Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0rvOM6iEWLkBUHKvLfSdegkFyCg.roa
File: 0rvOM6iEWLkBUHKvLfSdegkFyCg.roa (raw, json)
Hash identifier: p0cpjZnYwoLSDAiPN5azHRrBYN/2IQMUhrTs7K8WpRc=
Subject key identifier: D2:BB:CE:33:A8:84:58:B9:01:50:72:AF:2D:F4:9D:7A:09:05:C8:28
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 0185715E54E61E740C50E2F092C6D4BF8DFC
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0rvOM6iEWLkBUHKvLfSdegkFyCg.roa
Signing time: Mon 02 Jan 2023 07:24:45 +0000
ROA not before: Mon 02 Jan 2023 07:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 45.140.246.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:54:e6:1e:74:0c:50:e2:f0:92:c6:d4:bf:8d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Jan 2 07:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2bbce33a88458b9015072af2df49d7a0905c828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b5:a5:e0:4c:a8:9a:5d:da:39:09:33:3a:61:
0b:19:c6:b5:fe:79:d2:c0:1e:4e:a7:ff:fb:6e:8c:
b5:9e:49:9d:b5:b2:90:0a:60:ca:58:82:a3:bb:7c:
8f:fc:49:c4:f4:25:75:ce:4d:41:ef:e5:10:ef:f2:
03:ad:1e:da:a0:ec:8f:d3:b8:a4:94:80:e3:7a:16:
56:d4:6d:fa:ad:58:e8:be:5a:a3:fb:10:bc:1a:1d:
40:e6:1c:41:29:e1:0b:23:bb:a8:89:55:f1:7b:5f:
51:96:57:7d:6a:d5:42:d5:21:6c:de:fb:8f:e3:63:
22:f1:03:f2:c9:c6:4b:9f:10:63:c5:a5:8d:1b:7c:
85:46:1e:3e:3d:0e:89:9e:2a:98:52:43:de:f5:f4:
aa:d5:e4:e9:32:89:9e:c1:7a:94:1a:7c:b2:10:cf:
7d:fb:3b:f4:74:b2:6e:6f:ad:91:14:6c:a9:d4:2b:
28:93:21:4a:5a:f1:f0:3c:10:8a:24:68:06:4f:82:
50:27:6d:d4:56:00:58:05:f4:59:d4:1d:7f:c1:51:
63:08:0e:7d:72:54:96:59:b4:b6:37:75:f3:31:a2:
f3:3d:57:99:d6:0b:bb:39:be:fe:c7:29:f5:a4:99:
b4:d3:22:a1:88:f3:3a:9b:42:c5:10:9c:55:9e:5e:
61:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BB:CE:33:A8:84:58:B9:01:50:72:AF:2D:F4:9D:7A:09:05:C8:28
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0rvOM6iEWLkBUHKvLfSdegkFyCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.246.0/24
Signature Algorithm: sha256WithRSAEncryption
14:e1:87:21:40:aa:85:83:aa:89:90:23:80:4a:f4:04:65:8f:
07:37:a5:3c:54:20:ce:7a:38:c1:eb:20:c2:51:f7:ed:9c:fd:
34:cd:58:b4:c2:92:86:47:52:fe:6e:fc:ea:4f:8a:a1:b1:ca:
f4:69:d3:ca:ea:61:e7:44:cc:75:1c:af:64:2a:7a:f7:36:67:
77:c1:90:61:cb:d9:b1:03:ac:03:e0:a5:77:50:d5:73:75:0d:
bb:16:98:51:dd:1a:15:7a:ce:db:23:28:3a:1d:28:7d:2c:cf:
64:4a:ab:4a:68:03:e0:32:69:1f:07:af:21:3d:4b:df:72:ce:
60:eb:70:5c:e6:e6:63:85:b3:ee:c1:64:b2:79:04:65:a5:c8:
49:cf:20:cb:82:e0:3f:ab:3e:6c:e6:ad:c0:93:aa:ab:3e:f7:
ac:c5:f8:23:e2:9b:2b:b1:11:76:b3:c4:3e:6f:68:85:85:83:
6c:ee:2f:25:71:90:4b:e5:fd:16:4f:5d:0c:c7:66:d0:bb:e6:
1b:61:3a:0b:7b:fd:53:ee:6d:0f:f0:76:7f:ca:09:9c:35:36:
4e:c6:a5:b2:95:0c:36:99:53:36:99:09:72:45:f2:8d:2c:5f:
92:cd:d9:dd:7a:bf:ab:ea:ab:57:76:50:31:9a:80:b0:5d:f2:
ae:45:38:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:31 2023 by rpki-client on console-ams.rpki-client.org