Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/28Jey2Rx_MwiStTQBFWRxwe3ugE.roa
File: 28Jey2Rx_MwiStTQBFWRxwe3ugE.roa (raw, json)
Hash identifier: 0fBvf9hS5O/NLkxT4Bx3X8CUtjbKbStxZEr8WA6U9a4=
Subject key identifier: DB:C2:5E:CB:64:71:FC:CC:22:4A:D4:D0:04:55:91:C7:07:B7:BA:01
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01871089ECD644FE2D59CEDB4890FA6D484D
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/28Jey2Rx_MwiStTQBFWRxwe3ugE.roa
Signing time: Thu 23 Mar 2023 22:14:47 +0000
ROA not before: Thu 23 Mar 2023 22:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400175
IP address blocks: 45.141.15.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:10:89:ec:d6:44:fe:2d:59:ce:db:48:90:fa:6d:48:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Mar 23 22:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbc25ecb6471fccc224ad4d0045591c707b7ba01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:02:39:81:21:85:1e:bd:8d:c9:48:b9:3e:6c:
49:9f:62:36:f2:d7:c4:a4:02:9b:a1:ad:be:34:f7:
1c:58:8a:33:f6:0c:e9:0b:00:a4:1e:78:7d:60:ad:
49:02:ab:a6:ee:06:ec:bb:64:96:31:74:83:87:59:
78:62:ad:1a:ef:33:e2:c4:fc:8b:8d:ef:f8:87:0f:
ee:43:d1:af:23:3d:5b:6d:c2:a7:f0:13:de:6c:cb:
3e:9c:67:64:7c:f4:34:bb:d0:90:87:c9:78:d6:31:
ea:08:71:3b:eb:98:5b:49:6b:b2:3e:d8:e1:34:4c:
8f:be:a4:a5:f2:7b:25:4d:c4:25:7d:4e:1a:33:8c:
dc:d9:99:52:67:c4:d8:e0:c5:e9:29:a0:05:09:16:
96:d3:50:19:dc:8a:51:6a:bb:dd:22:ba:5e:3d:a9:
31:6d:99:e9:c3:fc:40:9e:e2:95:9a:3f:d6:e5:f2:
be:56:d0:25:a2:d2:7d:fc:29:e0:1b:ce:c8:d3:2e:
48:59:c1:4d:b6:72:d3:d4:f5:59:96:aa:99:df:5a:
86:a4:4a:ed:0b:7d:01:ac:a5:99:27:3e:fe:70:63:
93:e6:09:0b:bd:72:a2:33:ac:ac:5a:c8:15:3d:e3:
bd:24:30:11:21:27:e4:c3:07:5d:55:9d:56:2e:14:
23:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C2:5E:CB:64:71:FC:CC:22:4A:D4:D0:04:55:91:C7:07:B7:BA:01
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/28Jey2Rx_MwiStTQBFWRxwe3ugE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.15.0/24
Signature Algorithm: sha256WithRSAEncryption
06:5e:9d:26:fd:af:19:62:f0:be:22:1e:3c:14:79:e3:3c:a0:
11:03:9d:d0:2a:ad:1e:9b:4c:b4:f4:ef:87:cd:d9:c7:89:c3:
73:c4:54:65:49:66:2c:55:9b:84:21:2e:4b:81:89:60:31:17:
cd:06:7a:7d:86:cf:6e:61:8e:b5:f4:3e:fa:97:7e:52:c1:85:
fd:56:6d:fb:d6:ea:b7:99:26:3e:f1:78:07:1c:dc:9c:39:2f:
44:1d:bc:23:04:b6:3d:14:43:6c:43:8a:6e:9f:9e:9d:b7:c9:
75:69:a9:c0:86:b6:19:c9:a9:be:7e:94:ab:45:14:4e:25:1c:
5a:e2:37:4f:23:2a:4c:3f:d0:03:69:da:cb:19:3f:76:32:de:
69:4d:5f:a6:65:4c:cf:3b:ee:1e:39:47:00:e0:56:6d:37:0e:
1e:b7:03:b9:d7:25:13:1a:f4:53:65:b7:4b:9f:c4:35:de:de:
b5:3e:4a:55:89:dd:8f:45:d0:18:a2:72:9f:7f:bd:7c:80:51:
82:86:44:4e:15:a7:e5:4e:d6:c1:ca:81:cd:2b:0a:47:36:a0:
6c:d2:80:5d:ba:2d:8d:28:66:ec:bd:07:b6:9c:28:a2:9f:c1:
2d:96:97:dd:94:d2:a3:b0:ad:8c:d9:fb:3e:1e:79:13:1e:d3:
a0:db:c0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:24 2023 by rpki-client on console-ams.rpki-client.org