Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/clP4Fn5EyXFWg9pfxDUbSS37mAU.roa
File: clP4Fn5EyXFWg9pfxDUbSS37mAU.roa (raw, json)
Hash identifier: YdUZzW5Bt7H9z0PpZuPdcaNkX09P8b6KOfWYEunpHSE=
Subject key identifier: 72:53:F8:16:7E:44:C9:71:56:83:DA:5F:C4:35:1B:49:2D:FB:98:05
Certificate issuer: /CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Certificate serial: 01856C53D1DD0C8AAD66498492E83E9E58CE
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/clP4Fn5EyXFWg9pfxDUbSS37mAU.roa
Signing time: Sun 01 Jan 2023 07:55:10 +0000
ROA not before: Sun 01 Jan 2023 07:55:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 45.153.124.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:d1:dd:0c:8a:ad:66:49:84:92:e8:3e:9e:58:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Validity
Not Before: Jan 1 07:55:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7253f8167e44c9715683da5fc4351b492dfb9805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d5:b9:71:2b:55:d6:66:d6:db:ba:d8:9b:1c:
e3:63:2f:09:2a:93:f8:a6:e1:cc:57:e1:ec:bc:ee:
84:a4:7e:91:cb:92:1e:ff:39:86:ff:0c:6c:98:75:
43:40:48:02:61:49:2e:4f:94:62:b8:42:c3:dc:66:
67:a8:5d:7a:cf:d8:14:81:6d:e4:c1:4a:64:17:36:
ee:f4:0b:94:08:b2:5e:96:f8:ad:64:cf:a7:94:c4:
41:91:43:77:f5:c3:96:f7:4b:4c:46:5d:3a:51:c8:
35:7a:55:6e:9e:27:8e:17:87:22:ec:06:e8:32:1b:
47:ea:fe:49:c2:4b:06:c2:20:f5:ae:cf:d9:fa:24:
cd:c1:60:8c:66:14:fb:39:48:09:05:23:e6:01:f7:
37:80:a9:70:35:7f:03:03:c4:6c:26:3c:a4:d1:90:
a4:33:a1:c4:22:26:34:e1:1a:b2:d4:63:4d:16:32:
c5:cc:ce:83:d1:0e:da:6c:a5:6d:fd:4b:c3:5e:08:
34:f7:ff:e9:06:80:c8:4b:6d:41:53:41:d1:89:1a:
2c:10:6e:e5:f9:27:28:a0:3d:e7:2c:b9:90:16:f8:
89:db:26:3c:dc:60:33:08:9f:33:fd:99:46:d3:4b:
29:93:ca:d3:22:52:3a:4a:5f:e8:3e:b0:c0:7f:b8:
86:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:53:F8:16:7E:44:C9:71:56:83:DA:5F:C4:35:1B:49:2D:FB:98:05
X509v3 Authority Key Identifier:
keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/clP4Fn5EyXFWg9pfxDUbSS37mAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.124.0/24
Signature Algorithm: sha256WithRSAEncryption
08:a6:3d:72:b8:5a:07:57:77:d1:95:ae:68:85:6b:7e:8b:52:
9a:08:3a:39:0f:63:e2:89:97:f5:74:6a:cb:1b:89:ad:ff:f0:
2b:7e:31:1c:99:a6:38:a6:6b:1d:10:c3:67:47:34:a3:92:01:
02:03:51:29:d5:e9:cc:ce:1f:d7:e7:d4:fe:fc:a0:45:f1:42:
a2:2b:73:99:02:1d:5b:20:9f:bf:d9:79:23:07:3f:83:be:74:
dc:74:1e:39:3c:3c:3f:69:bb:b4:1d:4b:a8:58:99:90:b5:91:
2e:46:ff:c6:bf:ec:1d:70:52:27:b9:29:27:16:7e:c2:5a:00:
45:e0:e5:2f:1f:cc:10:20:87:2c:5b:bc:94:70:cc:48:b5:f5:
23:79:f8:ae:4a:4e:8c:6f:d4:90:2a:9f:4c:76:67:06:cf:06:
1e:98:b0:90:fb:d2:02:c9:86:7a:57:2c:15:10:20:56:89:8c:
b0:bd:5b:a6:c4:87:76:d1:48:41:6d:e6:8e:00:6c:78:a3:ab:
1a:27:dd:be:1f:26:6f:4d:b3:5e:e7:84:d0:3e:c4:ba:1d:39:
1a:5b:73:4b:98:a2:0f:96:8b:56:34:12:d9:6d:92:18:f1:2d:
82:b7:b9:a4:72:e3:e3:3e:b8:59:72:25:a2:23:1c:b6:77:05:
9f:58:8c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:20 2023 by rpki-client on console-ams.rpki-client.org