Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/BYSLgIwqCCoy7UryJcOnQtfHLOk.roa
File: BYSLgIwqCCoy7UryJcOnQtfHLOk.roa (raw, json)
Hash identifier: 6NmcCKzdtxDC9xBGPw9h9vXTSQ+X+1Wy6ysN1vwhVRA=
Subject key identifier: 05:84:8B:80:8C:2A:08:2A:32:ED:4A:F2:25:C3:A7:42:D7:C7:2C:E9
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 0187108E800A8FFA4F9339B3E2E85F9CB933
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/BYSLgIwqCCoy7UryJcOnQtfHLOk.roa
Signing time: Thu 23 Mar 2023 22:19:47 +0000
ROA not before: Thu 23 Mar 2023 22:19:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7106
IP address blocks: 45.141.15.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:10:8e:80:0a:8f:fa:4f:93:39:b3:e2:e8:5f:9c:b9:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Mar 23 22:19:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05848b808c2a082a32ed4af225c3a742d7c72ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9f:29:37:31:ce:17:cd:c2:c1:58:66:1e:3b:
6b:85:83:90:1c:d4:04:74:e1:55:e4:9d:fb:24:c7:
e0:2b:8d:44:60:12:ba:42:91:80:0c:70:fd:a0:56:
8f:83:da:1a:16:41:7c:cc:77:b5:5d:31:25:64:ae:
d5:b7:a4:8c:ea:75:d9:9f:73:d0:f9:76:6c:62:42:
4b:82:a8:4a:5e:12:61:3a:b7:a3:b3:15:bf:1a:fb:
46:42:43:a2:9e:a6:7e:90:d4:ee:db:1e:1d:e3:f4:
f5:58:77:7a:f7:90:6f:b1:e1:38:38:11:70:61:26:
7d:39:f7:3c:49:7a:93:6e:31:d4:5b:cd:53:34:b8:
49:2b:f7:81:90:ac:68:ee:ac:fc:8d:1f:3f:79:1e:
03:af:d5:27:d2:bf:47:02:61:a9:34:90:2d:c3:8f:
f5:87:e1:14:f1:e8:e6:4e:dd:c7:91:32:45:ad:f0:
84:74:fc:7e:a7:3f:b5:96:3d:7b:52:4d:02:68:a5:
1a:26:7a:2b:d5:c1:2a:03:a1:b6:83:ee:c5:2a:0b:
21:2d:75:27:06:08:f6:9f:5f:78:88:d3:98:8b:87:
13:f0:e7:4c:b2:8f:cd:6c:4d:dc:95:60:ac:c4:3b:
5c:72:08:96:46:b4:f8:36:61:0e:29:05:b5:74:ca:
fb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:84:8B:80:8C:2A:08:2A:32:ED:4A:F2:25:C3:A7:42:D7:C7:2C:E9
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/BYSLgIwqCCoy7UryJcOnQtfHLOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.15.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:20:a4:4e:6f:cc:97:51:65:c0:e9:66:36:bc:13:ad:e3:0b:
57:4b:35:19:0e:40:a9:21:f6:ad:18:f7:b4:5a:4f:ba:a9:97:
3e:0f:07:2f:b9:34:c8:f0:c6:21:0c:98:39:14:7e:95:2a:05:
e5:1f:41:96:33:5f:73:78:39:32:e7:84:51:0e:20:66:cd:46:
d7:d1:37:03:a7:d2:4a:c2:14:51:27:2d:3f:e8:a3:af:0b:4f:
7d:3f:fb:e8:89:3c:d9:bf:81:29:f1:85:ca:e3:eb:73:f2:b6:
87:f6:e1:53:62:d5:4a:7e:12:61:00:f2:46:65:ea:f3:dc:e9:
02:8f:1e:25:86:45:d8:f2:11:7f:ab:27:af:b2:40:44:04:75:
44:04:26:6d:a3:3b:6c:56:1c:30:5c:05:28:89:5f:e0:bb:4a:
6f:e2:b9:dd:ec:32:71:f5:07:83:08:83:ab:d3:8c:e0:4f:17:
24:5e:42:4c:a2:ff:50:e0:94:ae:5c:b8:95:82:da:d3:2a:42:
52:e2:56:2e:74:5c:95:87:9b:69:8d:f3:9f:59:94:06:ce:83:
c5:96:eb:88:ae:5a:ba:bd:f6:ee:b4:5d:a4:e3:10:dd:fe:13:
d4:46:cb:56:7f:2a:48:f9:4e:77:d4:cd:99:38:90:1b:64:ee:
79:44:4d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:40 2023 by rpki-client on console-fra.rpki-client.org