Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/enw3TFEGKyK1TW9BY9xrHW7L88Q.roa
File: enw3TFEGKyK1TW9BY9xrHW7L88Q.roa (raw, json)
Hash identifier: aJBQ1T+Mi77BjC92DYZNRx4vZe3+vhdBkJkazXk3pPg=
Subject key identifier: 7A:7C:37:4C:51:06:2B:22:B5:4D:6F:41:63:DC:6B:1D:6E:CB:F3:C4
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 01856ED4C13044B4A2E9CFD8ABCD7C355602
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/enw3TFEGKyK1TW9BY9xrHW7L88Q.roa
Signing time: Sun 01 Jan 2023 19:35:14 +0000
ROA not before: Sun 01 Jan 2023 19:35:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400039
IP address blocks: 45.11.189.0/24 maxlen: 24
45.154.158.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:c1:30:44:b4:a2:e9:cf:d8:ab:cd:7c:35:56:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jan 1 19:35:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a7c374c51062b22b54d6f4163dc6b1d6ecbf3c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bb:96:3c:6f:5d:21:b4:41:0f:93:5f:48:2e:
43:2c:06:6f:35:e8:1b:ec:16:fd:20:0d:fd:22:bc:
d4:93:4c:33:69:20:ab:44:63:a1:5a:50:5a:44:d9:
38:7a:55:71:3c:cd:f6:d7:21:e9:f1:8d:39:0c:b2:
9c:32:da:ef:4c:53:1c:b7:ed:9c:ff:06:28:81:a0:
05:88:4c:25:1e:54:ae:67:b7:19:15:1b:be:0b:dd:
4a:2b:8e:a5:b2:86:67:7a:41:07:a9:89:77:4d:4f:
e7:98:41:0b:e2:a0:6c:92:3d:d9:61:5e:83:99:34:
3f:b5:5f:b4:89:4b:e2:de:82:ac:f8:f8:d2:f3:f2:
d9:5a:43:9d:4f:6b:e6:dc:87:11:9e:90:66:26:ba:
04:85:46:bc:85:8f:16:cd:33:e8:0f:ea:ab:ee:b8:
a6:cd:a9:36:29:0a:98:49:3e:f0:3d:10:ec:85:30:
da:b7:a6:56:fd:da:b5:ac:3a:f8:9a:f6:c3:14:69:
b6:24:dd:37:f6:f3:9b:80:c3:4b:f3:6d:a1:fe:d2:
51:f7:7a:6a:07:1f:a0:6a:d4:e0:3c:c1:83:e2:b1:
c4:d8:8b:9c:01:61:0d:3d:d4:fd:b6:b7:d1:51:2c:
b3:cc:2c:89:ac:b9:65:be:c4:37:58:5a:8c:02:20:
e2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7C:37:4C:51:06:2B:22:B5:4D:6F:41:63:DC:6B:1D:6E:CB:F3:C4
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/enw3TFEGKyK1TW9BY9xrHW7L88Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.189.0/24
45.154.158.0/24
Signature Algorithm: sha256WithRSAEncryption
13:48:9a:2b:97:15:be:51:a5:01:e6:34:a5:c2:f7:b9:77:e1:
4c:05:fb:3b:2e:52:eb:7f:e3:df:56:25:f0:cd:ad:58:54:c0:
04:5d:8a:cd:d0:7f:b9:32:17:43:bc:db:c6:70:24:dd:da:aa:
c8:2e:bd:3d:e1:c9:62:fe:05:1f:fa:93:37:51:05:35:62:dc:
ed:2a:50:db:57:b4:cb:a4:ed:ed:af:52:82:78:78:33:b0:29:
10:08:29:23:32:b0:ca:fb:0c:85:4c:3a:d2:3e:e3:01:d0:00:
aa:09:77:3d:a7:90:e3:82:55:ac:fd:9f:fb:22:03:f1:b1:ef:
3c:30:0b:cc:7e:84:cf:41:41:ed:72:f7:c8:e0:89:74:33:ef:
d5:61:ea:cd:38:54:1b:4f:ae:03:e1:ed:27:36:cf:bd:b1:50:
de:33:56:23:ec:2c:81:fe:00:d4:52:fd:4e:4b:6d:ee:a1:68:
69:e0:0d:ea:34:30:ab:aa:f3:65:1c:5a:f6:f8:13:aa:7e:f1:
9a:06:60:c9:56:05:aa:77:bc:ae:24:68:63:79:ce:6f:e5:d2:
46:f5:9b:d2:b5:b0:6b:73:54:17:4e:d5:ae:29:04:ae:f7:43:
f7:b9:1a:3a:01:5c:33:7f:d4:50:ac:75:fc:8d:37:e9:3b:c0:
e1:ca:a5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:08 2024 by rpki-client on console-ams.rpki-client.org