Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/bFYjspbkUNCykhmupBxuUjVvwmE.roa
File: bFYjspbkUNCykhmupBxuUjVvwmE.roa (raw, json)
Hash identifier: DJI0FDmmUifgM0Iz2eZtrTcYor4+AnAEXGvxm3GMTnc=
Subject key identifier: 6C:56:23:B2:96:E4:50:D0:B2:92:19:AE:A4:1C:6E:52:35:6F:C2:61
Certificate issuer: /CN=d29dc792adfcfe88c79e7958fbfec525630b62f9
Certificate serial: 01857BF6119EA9DC2D7F0F8F03E65D4F2F23
Authority key identifier: D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/bFYjspbkUNCykhmupBxuUjVvwmE.roa
Signing time: Wed 04 Jan 2023 08:46:41 +0000
ROA not before: Wed 04 Jan 2023 08:46:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213217
IP address blocks: 45.143.88.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7b:f6:11:9e:a9:dc:2d:7f:0f:8f:03:e6:5d:4f:2f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d29dc792adfcfe88c79e7958fbfec525630b62f9
Validity
Not Before: Jan 4 08:46:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c5623b296e450d0b29219aea41c6e52356fc261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:55:10:73:be:7b:8d:0e:40:83:a4:c3:4d:4b:
cf:33:bf:47:59:f6:f9:75:1f:17:57:95:1a:f4:2b:
ab:5c:b6:ef:1c:44:c5:83:16:69:4e:d2:25:6e:13:
b8:f3:08:44:73:bc:51:c6:7a:24:41:0c:08:0d:e4:
36:0d:66:c0:65:fd:c9:b7:8e:ce:9c:cb:bc:5c:3f:
10:e9:3a:05:1d:9f:1c:59:5a:0f:74:42:d2:a7:83:
a0:39:ba:76:e3:50:56:b9:a1:99:b8:f4:05:c5:30:
22:49:e1:0a:52:bd:aa:e9:85:10:74:94:a7:11:37:
10:ba:f1:66:89:ae:bb:68:17:7e:f0:01:48:af:64:
39:ca:dd:0b:60:6a:16:66:e2:f9:16:18:64:7d:65:
b0:d7:a4:b7:c4:17:e3:ba:2c:cd:ef:b7:20:56:28:
b6:f6:35:8a:f5:5b:6b:5f:eb:8a:cb:19:56:66:7e:
1f:0f:84:e0:83:c7:f8:7e:c0:34:16:e7:c7:21:7b:
4c:0b:8c:e0:c9:18:ff:0e:b1:10:02:df:5c:a9:fa:
5d:ae:1a:98:e9:3b:b9:e8:33:3c:41:a9:7f:c3:a1:
df:a9:94:83:68:3d:c9:c0:ee:60:49:32:73:9e:48:
8a:b8:9f:f9:16:6e:cf:9d:c7:b9:41:f4:c3:f6:66:
0e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:56:23:B2:96:E4:50:D0:B2:92:19:AE:A4:1C:6E:52:35:6F:C2:61
X509v3 Authority Key Identifier:
keyid:D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/bFYjspbkUNCykhmupBxuUjVvwmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.88.0/24
Signature Algorithm: sha256WithRSAEncryption
56:69:4f:81:2c:d6:c6:f8:e9:fd:4c:09:c2:e9:5d:b5:74:2e:
92:76:90:0b:e1:5f:32:06:12:32:2e:34:fc:d5:83:70:2d:55:
97:3a:5b:b2:ee:9e:95:9c:a0:b3:93:c6:b8:64:6e:f7:d7:90:
d8:32:14:60:26:de:e8:5a:0b:f0:d9:bb:22:da:ef:40:f1:72:
9a:4a:86:45:74:ed:2e:7b:a1:95:99:70:c0:4c:40:fe:ed:e5:
84:15:3e:39:6d:a5:61:9b:b1:68:74:e8:42:7a:cf:7c:74:31:
9d:e5:ee:f6:27:61:cf:23:61:f1:99:b3:8f:7b:46:02:f8:ad:
09:ce:f3:88:21:9f:4c:9d:65:cd:11:94:eb:5b:1e:c6:9d:e5:
e1:bb:56:94:a5:b4:19:69:7b:78:98:57:ba:0a:c8:30:30:ae:
f6:a7:cd:ca:74:40:54:32:66:52:b1:97:d6:e6:49:6e:db:7f:
89:79:df:0b:e7:fe:70:f3:73:bd:37:07:57:49:f0:fe:c0:3c:
c8:bd:57:da:d1:fe:80:ff:7d:cb:0c:9d:d4:33:74:0a:d8:f2:
7a:f3:26:b4:c7:23:80:60:c1:6a:a2:e7:6c:fd:4d:fb:b9:60:
40:b3:f6:f9:c1:1e:af:e3:3d:20:6c:6f:4a:4b:c0:0b:4a:2e:
d0:83:da:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:51:32 2024 by rpki-client on console-fra.rpki-client.org