Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/A505gvEV5V5nTeAaYmNitk4Iebo.roa
File: A505gvEV5V5nTeAaYmNitk4Iebo.roa (raw, json)
Hash identifier: 8wLB0Ro6+ldogNWz1OF3HAoWRpU21Rwv39dAVg28nJE=
Subject key identifier: 03:9D:39:82:F1:15:E5:5E:67:4D:E0:1A:62:63:62:B6:4E:08:79:BA
Certificate issuer: /CN=a1a01f76a42be8717befdce1676215988a4dfc73
Certificate serial: 018573BAC1A7715065BBEF6DC27ED1B5E4FF
Authority key identifier: A1:A0:1F:76:A4:2B:E8:71:7B:EF:DC:E1:67:62:15:98:8A:4D:FC:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaAfdqQr6HF779zhZ2IVmIpN_HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/A505gvEV5V5nTeAaYmNitk4Iebo.roa
Signing time: Mon 02 Jan 2023 18:24:57 +0000
ROA not before: Mon 02 Jan 2023 18:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205960
IP address blocks: 45.142.153.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:ba:c1:a7:71:50:65:bb:ef:6d:c2:7e:d1:b5:e4:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a01f76a42be8717befdce1676215988a4dfc73
Validity
Not Before: Jan 2 18:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=039d3982f115e55e674de01a626362b64e0879ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6b:b5:6c:1a:3c:3b:80:1c:32:28:78:29:48:
55:be:de:9c:d2:bf:ba:4f:9e:b5:0c:1c:6b:3a:2c:
a5:d8:55:1e:4c:4f:ce:ca:56:cd:d8:7b:15:19:1f:
73:d1:08:1d:48:61:83:60:b6:df:99:27:c2:5b:d1:
ba:5b:e2:cb:64:96:f7:f5:62:f1:29:23:fd:6d:db:
ba:d0:a1:5b:dc:19:f3:b4:49:aa:54:9e:98:62:9f:
27:8f:68:94:78:e6:3a:f8:39:d7:bd:17:f9:3c:92:
9d:89:a6:22:46:a5:02:a2:58:88:ae:bb:ba:6f:08:
4d:e1:88:a1:28:b5:ae:dc:25:2f:4e:b9:7d:4e:82:
5c:d2:ac:21:99:df:24:fc:79:1b:32:a4:b0:45:1c:
8a:13:88:fd:a9:03:a4:3b:1e:20:29:f1:e4:95:57:
00:b2:48:5b:c8:a2:bb:ed:72:8a:36:0e:22:1c:76:
df:88:16:d5:3b:3a:a1:67:b4:1c:c4:4d:eb:63:97:
c9:14:5d:60:f3:d6:21:78:e1:27:20:3c:9a:ca:0c:
c3:73:3c:b6:2a:3c:5d:ef:1d:27:b9:bd:6f:ea:68:
20:ce:e3:d6:c6:ad:00:8b:e2:46:e9:f3:74:15:7a:
c8:c1:ea:cd:60:08:a2:8f:8d:a0:9c:f7:15:c2:2c:
18:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9D:39:82:F1:15:E5:5E:67:4D:E0:1A:62:63:62:B6:4E:08:79:BA
X509v3 Authority Key Identifier:
keyid:A1:A0:1F:76:A4:2B:E8:71:7B:EF:DC:E1:67:62:15:98:8A:4D:FC:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaAfdqQr6HF779zhZ2IVmIpN_HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/A505gvEV5V5nTeAaYmNitk4Iebo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/oaAfdqQr6HF779zhZ2IVmIpN_HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.153.0/24
Signature Algorithm: sha256WithRSAEncryption
94:04:14:71:76:03:6a:c9:8d:7f:3c:e6:64:cf:f2:3a:63:6e:
8e:f7:ec:6e:c2:87:12:26:88:aa:1e:ba:a0:99:2d:99:54:f7:
c1:27:df:fc:5a:c7:4e:76:bf:1c:b6:9e:84:8e:09:b7:0f:ce:
02:8a:96:f9:80:e8:67:df:6a:5f:6b:16:16:d7:53:0a:2e:2f:
21:14:84:c4:0d:26:de:4e:25:28:c1:82:38:44:3d:f2:7b:93:
95:4b:e8:0d:f2:63:be:31:3b:d5:09:63:95:04:65:30:0d:34:
b7:80:1f:92:70:c8:bf:6a:5e:53:55:3b:ad:d5:db:24:cd:95:
59:32:ba:06:ea:3b:f3:62:81:99:f8:f3:3d:fe:1d:b7:72:f9:
0e:fc:9b:55:52:37:01:47:39:b5:2f:f1:29:d0:07:ba:cb:8b:
9d:62:61:fa:78:af:8f:3d:c5:5a:9a:39:f8:7b:2b:fa:bc:cb:
07:5d:5b:0b:cb:08:99:70:f1:14:2b:2d:af:92:3a:24:fe:3b:
d9:7f:60:c8:86:a2:9e:17:e7:55:29:95:0e:1f:a3:1c:85:5d:
36:27:ef:8f:f6:07:bb:f0:fc:33:d7:f3:55:2b:90:40:d5:cf:
c4:13:dd:1e:c4:df:69:d8:68:49:91:ed:95:b6:2b:4f:c7:12:
9a:c7:0c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 7 17:27:09 2023 by rpki-client on console-fra.rpki-client.org