Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/h3HW0EkRdytuWQjEArH0vdYeFMI.roa
File: h3HW0EkRdytuWQjEArH0vdYeFMI.roa (raw, json)
Hash identifier: FmN9yNd0S+kmyWChocvQcAZzuZvLwxleKyB2Bbvr/8o=
Subject key identifier: 87:71:D6:D0:49:11:77:2B:6E:59:08:C4:02:B1:F4:BD:D6:1E:14:C2
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01871A9B21EC6CE4235C2A8BA3DEF9732DBF
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/h3HW0EkRdytuWQjEArH0vdYeFMI.roa
Signing time: Sat 25 Mar 2023 21:09:46 +0000
ROA not before: Sat 25 Mar 2023 21:09:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7106
IP address blocks: 45.141.15.0/24 maxlen: 24
93.177.109.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:1a:9b:21:ec:6c:e4:23:5c:2a:8b:a3:de:f9:73:2d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Mar 25 21:09:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8771d6d04911772b6e5908c402b1f4bdd61e14c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:91:a5:2e:7d:1f:ac:d5:59:b6:61:a5:a0:36:
a3:8a:20:a5:b6:d1:82:e9:6a:46:70:ea:4c:8d:1e:
09:7a:4a:4d:73:7e:8d:e2:d6:61:dd:a7:ad:a0:49:
05:75:56:db:eb:eb:fd:0f:79:a1:2f:04:40:94:e4:
08:a5:ff:e6:37:1c:a6:f3:45:9d:f6:92:f2:3f:36:
be:28:51:13:ec:77:e0:69:36:44:54:f5:65:a6:1e:
05:9f:32:0a:b4:33:05:89:a0:c5:d1:b6:07:9b:c7:
02:9b:98:67:bb:c3:37:d2:44:f0:18:9f:08:29:26:
4e:f5:72:fe:72:7b:1b:a5:6b:61:8d:cd:dc:fb:c5:
29:3a:1e:cf:1f:24:91:e3:3c:bd:d2:fe:b5:2e:06:
1a:62:2b:2b:78:b6:82:4c:f7:24:2e:86:fa:27:9b:
ab:ec:ca:06:81:72:32:c3:b1:31:7a:19:13:b5:f4:
bc:a3:4e:4e:93:0e:e6:f4:23:ae:01:53:e0:c5:87:
02:29:52:73:01:28:6a:58:a1:e7:2e:ca:c0:28:4a:
36:a1:65:f9:e8:0d:49:44:2b:55:62:84:41:48:1b:
79:47:75:9b:8a:ca:6b:c1:1c:24:ff:4b:a1:81:5f:
15:1c:04:54:cb:a4:a1:7e:de:ea:03:8e:c0:93:e0:
05:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:71:D6:D0:49:11:77:2B:6E:59:08:C4:02:B1:F4:BD:D6:1E:14:C2
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/h3HW0EkRdytuWQjEArH0vdYeFMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.15.0/24
93.177.109.0/24
Signature Algorithm: sha256WithRSAEncryption
89:40:92:75:56:06:a4:2b:b2:04:23:ed:e6:fe:34:b6:a8:1c:
b5:e3:80:29:36:6b:98:ea:c9:30:2d:76:07:20:80:94:85:a9:
e8:f1:a0:62:de:cb:7d:c1:ec:70:2c:3a:b9:bd:79:dc:b7:8d:
28:a8:41:86:92:e3:3c:e6:4d:60:1f:68:d9:33:22:61:78:d1:
ca:e6:db:b7:26:59:14:1c:79:3d:12:c6:55:cd:26:5a:72:46:
05:09:0a:0c:08:ab:d1:d6:1c:7b:f5:f1:bc:86:29:e0:1c:a0:
5a:4f:64:2a:0b:a2:7f:07:d2:33:00:36:70:2a:10:f2:bd:59:
75:02:cd:7f:e8:94:80:51:b4:e2:dc:91:cd:bb:d8:e2:3b:98:
ea:6a:d8:78:60:8b:0b:37:ce:d9:ea:41:9d:93:32:04:60:d9:
94:31:b5:26:6d:95:fa:58:03:65:38:b2:d9:f4:7f:f0:3e:70:
cc:8c:24:e0:3b:47:62:58:05:a0:a3:69:77:cd:e3:07:a4:9c:
ea:1c:ab:a4:ce:44:84:f0:a2:e1:2d:54:11:de:d6:23:3c:e8:
14:65:ef:52:7e:9a:c0:42:2b:18:a8:16:45:23:44:1f:14:54:
ed:6d:7a:4c:18:28:8f:4d:f6:c2:6f:74:39:44:f4:d6:c6:e8:
60:9e:d9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:24 2024 by rpki-client on console-fra.rpki-client.org