Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/ezXcreLh6CQngGxvM89arTMITwg.roa
File: ezXcreLh6CQngGxvM89arTMITwg.roa (raw, json)
Hash identifier: m1a06HVvtBT7SbyRRDJCPmRSkKwdSeQ7Vhki9uzVhgA=
Subject key identifier: 7B:35:DC:AD:E2:E1:E8:24:27:80:6C:6F:33:CF:5A:AD:33:08:4F:08
Certificate issuer: /CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Certificate serial: 01885DF8C5AE6FC2BBE899EAA4489F12B03A
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/ezXcreLh6CQngGxvM89arTMITwg.roa
Signing time: Sat 27 May 2023 16:09:24 +0000
ROA not before: Sat 27 May 2023 16:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 45.153.124.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5d:f8:c5:ae:6f:c2:bb:e8:99:ea:a4:48:9f:12:b0:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Validity
Not Before: May 27 16:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b35dcade2e1e82427806c6f33cf5aad33084f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:82:28:b2:98:82:af:87:7a:45:5d:a8:34:e1:
aa:96:54:7d:34:9a:f3:8d:bc:c7:30:14:a8:9e:fa:
70:19:9d:ab:a8:e8:b2:00:22:5d:ef:26:bd:c2:ad:
fc:ce:1b:33:3a:4d:c5:a5:ef:23:49:20:4b:f9:a4:
62:06:60:c4:02:33:43:45:ef:43:a3:d6:cb:d8:5a:
f1:4a:17:04:80:16:d7:0b:cc:29:ac:44:a5:d8:d8:
bc:c1:96:5d:a2:a9:4a:ba:0b:e3:94:e4:70:6e:2b:
30:b2:e0:7a:77:0f:41:5e:ba:39:be:5c:f8:8b:47:
20:6a:e3:cc:9e:e9:78:fb:76:85:8a:2d:a5:56:d3:
a0:f8:fa:0e:5c:2b:8a:0c:24:54:3f:d8:cd:07:a4:
5f:29:a8:f0:15:64:99:47:79:34:b4:8b:b7:da:00:
7a:e9:36:58:2d:9d:8d:73:6a:ad:b4:35:d9:c1:0e:
a9:1c:db:b6:82:cc:ed:99:db:a3:34:8c:80:c5:ff:
75:5e:a3:ab:12:59:99:98:b8:b7:64:be:f2:ec:e4:
56:6d:b1:ea:e1:d7:a6:e3:9a:61:a1:19:15:54:cd:
41:fc:40:1d:df:f4:e9:34:47:ad:b3:9e:5e:f3:d9:
3f:94:9c:82:af:d6:74:32:36:0d:9d:20:6c:d8:93:
3c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:35:DC:AD:E2:E1:E8:24:27:80:6C:6F:33:CF:5A:AD:33:08:4F:08
X509v3 Authority Key Identifier:
keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/ezXcreLh6CQngGxvM89arTMITwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.124.0/24
Signature Algorithm: sha256WithRSAEncryption
38:e6:04:88:74:7f:a0:64:47:0c:4b:ba:75:3a:3d:02:e4:f4:
cb:1d:88:7d:2f:65:8a:af:b5:4b:eb:80:44:18:6e:dd:43:fe:
2d:1b:d3:6e:d0:4b:34:82:16:6e:13:42:71:c7:00:83:12:83:
f6:42:79:73:95:4a:84:e7:c3:34:b1:0a:6a:2f:87:13:a5:3d:
c8:74:34:ea:32:a8:c4:69:9d:f1:61:01:9a:0e:bc:24:99:82:
f5:38:e4:cf:b6:af:d5:68:6f:1e:b9:41:36:19:1a:f2:86:6c:
12:fe:eb:5a:63:b2:1b:52:b7:76:03:be:2e:eb:04:c6:b6:e0:
57:cd:99:cb:9b:b0:f6:94:57:e4:f0:28:e5:f9:9d:f9:b8:f7:
8f:85:31:cb:33:7b:72:16:84:ca:b5:12:a9:5a:72:d0:e8:13:
77:87:12:bb:7c:af:5a:56:16:84:a4:e6:e2:7a:4a:08:4a:13:
a1:0a:79:8c:b9:87:f9:af:a4:2f:d0:bb:f2:07:3c:06:5a:b1:
1f:f0:3b:73:2a:ad:10:cc:40:08:1e:9c:e5:0c:8d:86:35:3e:
d8:49:9f:f9:c9:53:59:f4:3d:cc:c2:ab:9e:ed:ab:1b:c6:f1:
83:83:b1:bd:ac:e7:a5:9e:84:7b:a8:6f:52:41:54:c6:8b:ac:
39:20:16:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:31 2023 by rpki-client on console-fra.rpki-client.org