Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/7v0JdMq4yuoUdsb_UllYp7URreU.roa
File: 7v0JdMq4yuoUdsb_UllYp7URreU.roa (raw, json)
Hash identifier: DdnaLd8i+6ndVO4UXLred9ZqXBWb7q/B9FOxuTP74CI=
Subject key identifier: EE:FD:09:74:CA:B8:CA:EA:14:76:C6:FF:52:59:58:A7:B5:11:AD:E5
Certificate issuer: /CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Certificate serial: 0189C4E2B115D44B061723890C610880F004
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/7v0JdMq4yuoUdsb_UllYp7URreU.roa
Signing time: Sat 05 Aug 2023 08:48:58 +0000
ROA not before: Sat 05 Aug 2023 08:48:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136778
IP address blocks: 45.131.178.0/24 maxlen: 24
91.238.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c4:e2:b1:15:d4:4b:06:17:23:89:0c:61:08:80:f0:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Validity
Not Before: Aug 5 08:48:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eefd0974cab8caea1476c6ff525958a7b511ade5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:fa:38:01:5c:f1:ec:2a:63:67:7e:fa:3c:a9:
2e:7e:38:4a:58:f8:30:41:e8:13:11:6a:7b:01:3a:
0f:64:06:8d:83:3e:61:c6:0a:15:2a:11:61:fd:45:
6b:56:12:29:49:e4:85:ce:9e:d9:d2:f4:d7:31:fc:
5f:e3:dc:45:0a:ad:d1:b6:59:aa:9e:90:e8:67:f9:
00:12:b0:b5:7a:47:e4:54:cb:51:d7:8d:73:8f:d5:
67:8b:3d:0d:55:8b:78:2c:9a:7d:e3:c9:61:a6:7f:
dc:bd:46:0a:77:da:29:6b:e0:61:d7:63:25:c1:55:
2f:e3:f1:38:22:37:18:93:0d:b4:7c:1d:01:f2:86:
e5:30:e0:ca:3a:4a:19:df:8f:c6:a9:99:37:16:12:
ae:f4:ae:e8:cd:85:81:72:4f:10:13:eb:5a:e6:97:
05:a4:0f:5a:bb:6a:79:50:0f:b3:be:9b:cb:44:97:
d7:82:fa:49:68:ef:25:63:30:d3:9d:b9:3e:ee:9f:
69:14:0e:8f:7f:10:80:f8:6b:ab:46:47:a8:e0:ec:
37:fc:38:7b:fa:19:20:e1:25:5b:51:91:83:a8:a4:
de:fe:55:de:24:47:cc:cd:c7:d6:5a:76:0c:8f:e6:
be:f1:53:86:f8:27:63:d0:ec:59:32:f4:e6:6e:a7:
13:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FD:09:74:CA:B8:CA:EA:14:76:C6:FF:52:59:58:A7:B5:11:AD:E5
X509v3 Authority Key Identifier:
keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/7v0JdMq4yuoUdsb_UllYp7URreU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.178.0/24
91.238.114.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:4c:1f:e4:19:49:b0:2f:15:ab:7d:4f:f4:c9:57:d8:3a:72:
f5:e1:9e:e7:c4:67:6e:2d:7d:65:73:60:81:aa:b0:62:ae:78:
1c:e2:80:2a:42:3a:6f:fc:9a:a3:81:2d:00:d4:2c:24:d0:7f:
a4:b6:e9:f5:a6:b5:b4:4f:17:01:ed:b9:80:91:c3:43:94:f8:
b2:a6:7e:3b:8c:5d:41:61:59:41:c6:21:21:17:4a:79:34:44:
b9:88:cc:16:34:f6:d9:fc:65:10:58:d1:cf:0a:f3:a9:b2:24:
0f:5b:5b:95:ba:eb:5b:6c:b5:1d:18:f1:fa:5f:c6:ee:e5:84:
22:b6:00:c9:77:92:4e:61:23:a9:23:6c:1d:51:ce:7e:46:e8:
ae:93:84:a2:96:b6:62:f0:f5:fc:29:b1:de:e1:42:d3:45:95:
e5:fc:16:5c:30:10:79:5d:bd:52:20:43:15:32:a6:62:2b:1b:
69:1d:c7:c7:c2:07:da:23:e7:d6:ec:c0:37:68:08:47:b4:e1:
0e:57:a4:ad:2d:73:59:80:a5:d2:5f:33:59:79:16:a6:fb:b2:
e8:4c:5c:5a:88:fd:c2:45:dd:73:15:a8:7c:34:b0:cf:26:13:
cc:14:4a:21:17:53:fe:6e:c4:e1:29:ce:4d:fe:dd:b9:96:7a:
ab:83:93:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:55 2024 by rpki-client on console-ams.rpki-client.org