Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/NgyflxQncGs9Derrd0cSfeITnE0.roa
File: NgyflxQncGs9Derrd0cSfeITnE0.roa (raw, json)
Hash identifier: WaRD68DgI7Iv1GPmo7kIocw52UshUCQ/Jo8Uwo5cRPk=
Subject key identifier: 36:0C:9F:97:14:27:70:6B:3D:0D:EA:EB:77:47:12:7D:E2:13:9C:4D
Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Certificate serial: 018AECDD9A6131E42C394CF84A88E8F55298
Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/NgyflxQncGs9Derrd0cSfeITnE0.roa
Signing time: Sun 01 Oct 2023 20:11:00 +0000
ROA not before: Sun 01 Oct 2023 20:11:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20860
IP address blocks: 45.139.225.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ec:dd:9a:61:31:e4:2c:39:4c:f8:4a:88:e8:f5:52:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Validity
Not Before: Oct 1 20:11:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=360c9f971427706b3d0deaeb7747127de2139c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:78:83:e4:23:5c:98:fa:4d:ae:62:4c:ba:95:
71:6e:1b:fb:b9:b6:60:d1:a2:ec:71:5b:ed:17:4b:
39:78:b2:53:bc:e7:b1:9a:a3:81:2e:5b:32:b0:14:
a0:92:06:17:ed:4b:7e:17:89:0d:ae:78:e4:1b:d3:
ef:67:ad:0b:6e:21:07:cc:57:49:49:44:c5:26:8a:
b9:43:7d:c1:41:37:56:28:88:15:a4:98:3a:e0:a2:
ba:44:88:90:0a:54:15:7f:c9:28:fa:19:a3:ce:12:
ed:d8:43:cc:95:77:36:e2:1b:2e:ba:91:23:d8:3c:
df:a1:19:0a:15:81:2c:3e:eb:f7:9f:2c:6c:8d:bc:
86:ac:c8:e7:e2:50:de:a2:64:c0:07:f8:6b:45:9e:
67:c5:35:01:37:cb:e7:29:e6:e4:ea:9c:20:65:c0:
3c:6f:7c:93:9f:e3:4a:c8:08:9d:39:6d:bb:ca:d7:
bc:28:3b:f3:6d:fb:bf:19:c6:d8:6c:f6:81:00:d8:
ee:fa:08:ba:45:15:e3:bd:b6:6c:a1:69:44:7d:46:
ff:37:e6:07:cf:51:b1:47:75:5b:e8:e3:84:f1:ff:
d6:4d:8d:b2:02:78:9b:ff:57:50:b7:b4:3a:05:73:
44:f8:14:6d:85:ac:b7:2d:29:e2:87:e1:02:1b:86:
87:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:0C:9F:97:14:27:70:6B:3D:0D:EA:EB:77:47:12:7D:E2:13:9C:4D
X509v3 Authority Key Identifier:
keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/NgyflxQncGs9Derrd0cSfeITnE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.225.0/24
Signature Algorithm: sha256WithRSAEncryption
42:0a:6d:f6:36:9c:66:57:93:01:2a:81:2d:5d:fb:be:85:26:
c4:87:f8:e4:37:e8:db:eb:67:4a:f5:ea:bb:12:b2:38:df:ae:
f7:9c:ae:85:3f:32:00:0a:06:47:70:6f:71:3c:9f:03:1c:2b:
5d:2e:8b:a4:99:13:82:08:60:23:b4:39:8d:70:29:1e:22:d7:
3d:6e:ce:0b:45:da:e7:77:c5:ac:c6:cc:f8:cd:dc:11:79:d4:
f2:9c:e2:27:79:1d:f3:25:04:57:73:0c:23:d6:0f:82:41:c4:
3c:a0:13:61:d1:e6:7a:d9:1b:1b:ad:f8:5d:c7:84:9e:a0:f6:
a2:d4:0b:d0:0c:97:88:5d:32:62:82:0e:56:e0:00:61:a7:af:
4d:03:ff:48:fd:40:ea:6c:53:40:47:86:ad:5a:c3:c3:b8:b1:
43:9b:ee:47:8e:48:0e:46:bc:5e:9e:ef:46:fd:5e:b0:1e:d3:
de:58:c2:58:b4:79:b2:32:f3:bf:95:d2:e0:e6:bc:af:97:01:
60:ad:34:67:71:d2:cd:be:77:60:6d:7c:69:cb:3b:8a:c4:2a:
ca:b9:2b:1b:54:46:ad:d7:41:f7:2b:f1:7b:f2:1a:45:e3:1c:
69:84:ea:f4:f1:82:6f:74:fe:9c:20:ee:79:6e:ad:55:e6:33:
e7:b1:d3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 2 11:59:07 2023 by rpki-client on console-fra.rpki-client.org