Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/VHcsYixjP0teCgUTd3qfhk4ivCU.roa
File: VHcsYixjP0teCgUTd3qfhk4ivCU.roa (raw, json)
Hash identifier: 8yRJdPkl0xQSUjVKNjHHt6POrB/J2bGQmRWNViqHFMI=
Subject key identifier: 54:77:2C:62:2C:63:3F:4B:5E:0A:05:13:77:7A:9F:86:4E:22:BC:25
Certificate issuer: /CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Certificate serial: 01856C53D8D58E4C5AEB1FC7460A03E0E66C
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/VHcsYixjP0teCgUTd3qfhk4ivCU.roa
Signing time: Sun 01 Jan 2023 07:55:12 +0000
ROA not before: Sun 01 Jan 2023 07:55:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 139659
IP address blocks: 45.136.12.0/22 maxlen: 24
45.144.136.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:d8:d5:8e:4c:5a:eb:1f:c7:46:0a:03:e0:e6:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Validity
Not Before: Jan 1 07:55:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54772c622c633f4b5e0a0513777a9f864e22bc25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3f:5f:b7:95:78:3e:1f:8f:eb:61:70:2e:bf:
cd:a8:34:4b:fa:26:76:43:b2:d4:08:6a:f9:96:ad:
5c:c4:51:37:fb:56:bf:a8:ba:9b:5b:5e:ae:b0:b9:
8c:4d:b5:0e:d6:51:7a:98:a5:f9:9f:dd:1b:e5:b2:
a2:b9:15:3e:8a:ec:5c:4d:fd:bb:2a:e6:46:22:2f:
8a:0a:0d:67:9f:7f:bc:71:8c:1c:98:b0:fb:13:aa:
ab:82:a7:9b:09:d9:ff:02:2f:c4:94:c1:a0:7f:f7:
20:10:7a:48:a1:42:d5:34:72:f4:1d:ad:b5:a2:a4:
52:42:6f:68:87:a3:d9:55:be:9e:7e:a6:de:26:9c:
60:ca:02:1a:e7:3a:57:05:51:c5:49:ee:d6:5b:6e:
9f:7a:a0:a4:05:09:b9:cf:db:54:99:14:e1:b5:68:
15:4e:79:fa:41:0f:93:cd:54:f0:1f:01:89:cb:72:
3f:57:b5:3b:ab:a9:36:b6:10:af:35:74:10:ff:28:
71:9f:e1:c4:81:ef:71:25:36:5d:63:47:1e:cc:f9:
2f:32:5e:c6:6c:df:c9:a5:b6:8f:50:95:28:8f:96:
65:13:66:d8:9e:75:c3:6a:6f:1e:30:59:dd:4a:ec:
0a:a2:9e:cf:e2:22:3e:bf:43:ee:cd:d2:64:d7:19:
ff:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:77:2C:62:2C:63:3F:4B:5E:0A:05:13:77:7A:9F:86:4E:22:BC:25
X509v3 Authority Key Identifier:
keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/VHcsYixjP0teCgUTd3qfhk4ivCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.12.0/22
45.144.136.0/22
Signature Algorithm: sha256WithRSAEncryption
48:c5:f0:76:2f:30:5d:00:39:7c:eb:8a:0f:2c:5a:54:2f:3c:
60:17:b9:00:c7:89:86:01:f2:27:8a:60:67:48:1b:a6:2b:b8:
7a:a5:c3:1e:b1:47:31:e1:93:e0:f4:e8:a2:8c:e9:cf:38:15:
56:88:e4:f0:1b:b1:1b:a5:93:3f:a0:db:73:ad:fc:eb:0a:76:
47:13:ba:50:25:3a:cc:9e:33:68:62:89:91:dc:02:d8:b9:2e:
f3:82:2f:6d:2b:87:8f:f7:47:fe:97:03:78:d0:94:93:b3:53:
ca:27:c1:8c:f7:7e:38:6c:8f:05:7d:46:3e:14:a6:d3:6e:35:
90:9f:41:27:77:f6:da:9d:2e:0e:5e:34:b0:08:5c:41:b8:21:
c5:27:ff:1c:9e:17:cd:17:e9:80:5e:b2:68:92:77:5e:7f:f6:
50:66:a4:fd:f3:0b:0b:d9:80:f0:94:48:ec:8e:30:a3:60:ba:
6a:47:88:67:2d:87:ee:a9:09:1f:32:af:9f:93:37:25:49:a4:
1f:6f:de:cb:40:de:7d:f6:65:9f:56:f9:64:d2:62:2e:cd:c7:
d3:89:11:4e:eb:ca:94:5b:eb:eb:e6:d0:01:8a:a7:e6:8f:90:
8b:7a:5b:c9:ff:7e:bc:4e:b6:ce:2c:d9:00:ed:6d:ba:ec:bf:
7a:da:fa:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:13 2024 by rpki-client on console-fra.rpki-client.org