Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/PDsaFoVmthsX2lkjgyX9eORTk4Q.roa
File: PDsaFoVmthsX2lkjgyX9eORTk4Q.roa (raw, json)
Hash identifier: HMKNryhB1ExGoNeHVabL3+5PGyLkdo5ifpTl7GRU3bA=
Subject key identifier: 3C:3B:1A:16:85:66:B6:1B:17:DA:59:23:83:25:FD:78:E4:53:93:84
Certificate issuer: /CN=a3020ae96b5f0c5b7339e6154dcec6f16cb63f5a
Certificate serial: 0189AC8B22A9A035C61C979E34C6515CE10D
Authority key identifier: A3:02:0A:E9:6B:5F:0C:5B:73:39:E6:15:4D:CE:C6:F1:6C:B6:3F:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/PDsaFoVmthsX2lkjgyX9eORTk4Q.roa
Signing time: Mon 31 Jul 2023 15:22:26 +0000
ROA not before: Mon 31 Jul 2023 15:22:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208873
IP address blocks: 45.81.156.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ac:8b:22:a9:a0:35:c6:1c:97:9e:34:c6:51:5c:e1:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3020ae96b5f0c5b7339e6154dcec6f16cb63f5a
Validity
Not Before: Jul 31 15:22:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c3b1a168566b61b17da59238325fd78e4539384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:20:7e:b0:4e:e6:d7:af:bc:70:9a:8e:1a:55:
75:54:08:ec:f4:f5:c4:90:0a:d6:b4:b8:cb:af:33:
6e:81:e7:a7:1a:e9:8e:d2:cb:e9:36:61:fc:a8:4e:
7c:67:c9:e9:8d:6e:3a:6f:66:c7:d6:ce:49:cb:50:
a4:ae:bd:5e:4a:d6:91:03:65:2f:29:9d:a6:45:ab:
b4:07:ca:4d:6d:64:84:5f:b6:a4:fa:94:9a:54:68:
8b:ef:5b:d9:b5:56:bc:59:1e:cb:a2:1b:92:21:3e:
90:0e:7b:2f:5e:90:fd:0a:7e:e4:25:ce:91:dd:1c:
92:8e:37:3a:cf:6f:a1:c2:49:f6:73:59:bb:25:07:
f1:37:ca:99:b9:74:d7:e9:f5:ee:7b:b1:99:ae:42:
9d:c4:d4:f9:71:95:3a:ee:db:83:aa:65:58:8b:cd:
ab:4f:a8:45:a3:52:8e:2a:4e:f7:9a:77:94:4e:01:
0c:79:a4:c8:09:05:33:63:45:f8:c2:76:6f:14:c8:
6c:cb:27:5a:f8:53:2e:0b:19:27:89:de:e0:01:50:
d1:0c:73:bb:b4:33:2e:d1:cd:cf:00:31:81:88:c1:
f6:d1:ef:18:76:2b:f2:66:27:45:1d:22:c6:fa:6f:
f1:79:97:f6:9f:f3:aa:ea:9e:d8:2b:4b:92:69:1e:
e5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3B:1A:16:85:66:B6:1B:17:DA:59:23:83:25:FD:78:E4:53:93:84
X509v3 Authority Key Identifier:
keyid:A3:02:0A:E9:6B:5F:0C:5B:73:39:E6:15:4D:CE:C6:F1:6C:B6:3F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/PDsaFoVmthsX2lkjgyX9eORTk4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.156.0/23
Signature Algorithm: sha256WithRSAEncryption
70:99:69:29:52:d5:76:1f:eb:66:99:56:64:40:4e:9f:5a:ec:
b3:47:af:3f:dd:8a:e5:64:d8:be:9b:69:c5:b2:fa:4e:6f:ad:
45:65:77:9b:47:de:ea:df:ee:f8:19:b2:d2:af:1e:ec:73:3c:
f7:6f:ff:66:3e:b5:d0:6a:a1:e2:dd:ad:2d:c7:9a:7f:70:38:
2b:a2:f6:02:0e:b1:f9:04:1f:fb:10:72:a5:e5:57:1b:41:63:
33:73:24:76:f5:a6:26:a2:89:0e:9a:a8:da:50:58:ac:b4:a7:
98:d2:4c:80:01:b1:ba:82:d6:6c:11:24:11:95:2f:ec:a0:8d:
39:3f:ac:ea:ac:bd:bc:c2:5e:e6:37:d3:f7:e9:55:7c:df:cc:
03:f1:ed:c8:ed:95:98:d6:13:f7:8a:35:f7:00:e8:a2:5e:9f:
ee:73:3d:ea:f7:d5:e9:dd:03:bc:0b:6e:9b:a1:1c:7c:b0:46:
f8:e8:b7:c0:ac:e1:9f:fc:2c:f8:b2:b1:9a:4f:92:ba:e9:41:
5b:7a:2c:34:35:a9:c0:6f:a6:b8:f1:2f:27:40:a0:60:4f:2d:
16:10:60:80:d5:21:62:f7:34:78:74:23:72:8b:f0:de:66:05:
0d:d5:64:b8:21:25:0e:80:86:9c:fa:20:88:c8:6f:98:a5:47:
c5:4c:ec:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 19 08:50:49 2023 by rpki-client on console-fra.rpki-client.org