Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/CeVs17mm5sKD1xJcFzlStnIsagM.roa
File: CeVs17mm5sKD1xJcFzlStnIsagM.roa (raw, json)
Hash identifier: ItIXf3V4pG16HSzmB62gC9Mkyl3hB4zLWNp/viijVhA=
Subject key identifier: 09:E5:6C:D7:B9:A6:E6:C2:83:D7:12:5C:17:39:52:B6:72:2C:6A:03
Certificate issuer: /CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Certificate serial: 01856C53D6005D897075411C434C9ECF20A6
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/CeVs17mm5sKD1xJcFzlStnIsagM.roa
Signing time: Sun 01 Jan 2023 07:55:11 +0000
ROA not before: Sun 01 Jan 2023 07:55:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 133199
IP address blocks: 45.144.139.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:d6:00:5d:89:70:75:41:1c:43:4c:9e:cf:20:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Validity
Not Before: Jan 1 07:55:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09e56cd7b9a6e6c283d7125c173952b6722c6a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ec:0f:69:b8:45:f4:12:db:71:75:47:e1:24:
da:6e:c3:68:20:78:df:5f:bc:dd:6a:c1:45:e3:d2:
84:c2:09:3e:10:12:8e:13:81:5c:d2:c9:51:98:e6:
14:cb:16:2f:94:93:4d:c4:00:e0:ce:4f:b1:47:c2:
18:34:09:bc:5c:5c:a7:fb:61:38:34:f5:34:3c:44:
74:9f:4d:d2:4a:70:c7:7f:65:a3:40:4a:dc:7d:d3:
84:e6:dd:3d:74:00:57:71:d4:fd:f7:55:44:f6:2b:
27:2d:18:79:4b:2d:86:71:84:a9:88:56:0b:da:8d:
69:0a:73:b3:d7:82:88:cc:02:97:63:99:dd:49:62:
bb:03:b0:fb:26:e1:f0:64:c1:c4:20:d3:02:bc:2d:
52:ea:22:39:d4:70:31:62:12:29:f6:b3:23:e2:60:
12:2d:80:ee:76:38:c8:41:e1:09:9a:26:72:86:f3:
c7:87:7a:ef:e6:3b:2f:70:43:3a:cb:7b:93:dd:b2:
ae:68:09:3f:45:d1:ed:eb:7f:40:d8:e0:2e:51:cd:
f8:8f:9f:d6:f3:06:e7:84:d7:f8:0d:17:db:b8:99:
96:a9:ff:f6:e4:70:35:da:35:98:28:12:97:7d:4c:
34:89:e5:13:b1:ed:a6:fd:ff:f6:da:8f:91:9d:32:
9f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E5:6C:D7:B9:A6:E6:C2:83:D7:12:5C:17:39:52:B6:72:2C:6A:03
X509v3 Authority Key Identifier:
keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/CeVs17mm5sKD1xJcFzlStnIsagM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.139.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:8b:f3:77:6c:60:77:65:f7:60:1d:ad:03:bb:a7:47:dc:54:
f5:74:3d:d8:db:a6:4e:4a:8f:17:b3:1c:6f:a9:9f:65:a5:70:
b1:b2:be:4b:41:75:57:bd:c4:94:f4:b1:00:70:0b:62:34:d9:
bf:ce:d3:2a:ad:64:ea:cd:89:a7:73:e7:2c:8d:63:cd:5b:2e:
d1:6a:3e:98:56:24:f5:63:85:f8:b5:35:87:10:d6:ea:77:7d:
61:68:f8:cc:63:02:04:ea:82:37:d0:1f:66:60:8c:f2:59:fb:
6c:db:1c:cc:46:2e:ef:57:bb:11:ae:a3:5b:53:b3:b0:91:a8:
f0:8b:a7:48:02:e5:44:6f:05:98:7f:4a:be:7a:88:51:38:65:
0c:f9:9d:d3:48:22:75:dd:e3:08:26:c1:05:41:52:57:51:f2:
f1:ea:3e:52:92:06:5f:70:ca:6d:b7:3a:55:d9:49:c1:f7:43:
07:59:70:27:d8:bb:73:80:45:e4:e0:3c:79:25:e0:25:54:5b:
0b:bf:f9:10:95:b7:80:72:75:9f:0f:7e:4a:f3:6b:96:7f:2c:
61:3c:cb:f2:3a:1a:d6:b3:66:11:64:ee:3f:34:d5:4e:e1:d8:
f0:18:b5:40:a5:5e:f9:3f:19:37:a5:8e:82:4a:bb:fc:c2:08:
ed:16:b7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:19 2023 by rpki-client on console-ams.rpki-client.org