Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/75ckrhiSA5wb9WDxoaurY_MeYmE.roa
File: 75ckrhiSA5wb9WDxoaurY_MeYmE.roa (raw, json)
Hash identifier: /+Bc44j9H2ANLwj1I0GjP/HMM9kXbSVFk+U/P5unWHU=
Subject key identifier: EF:97:24:AE:18:92:03:9C:1B:F5:60:F1:A1:AB:AB:63:F3:1E:62:61
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 01856ED4BB261DFAAF81A5E00B966E61A432
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/75ckrhiSA5wb9WDxoaurY_MeYmE.roa
Signing time: Sun 01 Jan 2023 19:35:13 +0000
ROA not before: Sun 01 Jan 2023 19:35:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 45.154.159.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:bb:26:1d:fa:af:81:a5:e0:0b:96:6e:61:a4:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jan 1 19:35:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef9724ae1892039c1bf560f1a1abab63f31e6261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:83:19:ea:37:f7:22:12:84:94:82:b9:ce:1f:
9a:00:34:58:cf:9c:6e:fd:d4:48:13:8c:a3:e1:57:
8a:47:71:0b:57:c7:ed:79:ba:bf:7a:07:4a:3f:3f:
4f:77:59:19:29:d1:d8:c7:bb:dc:fb:6d:cf:2d:64:
72:00:27:a4:65:c5:32:3c:7f:c4:24:91:03:f9:02:
83:3e:b8:b2:a4:9b:7e:6c:0a:70:f1:54:81:a6:d0:
e0:7d:fd:5e:7e:13:29:d3:fc:81:5e:e3:42:a5:00:
eb:70:39:e7:a2:f6:c7:b3:58:52:67:ad:e6:b0:05:
af:be:b2:bc:ba:4b:bf:2b:6c:28:5f:e6:68:3a:aa:
31:07:7a:37:7b:dc:8d:af:1d:3d:10:e1:7c:cf:70:
34:e0:3c:f6:2e:aa:f5:08:09:98:a0:05:f3:e6:5d:
2c:6f:db:0f:d3:a9:63:e1:5e:c4:d8:ff:b3:d9:5f:
87:90:83:40:c5:4d:8a:44:8c:a1:24:84:3f:44:a3:
76:e4:1e:61:9b:9b:33:25:1f:e2:12:26:71:ec:0a:
1a:da:10:af:f3:17:a9:56:c8:63:46:cc:f9:d1:20:
c6:b8:40:e4:71:6c:d5:d9:af:9f:42:c8:54:77:42:
df:35:7a:0b:59:a8:72:56:53:e4:ba:de:e3:8a:8d:
ca:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:97:24:AE:18:92:03:9C:1B:F5:60:F1:A1:AB:AB:63:F3:1E:62:61
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/75ckrhiSA5wb9WDxoaurY_MeYmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.159.0/24
Signature Algorithm: sha256WithRSAEncryption
60:a0:c3:91:b0:42:9a:03:1f:53:46:c0:ad:b7:02:b1:a3:7a:
b1:2f:f0:f8:42:42:79:6d:73:98:cd:41:b2:3d:0e:bf:db:fb:
e7:53:87:7a:f9:9e:7e:b5:50:3a:1c:43:61:87:da:96:4f:f3:
f2:95:e5:34:32:d6:41:d3:73:47:06:2b:38:df:c9:6a:56:12:
f5:e6:fe:a0:53:7b:f0:47:37:72:23:fb:84:04:34:f8:f8:e2:
40:2f:75:a2:66:82:70:2d:6f:06:d9:65:fe:65:ae:ec:cb:e2:
2f:0e:3b:0f:db:9e:b4:64:2e:4e:d2:a4:fe:37:4a:d2:2a:2f:
57:48:1d:e6:4c:a0:ec:70:5c:3b:7a:33:a8:3b:96:09:ad:40:
00:a4:d6:05:a5:6f:cc:d4:f6:00:63:e1:13:51:a7:34:bf:e7:
0e:95:73:71:c7:81:97:75:b8:58:f2:25:eb:2f:41:7f:5a:1d:
d6:b3:7c:a8:98:5a:fb:d4:f8:22:a6:43:14:4e:54:a9:dd:66:
fc:48:90:f0:8d:dd:47:19:65:59:fe:00:ab:e1:34:ec:3e:35:
2f:fa:04:51:37:e2:c7:f3:4b:f5:b0:66:2f:94:84:70:17:10:
3a:9c:f7:87:0f:1a:f0:0c:ba:75:4e:b4:dd:4e:e2:23:01:d7:
9b:0b:3d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:07 2024 by rpki-client on console-ams.rpki-client.org