Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/b28mPY97YEA2raLRLJUAnZnz3OU.roa
File: b28mPY97YEA2raLRLJUAnZnz3OU.roa (raw, json)
Hash identifier: yM8Qykn9kJE/DaO7CVf95frSC8u+Ce4ILDRfaFcW0N4=
Subject key identifier: 6F:6F:26:3D:8F:7B:60:40:36:AD:A2:D1:2C:95:00:9D:99:F3:DC:E5
Certificate issuer: /CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Certificate serial: 01856C53D5155021ED1D164C88A2FFDCDED3
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/b28mPY97YEA2raLRLJUAnZnz3OU.roa
Signing time: Sun 01 Jan 2023 07:55:11 +0000
ROA not before: Sun 01 Jan 2023 07:55:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55933
IP address blocks: 45.153.128.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:d5:15:50:21:ed:1d:16:4c:88:a2:ff:dc:de:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Validity
Not Before: Jan 1 07:55:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f6f263d8f7b604036ada2d12c95009d99f3dce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6c:e2:92:7b:df:48:60:73:99:fe:13:90:b3:
66:b7:ed:39:4a:88:89:23:b8:53:df:57:9d:65:bb:
40:bf:18:83:e7:05:e5:5d:ef:28:48:c0:c7:1c:24:
a1:41:43:2f:da:ae:91:a3:48:f6:5e:38:27:51:0c:
97:89:df:1c:b3:78:fc:16:16:22:f8:f7:c3:43:2f:
4b:e9:81:2d:34:fe:ec:8b:94:ec:56:13:2d:e7:00:
ad:79:2e:40:ad:46:b1:db:6a:c4:1c:cd:18:61:e5:
a3:d3:69:3a:d9:65:a4:44:03:f2:56:aa:6c:8d:74:
a2:56:ca:76:3d:b0:3a:f7:05:82:8d:93:a8:9a:af:
96:d6:1b:b1:25:ac:36:1f:81:d3:c2:19:6d:5b:78:
fd:43:68:1f:d5:cf:cb:f4:b0:50:70:01:05:85:65:
7e:eb:3b:03:68:dc:90:84:a7:57:9b:be:a7:b1:eb:
ad:8d:75:af:00:52:a8:9c:cc:a9:85:1d:16:64:9d:
f3:ec:7d:2f:65:0c:2a:cf:8a:92:f8:df:ad:10:58:
e5:a6:1b:b3:e7:d6:92:03:5a:82:8a:51:d6:82:74:
a0:a3:a8:cc:da:7d:c5:3c:a6:d5:32:6b:37:80:a3:
ee:d6:0f:01:92:58:a3:31:8d:a2:cf:4d:dc:93:56:
22:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6F:26:3D:8F:7B:60:40:36:AD:A2:D1:2C:95:00:9D:99:F3:DC:E5
X509v3 Authority Key Identifier:
keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/b28mPY97YEA2raLRLJUAnZnz3OU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.128.0/22
Signature Algorithm: sha256WithRSAEncryption
d3:db:4a:41:7d:f3:1a:b3:f3:33:08:1e:1e:e6:4f:ec:7f:b3:
25:6d:97:f8:42:82:20:de:2c:4c:e5:bc:f7:40:63:94:56:9b:
26:9e:84:b2:01:90:5f:e8:d1:15:d6:7c:ba:6b:02:90:dc:f2:
b0:58:b1:04:48:34:4e:3d:a2:61:72:76:11:a1:b8:24:3c:92:
8c:b2:04:cd:13:2c:94:af:6d:b3:10:ee:2a:2e:ea:1d:88:79:
3c:60:50:2c:5c:b5:32:29:91:87:42:d1:d9:e7:24:5b:42:51:
c9:3b:73:af:88:92:48:f4:d0:ed:06:5a:a0:cd:23:54:11:19:
91:f8:af:32:58:f3:4c:2f:47:51:96:52:8f:f1:7a:10:c5:e2:
fe:6e:b8:dd:f8:aa:5a:84:7b:d4:8c:74:8a:ad:35:c4:36:9f:
6c:e1:fa:d2:0b:a3:92:c6:73:da:c8:71:07:ec:42:82:d0:0b:
84:4d:e8:3f:fe:ca:b2:3e:d2:70:02:75:6f:ba:15:80:5e:7d:
5d:7f:a0:ad:ad:3c:f5:22:22:9e:d3:6f:04:9f:3b:c1:c1:91:
24:ff:ff:58:81:0d:4a:3b:3b:65:e5:09:92:fb:3b:0d:91:01:
8f:b7:11:97:7e:ae:cb:ef:76:24:92:81:79:5d:43:07:88:d0:
76:2b:f1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:13 2024 by rpki-client on console-fra.rpki-client.org