Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/R19oMj-JdbTUoKfSydB8YTm_-00.roa
File: R19oMj-JdbTUoKfSydB8YTm_-00.roa (raw, json)
Hash identifier: OLZ/9NEsShgDuDw+jLG1PmbgKAXwtxDwDF7WEPJA3Tg=
Subject key identifier: 47:5F:68:32:3F:89:75:B4:D4:A0:A7:D2:C9:D0:7C:61:39:BF:FB:4D
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0188A11342CD21BD7F75E9A7DC3F22FF9290
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/R19oMj-JdbTUoKfSydB8YTm_-00.roa
Signing time: Fri 09 Jun 2023 16:52:54 +0000
ROA not before: Fri 09 Jun 2023 16:52:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212815
IP address blocks: 45.154.96.0/24 maxlen: 24
45.13.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a1:13:42:cd:21:bd:7f:75:e9:a7:dc:3f:22:ff:92:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jun 9 16:52:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=475f68323f8975b4d4a0a7d2c9d07c6139bffb4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:35:0d:e9:c7:db:63:02:37:f5:ef:70:50:96:
ab:c4:bb:54:3a:6a:df:7a:e6:a1:55:fb:82:d0:7a:
6c:16:f9:01:db:c5:ed:3f:fc:29:59:14:ac:e1:fb:
ba:08:19:36:fa:d5:47:9e:45:c8:7f:eb:71:f4:98:
ce:83:07:b5:5d:0b:6c:b9:e2:8b:4c:dc:ec:1e:3a:
2f:c4:ba:ec:b8:ca:13:13:f9:7c:b5:0d:39:b1:87:
78:21:c7:c4:64:02:1e:a4:5a:69:4c:24:2d:0e:9d:
07:03:4d:cf:84:ab:57:f1:9b:c7:05:0a:a8:cf:8d:
1e:3e:b4:32:ed:0a:e5:00:72:94:df:f5:9b:0f:f7:
38:33:08:5e:cd:da:80:fe:9e:ad:82:7f:ea:0a:a3:
64:62:33:3e:51:b8:76:1f:fc:c7:4d:15:f3:5b:00:
e0:da:ca:ec:8b:c8:66:71:71:34:f0:ff:32:be:4e:
08:9b:b5:a3:cd:36:83:c6:29:f6:a0:99:fb:2a:4a:
26:f9:d3:39:67:3c:5f:51:04:ba:46:7c:6e:a7:6e:
94:63:a8:37:90:c9:de:0e:45:c2:d5:8b:87:af:0a:
a8:22:f6:11:9a:ed:52:f8:49:44:0f:d2:ea:89:1b:
86:8f:bc:0d:6c:93:a6:b6:49:d9:0b:39:12:a0:71:
47:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:5F:68:32:3F:89:75:B4:D4:A0:A7:D2:C9:D0:7C:61:39:BF:FB:4D
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/R19oMj-JdbTUoKfSydB8YTm_-00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.119.0/24
45.154.96.0/24
Signature Algorithm: sha256WithRSAEncryption
04:3b:28:11:86:f0:60:b6:56:c2:86:28:79:fc:73:56:18:6c:
52:22:91:f2:48:82:12:45:78:a3:04:b2:64:62:be:d9:c4:3e:
fb:c9:ba:bc:cb:9b:6f:c6:24:5b:85:53:4d:03:2c:93:03:40:
89:0f:52:e1:49:82:c0:37:77:1f:f7:1e:bb:40:e1:4b:02:12:
92:bf:bf:2c:f1:06:e6:38:8a:3a:f7:80:62:cb:16:3e:2d:d3:
8d:4b:81:53:3e:04:c0:bf:85:32:7d:e6:73:90:22:40:68:94:
f1:a2:8b:8a:fd:95:46:2c:1c:25:fb:d0:6f:90:90:09:fb:34:
5d:59:27:50:30:c5:d4:54:7d:73:85:97:e4:61:3b:dd:e1:aa:
92:5f:f4:88:03:4f:5a:3b:62:3e:df:72:ea:1f:5a:e9:7b:67:
01:56:80:f1:d0:7a:f1:2d:f6:c5:27:ce:02:e2:06:e9:5f:39:
5e:0d:5a:65:82:93:5c:69:77:e6:88:29:78:8c:ee:e8:24:32:
17:b9:b5:7a:43:17:18:0b:14:d7:82:19:69:6d:8a:40:27:62:
0f:c4:bd:eb:ec:5a:30:9d:f8:55:de:6f:a1:10:97:b3:9e:33:
40:c7:ed:51:24:80:7a:4d:e1:f7:98:a0:ca:c9:fb:49:1b:42:
90:13:f6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 2 07:49:22 2023 by rpki-client on console-ams.rpki-client.org