Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/wFeffpLwkGzm6y8dFI2t8HfeOgE.roa
File: wFeffpLwkGzm6y8dFI2t8HfeOgE.roa (raw, json)
Hash identifier: 6fhnqhcvSLl0pM/Zjesucep09nlrEcYXCoUkJqYQ5DU=
Subject key identifier: C0:57:9F:7E:92:F0:90:6C:E6:EB:2F:1D:14:8D:AD:F0:77:DE:3A:01
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 01896A6B0C5EC5282C456E98285C134FDF02
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/wFeffpLwkGzm6y8dFI2t8HfeOgE.roa
Signing time: Tue 18 Jul 2023 19:12:27 +0000
ROA not before: Tue 18 Jul 2023 19:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58212
IP address blocks: 45.65.113.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6a:6b:0c:5e:c5:28:2c:45:6e:98:28:5c:13:4f:df:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jul 18 19:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0579f7e92f0906ce6eb2f1d148dadf077de3a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ad:eb:49:f7:74:46:49:19:ef:cd:e4:af:fa:
2f:24:9d:8f:05:0b:64:7f:dd:06:6c:11:3d:c2:d5:
c9:79:03:1b:8a:98:67:56:67:95:6e:f0:2d:d6:45:
66:89:53:cd:b0:1a:29:71:99:77:b3:06:a5:b8:e3:
08:97:9d:24:f8:20:48:85:87:00:1d:ba:7b:26:13:
bd:16:3c:d5:1c:61:0e:97:4c:d1:e9:06:77:72:b3:
b7:26:82:cb:be:08:d3:ae:d2:17:18:81:96:3a:89:
c0:d9:44:cd:5f:ba:a6:d9:be:1d:69:33:dc:7f:a8:
a4:35:77:40:8e:dc:0e:30:df:4a:7f:d0:13:3e:18:
41:3d:07:be:09:f0:d0:2c:16:2e:61:8a:1c:ec:65:
81:f9:38:cb:2d:b2:57:8b:20:85:de:99:ee:a5:09:
96:36:9f:28:ae:08:bd:20:a1:f6:ee:65:e9:56:c8:
24:f0:2a:ef:82:71:df:00:68:71:b3:4a:4b:ed:8d:
ba:99:20:60:5f:86:d7:65:a7:2c:a7:fa:0e:26:1a:
45:8c:01:be:ba:1f:09:eb:74:c6:a5:09:43:82:46:
77:4b:7e:de:3e:71:3b:8c:b4:26:0a:3b:86:26:34:
e5:72:47:6f:e9:f5:8a:fb:6a:b9:da:88:0c:03:16:
cc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:57:9F:7E:92:F0:90:6C:E6:EB:2F:1D:14:8D:AD:F0:77:DE:3A:01
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/wFeffpLwkGzm6y8dFI2t8HfeOgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.113.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:02:12:cf:c1:eb:7d:a2:ba:f8:3a:13:4e:2b:c2:7f:0b:a5:
5e:a6:8a:5b:6b:a5:6e:26:f8:01:7c:b4:94:7f:86:3c:06:51:
5d:43:e5:fe:9d:0b:f2:5e:9b:cb:24:4b:ce:e8:7a:6c:ae:8f:
5f:fd:9c:41:6c:28:cd:ff:1a:df:d7:a8:4f:a6:00:fc:4a:9d:
9a:3f:8c:3b:75:90:52:48:82:c3:0e:a7:e1:94:c3:df:2d:55:
a4:fc:16:be:cd:2a:e5:d6:ec:03:6b:d5:f3:74:f6:6a:5d:59:
b3:3b:45:38:fe:5f:f4:21:c5:3f:de:b4:c3:06:b5:6e:6c:c1:
c6:1e:64:a2:01:85:f7:0b:df:b0:09:e9:04:28:28:2c:ba:ec:
46:fe:12:61:d4:94:7c:bf:c9:ca:c4:ea:14:03:a4:4a:8a:fb:
9e:fb:62:89:b0:5b:b8:6f:03:f6:22:9b:6a:7e:41:1b:81:c6:
67:b1:15:d2:4f:8f:2f:fe:18:3a:c4:91:9b:0b:f6:b5:9a:94:
05:ee:91:81:b1:4a:f0:c6:02:ad:d1:fc:f5:5e:61:b7:0d:f4:
c8:d8:de:79:00:39:f9:b6:d6:3a:ac:fc:f1:16:f0:09:94:de:
dc:e2:4a:59:e8:0d:fd:ea:25:13:75:49:3c:e7:28:90:91:c6:
28:b9:7c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:08 2024 by rpki-client on console-ams.rpki-client.org