Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/O3TNvYV6TbYHh3wl0n6g734uplQ.roa
File: O3TNvYV6TbYHh3wl0n6g734uplQ.roa (raw, json)
Hash identifier: 6GskY7ZA/NvpAdtGYpvaGGIHKD8pml+OBo0SQ+ezmrg=
Subject key identifier: 3B:74:CD:BD:85:7A:4D:B6:07:87:7C:25:D2:7E:A0:EF:7E:2E:A6:54
Certificate issuer: /CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Certificate serial: 018B677F457ACE9F74DDE8D1A54E4B28B3E5
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/O3TNvYV6TbYHh3wl0n6g734uplQ.roa
Signing time: Wed 25 Oct 2023 15:41:15 +0000
ROA not before: Wed 25 Oct 2023 15:41:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.153.124.0/24 maxlen: 24
91.217.162.0/24 maxlen: 24
91.217.167.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:67:7f:45:7a:ce:9f:74:dd:e8:d1:a5:4e:4b:28:b3:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Validity
Not Before: Oct 25 15:41:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b74cdbd857a4db607877c25d27ea0ef7e2ea654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:63:d6:d8:92:64:c7:45:d2:d3:dc:cd:93:38:
1a:b5:8b:8c:61:df:fe:a2:e5:9b:3a:57:d2:a5:50:
1c:8b:b9:04:59:22:0e:d5:a6:c4:79:d3:ba:55:59:
33:6c:1a:f9:62:02:b7:35:26:b8:2c:3d:07:c6:55:
f3:fd:92:39:1a:43:50:a1:92:ee:0d:d5:db:46:1c:
9c:f2:66:9c:76:fe:4a:b0:6f:0c:7b:cb:87:86:9f:
83:43:c2:30:5c:52:04:41:aa:41:93:41:f7:bd:12:
de:b7:58:c1:55:31:01:2b:e6:c2:b0:46:b1:8a:cf:
13:b8:ca:8f:f3:bc:5f:0d:ea:79:b6:17:d2:39:fb:
44:8c:a2:ae:e3:b4:87:a5:6e:91:02:36:4a:be:05:
6b:49:8f:43:91:1a:6d:1f:30:23:d7:1a:e4:68:30:
b7:7c:31:3f:b9:d2:47:c9:1a:bf:a1:48:1f:7f:b8:
09:dd:fd:e8:1b:50:c1:ec:2d:76:4d:91:48:ae:18:
7e:71:42:06:33:80:32:0d:90:92:da:9c:e9:7d:e5:
bc:d2:fe:b9:4e:39:2c:2d:62:77:95:2d:1c:e9:de:
ca:29:0e:24:a8:bb:18:75:30:94:02:f3:94:18:ad:
dc:1a:95:f7:e6:ae:cd:7f:ed:b7:cf:4d:c8:1f:89:
22:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:74:CD:BD:85:7A:4D:B6:07:87:7C:25:D2:7E:A0:EF:7E:2E:A6:54
X509v3 Authority Key Identifier:
keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/O3TNvYV6TbYHh3wl0n6g734uplQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.124.0/24
91.217.162.0/24
91.217.167.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:5b:d4:7a:7e:4f:32:86:3b:d1:e2:e1:50:c8:7b:d7:1f:ac:
f5:3c:fb:aa:43:1a:1f:8b:55:d7:de:25:8e:80:fc:6a:c6:2e:
3b:0b:6c:0e:db:0e:13:b6:18:9d:72:9c:70:ec:bb:8e:a9:74:
3f:b8:e0:d0:9e:91:2a:b2:00:c4:6e:43:78:52:5c:02:3a:95:
24:94:43:48:12:21:24:9e:b8:9c:2a:32:27:6f:0c:d0:c0:3a:
b0:c1:fe:06:2b:8a:c6:7a:8c:f4:64:23:37:95:86:89:af:bf:
1e:6a:47:18:46:50:c7:93:27:83:76:82:1b:a7:0c:80:bc:d7:
dc:6b:d1:9b:08:9d:da:d6:4d:74:6a:92:db:81:84:58:71:38:
05:9c:a5:13:30:a9:18:66:82:d7:9b:af:51:1b:3a:bc:40:bc:
b9:27:57:73:15:dc:de:49:ed:d3:ed:c1:05:7d:57:46:24:3a:
6e:11:1c:ae:45:26:bc:b5:60:83:ab:f8:11:59:8f:cd:ee:cd:
2c:25:3d:24:e8:02:9c:47:aa:c7:71:0d:73:dd:f9:a3:b4:d3:
e7:4e:46:da:26:84:4c:49:41:15:26:51:64:36:09:19:91:82:
01:a3:db:50:6e:57:be:b5:e1:12:2a:4a:be:52:fa:93:03:d8:
7f:35:24:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 17 15:31:35 2023 by rpki-client on console-ams.rpki-client.org