Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/5Qx5ebkveqH3XdZp4NSzjmCvEGU.roa
File: 5Qx5ebkveqH3XdZp4NSzjmCvEGU.roa (raw, json)
Hash identifier: JMHomRgvESid6DfTZEDWG0kk6QIRFR8ENT6jFIJC9wk=
Subject key identifier: E5:0C:79:79:B9:2F:7A:A1:F7:5D:D6:69:E0:D4:B3:8E:60:AF:10:65
Certificate issuer: /CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Certificate serial: 01856C53D7B7E5A2EFC8EE3B5224133AABE1
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/5Qx5ebkveqH3XdZp4NSzjmCvEGU.roa
Signing time: Sun 01 Jan 2023 07:55:12 +0000
ROA not before: Sun 01 Jan 2023 07:55:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136933
IP address blocks: 45.131.178.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:d7:b7:e5:a2:ef:c8:ee:3b:52:24:13:3a:ab:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Validity
Not Before: Jan 1 07:55:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e50c7979b92f7aa1f75dd669e0d4b38e60af1065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d6:05:1f:14:25:7b:45:c8:b8:92:0b:bf:aa:
68:b3:6d:d3:72:23:cc:82:82:85:0e:d0:d6:ac:00:
10:bb:3f:a8:a9:a8:02:d0:fc:c2:75:53:1b:d6:d9:
56:9c:53:67:12:bb:c7:da:b5:b6:c5:5d:4f:3b:51:
dc:3f:4b:0d:fa:05:b6:cd:ab:4a:08:7e:5d:b1:d7:
17:fa:90:ac:22:8b:06:3c:8d:40:50:85:cf:51:9d:
91:95:f1:64:6e:18:65:5c:89:d7:9d:92:12:a5:aa:
3f:bd:f2:b5:55:d3:9e:13:66:bb:8f:f7:ab:78:1d:
22:8f:c6:b7:42:19:69:b9:f1:ea:e1:dc:97:23:e3:
b2:7a:d1:c4:10:36:16:e1:5a:67:2b:0a:3f:9c:a1:
19:99:cd:50:0b:66:fb:7f:f9:ea:fa:50:55:58:ab:
d8:f3:cd:b0:b6:94:cb:96:af:21:21:de:bf:75:b1:
1d:6e:dc:73:bf:8a:fa:77:a8:5e:13:61:4f:4b:c5:
7f:72:e6:03:c5:35:72:ec:5a:8d:86:03:a3:1c:3c:
b2:6c:b5:aa:ce:f0:b2:ea:f0:49:ea:0b:a2:b3:0e:
fe:a6:03:b1:e7:68:37:70:d5:a1:d5:82:f3:14:f4:
c7:fb:af:f4:88:83:18:38:73:03:c0:a6:20:19:04:
24:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0C:79:79:B9:2F:7A:A1:F7:5D:D6:69:E0:D4:B3:8E:60:AF:10:65
X509v3 Authority Key Identifier:
keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/5Qx5ebkveqH3XdZp4NSzjmCvEGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.178.0/24
Signature Algorithm: sha256WithRSAEncryption
59:19:73:11:20:e7:ca:a6:de:76:3e:8b:45:c1:a8:89:b2:74:
46:c4:c1:a8:23:7b:07:8a:c6:f2:0a:41:c5:7a:69:31:77:85:
11:b6:d4:16:d3:f4:7b:75:0e:a6:6e:f2:44:2d:96:2d:ed:fc:
b6:6f:cb:a0:71:88:66:7a:98:9c:2d:41:09:f8:94:f8:c7:17:
9a:23:7a:ac:57:02:fd:44:ce:b2:04:74:a7:50:ad:38:db:1c:
06:25:ce:f3:f1:f4:44:e1:a4:2b:08:af:4d:49:e1:b7:28:c0:
9e:af:29:a6:34:73:94:e2:2f:25:f9:43:b3:17:b8:29:1b:a4:
2e:f2:4a:b8:8c:c2:a6:7c:3e:59:bb:f6:0a:4d:0a:66:4c:ee:
dd:89:3c:7e:e2:3a:32:2f:49:2b:ea:ca:c1:66:59:28:09:81:
14:c8:d1:c8:1b:14:2d:0c:b3:46:6b:7e:ae:e5:83:1d:21:7e:
99:62:e3:8d:fb:23:5b:01:b4:5c:28:e3:0a:6e:51:92:ec:9c:
85:ac:05:67:5f:f2:5f:e6:c7:80:19:22:ba:0d:ae:44:5f:4a:
5c:b7:e0:40:5d:34:ff:f8:9f:35:d1:fc:5d:1f:51:fc:61:94:
67:13:b1:20:2b:6e:b5:d1:93:3e:00:59:ed:76:92:90:63:14:
2c:09:96:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:55 2024 by rpki-client on console-ams.rpki-client.org