Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/dqiGF6zGV1D3aI82ySq7_30lHGc.roa
File: dqiGF6zGV1D3aI82ySq7_30lHGc.roa (raw, json)
Hash identifier: wkY/DmepamHB1Kh66aqu2oQSsDPDuBrUXP40ZBdSrIY=
Subject key identifier: 76:A8:86:17:AC:C6:57:50:F7:68:8F:36:C9:2A:BB:FF:7D:25:1C:67
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 01880B51C9E0F299C0C6561922C0C557D4DD
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/dqiGF6zGV1D3aI82ySq7_30lHGc.roa
Signing time: Thu 11 May 2023 14:58:09 +0000
ROA not before: Thu 11 May 2023 14:58:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 45.140.247.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0b:51:c9:e0:f2:99:c0:c6:56:19:22:c0:c5:57:d4:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: May 11 14:58:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76a88617acc65750f7688f36c92abbff7d251c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:60:eb:a2:cd:de:c3:b4:d0:98:cc:4a:66:a3:
64:55:cf:a0:87:bc:08:2a:21:ac:ca:32:e9:7a:8b:
19:4c:cb:63:b0:98:e0:53:0f:ff:ab:b8:09:58:1d:
70:ce:5a:a8:c9:7b:83:a9:92:46:84:e0:8f:31:63:
70:4c:94:f1:10:22:a5:f3:16:9a:31:1b:03:09:fe:
08:52:35:f3:ec:a8:65:eb:7e:6f:9a:50:43:37:9f:
af:3a:7a:a7:10:8f:0a:59:ce:7f:4d:9b:c8:94:b5:
41:ab:08:22:09:64:fc:9e:5f:71:1f:8f:ca:da:2a:
df:ca:ab:61:ed:1d:31:6a:f2:62:a3:f6:e8:8d:ba:
4c:2f:57:e2:d4:90:6b:79:2c:49:ae:51:bb:3e:62:
e2:7f:ac:56:66:7b:c3:68:b5:15:20:65:7c:78:65:
bc:db:a8:e7:7b:ab:d1:02:a3:cb:0e:6e:7d:03:ba:
1c:62:af:c2:a6:7c:80:ef:c6:00:58:7d:09:37:da:
1d:27:07:ea:07:1b:cf:a9:04:50:97:e8:cf:df:a2:
05:bb:32:13:3a:d8:c2:0c:33:6f:18:c3:91:c6:4a:
90:9b:cd:b0:9a:12:bf:0a:94:71:59:25:9a:73:c8:
77:ba:55:61:86:b7:4a:64:25:c4:88:9c:6e:97:44:
a3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A8:86:17:AC:C6:57:50:F7:68:8F:36:C9:2A:BB:FF:7D:25:1C:67
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/dqiGF6zGV1D3aI82ySq7_30lHGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.247.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:8d:74:27:fd:35:cf:93:bf:e7:fc:dc:5b:d3:8e:bb:f4:b8:
5b:b5:9c:96:96:40:35:55:8b:0e:a9:90:e1:34:2c:a4:ec:5f:
76:5b:ac:4f:cf:4e:bd:2b:1e:e8:fd:d5:9d:5c:a5:7c:cb:12:
54:57:de:f9:dd:f4:4b:3a:05:ee:95:98:89:6b:59:53:7f:43:
c6:57:9e:cb:b6:d3:25:db:e6:3c:a9:63:4d:d3:d9:eb:68:1f:
7a:dc:ea:24:b5:ff:28:a7:c9:11:52:7a:ea:aa:db:eb:f6:69:
bd:6b:4f:9a:59:f2:88:4f:f7:eb:ad:b3:31:97:e4:81:90:ad:
b2:12:82:db:f9:35:49:b3:1c:5b:59:bb:f3:32:37:99:18:67:
62:81:66:3a:9a:c7:ef:df:76:8a:ef:24:b0:5c:1f:f2:a2:7b:
b5:b1:fd:1c:07:7e:dc:41:eb:1a:13:43:69:25:3e:74:af:f4:
6e:65:81:34:03:e2:f5:6b:ae:65:d2:de:65:28:ea:fb:25:cf:
19:3d:92:d3:0c:64:eb:65:a5:51:d2:97:f6:84:e1:d5:13:e9:
18:51:7b:e3:35:da:f6:28:c9:22:ff:2d:d7:41:99:c3:d5:a9:
59:72:b3:b8:3c:4b:15:3d:6c:d3:7f:bb:04:06:9d:b2:79:ff:
96:35:e2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:48 2023 by rpki-client on console-fra.rpki-client.org