:22:56:
6e:13:02:c1:dd:60:2c:e7:2e:44:53:59:60:c1:4e:65:78:8f:
fa:a0:b7:66:96:5f:91:ad:46:31:a1:79:50:44:45:5f:54:4f:
3a:b3:3e:f7:01:36:80:bf:11:64:d6:fb:fd:a4:5d:1f:7d:79:
cc:45:45:67:65:6c:78:56:b9:0b:e1:49:c3:52:51:a4:5f:af:
fc:db:6c:50:f7:3c:b3:01:6a:70:fa:b3:7a:be:99:43:8d:d4:
de:b3:0f:cc:b4:00:3b:c5:35:36:a7:c3:74:65:1e:9d:68:ef:
d6:72:18:c7:15:b5:b0:35:6a:6f:f2:ea:b9:bd:a1:b0:33:75:
22:85:ac:b6:a6:e1:52:c2:d6:2f:57:20:d0:b6:ba:c2:fc:af:
54:83:11:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 17 05:10:10 2023 by rpki-client on console-fra.rpki-client.org