Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/kxZ0qV75l4JgpMCy7LlZVuIpvv4.roa
File: kxZ0qV75l4JgpMCy7LlZVuIpvv4.roa (raw, json)
Hash identifier: HDLFiaxPjOKZ18eu4ck+ZTIal5hxtqtvMvv7GI1e8g8=
Subject key identifier: 93:16:74:A9:5E:F9:97:82:60:A4:C0:B2:EC:B9:59:56:E2:29:BE:FE
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 0187108CAD166BEEAD87BCA00B103661EF22
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/kxZ0qV75l4JgpMCy7LlZVuIpvv4.roa
Signing time: Thu 23 Mar 2023 22:17:47 +0000
ROA not before: Thu 23 Mar 2023 22:17:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396426
IP address blocks: 45.141.12.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:10:8c:ad:16:6b:ee:ad:87:bc:a0:0b:10:36:61:ef:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Mar 23 22:17:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=931674a95ef9978260a4c0b2ecb95956e229befe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:61:b4:ca:42:3e:48:36:9e:67:24:a5:76:8e:
37:57:10:61:61:01:51:07:3b:16:4f:6f:d3:2d:3b:
5d:17:90:53:7a:fc:bf:ff:af:05:22:bc:00:96:5b:
83:35:c4:cb:91:3e:c1:69:dc:64:b1:08:12:e9:c2:
fa:e0:18:db:9a:7a:00:2d:a0:2c:f9:e0:0f:2a:86:
6c:7f:87:d5:69:71:1b:79:f6:ed:95:03:d0:a6:5b:
69:8a:19:55:ed:eb:86:7f:c8:28:30:10:b6:c8:7e:
e1:72:d2:1f:81:c4:c4:66:a9:8b:d9:32:87:66:68:
8c:28:23:e3:6b:e3:98:d2:a1:0e:97:00:32:ff:a8:
ba:ab:74:3b:54:db:52:df:81:ad:16:ea:ac:4b:47:
ff:1d:36:95:d1:20:cc:a4:44:db:e1:c1:ca:3a:cf:
70:34:e6:a3:c5:f4:17:e0:be:b4:94:e5:0a:95:e1:
9f:80:c3:05:80:27:1e:d7:c0:30:66:19:4e:fd:90:
0b:97:36:39:d7:12:09:1c:87:6d:22:8f:56:25:03:
75:2d:d7:d0:0d:f9:f3:d9:b4:ae:3b:33:93:c9:35:
2a:a7:81:63:19:5e:15:18:58:8b:e3:ff:b0:2d:24:
19:ef:f3:2f:67:44:f4:48:6d:61:e3:1f:a7:cc:3d:
19:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:16:74:A9:5E:F9:97:82:60:A4:C0:B2:EC:B9:59:56:E2:29:BE:FE
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/kxZ0qV75l4JgpMCy7LlZVuIpvv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.12.0/24
Signature Algorithm: sha256WithRSAEncryption
77:c2:67:1c:0a:54:3a:8f:ea:10:04:ff:54:10:de:7e:92:48:
ad:02:f2:9e:17:bd:0d:35:25:08:fd:ff:30:71:1f:d9:74:55:
00:d2:7a:d4:60:5d:85:00:bb:bc:d2:a3:8b:1f:3c:74:af:0c:
21:2d:36:19:90:a7:0d:58:c9:d9:2c:65:b7:c0:b2:4b:ca:b0:
16:2e:30:0a:ce:83:3a:d1:ed:ab:ab:85:fb:cc:75:f8:fe:e0:
78:1a:15:0b:bd:86:9e:90:e7:8f:09:ed:0c:d9:a1:4d:a2:a9:
16:d9:bc:ce:d2:c3:41:80:64:bd:6e:d6:2e:98:ee:64:c5:1e:
cf:16:36:75:43:0f:5c:69:cd:c2:83:aa:ed:1d:23:a4:d2:27:
e4:77:4e:23:90:ea:b6:32:0b:0b:4d:46:f7:c7:ff:ba:32:c9:
2e:07:e2:8b:20:7c:5a:0f:8c:d8:72:95:7d:fe:48:13:9e:fc:
03:54:b4:92:2b:be:19:33:16:12:6f:ca:80:69:8e:4b:6c:00:
2b:ad:27:21:bc:52:63:4a:ee:dc:d6:6f:0f:d7:5a:49:21:53:
41:19:92:86:81:c7:2f:32:e4:15:d6:58:a7:3e:f3:93:62:64:
8b:c9:7f:3e:8d:cc:1f:13:41:c7:ca:38:e7:e2:98:04:ed:58:
56:4a:50:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:24 2024 by rpki-client on console-fra.rpki-client.org