Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/oEsmfgpw9UtiAsCQawE3t4m114k.roa
File: oEsmfgpw9UtiAsCQawE3t4m114k.roa (raw, json)
Hash identifier: v+1UXLiGg1BtmH2R6CS6m6/+P7ikumfuAXtsT5Zt7NU=
Subject key identifier: A0:4B:26:7E:0A:70:F5:4B:62:02:C0:90:6B:01:37:B7:89:B5:D7:89
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 0185715E55E4E83676AF06CC8E0DCD6E9981
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/oEsmfgpw9UtiAsCQawE3t4m114k.roa
Signing time: Mon 02 Jan 2023 07:24:45 +0000
ROA not before: Mon 02 Jan 2023 07:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 45.140.245.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:55:e4:e8:36:76:af:06:cc:8e:0d:cd:6e:99:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Jan 2 07:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a04b267e0a70f54b6202c0906b0137b789b5d789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:83:f9:e5:f4:58:f6:11:51:01:1b:f4:75:28:
6a:c4:94:8a:0f:8f:ea:11:44:80:06:39:7e:b8:ce:
8f:53:0c:81:1c:c8:bf:b9:fc:50:d0:34:4e:d0:70:
97:fa:f5:75:35:39:f1:70:2c:5c:f9:72:b2:47:a8:
77:96:7d:8c:09:1c:06:5e:cf:53:0f:d8:f1:fe:6a:
e2:10:9e:3c:0e:8a:15:f0:bb:43:f1:d5:53:e9:c4:
a5:95:fd:9f:8c:90:e4:f6:2f:e2:67:cf:9e:46:57:
03:c1:a6:22:77:c1:8e:34:38:17:fb:69:cf:69:64:
b8:5b:31:93:8c:0a:b9:ca:d4:94:37:50:56:cf:28:
61:b2:cd:27:26:6c:e4:17:99:b3:c9:16:87:21:93:
0c:56:8c:00:cb:b8:13:84:78:53:c5:cf:64:c5:69:
0e:ab:e5:88:4b:fe:79:d2:f4:fd:c7:a6:52:8e:4a:
c4:f8:37:55:fb:fa:a3:74:4f:b1:47:8b:fc:64:b9:
cf:0c:40:f5:c6:d1:5e:2b:c9:10:b1:c1:c2:e8:57:
0e:d9:b2:7f:3e:53:b0:12:40:b3:66:f8:e8:e1:15:
04:9e:41:a0:b4:b5:47:fb:1b:ba:9b:a6:b2:b0:2b:
23:68:d3:87:53:35:64:aa:8c:0d:84:f7:05:26:47:
3d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4B:26:7E:0A:70:F5:4B:62:02:C0:90:6B:01:37:B7:89:B5:D7:89
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/oEsmfgpw9UtiAsCQawE3t4m114k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.245.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:55:6a:65:75:0a:c1:3a:b3:92:b0:2b:aa:6b:ab:1c:8b:95:
b7:dd:98:db:4d:07:b3:57:39:d0:df:60:d9:ea:0d:14:05:d5:
3b:06:6b:66:82:3e:36:72:54:cf:70:49:ae:d8:9c:61:3e:17:
68:40:0f:e8:0d:4f:0f:90:d1:d8:e3:7d:1a:d2:3a:a1:ad:40:
87:0a:ab:58:1d:9c:63:5a:52:9f:e6:20:64:80:22:68:5d:5e:
5f:25:f3:a5:d7:9d:da:1c:bd:1a:16:85:aa:8b:ed:c3:87:db:
5b:00:48:07:48:12:47:48:5d:16:a2:cd:15:8f:86:fa:b6:c0:
3c:9d:cd:88:5e:f1:71:33:57:2e:c3:f6:93:3d:34:9d:31:96:
95:8f:f2:84:64:b5:99:c0:61:4c:e8:e9:76:fa:20:1c:47:78:
62:46:c4:bf:12:8f:b9:0c:ec:4a:6e:9a:f1:0a:3d:f9:20:6d:
7c:df:39:96:a5:50:e3:1b:50:fc:f4:dd:49:7a:72:28:8d:ff:
0a:82:31:fc:d2:56:07:68:ff:da:e9:54:7d:c9:df:44:87:5f:
ec:1a:7d:c8:bf:5c:99:7d:2c:0e:62:58:c5:69:b0:b9:52:ea:
37:36:f3:e7:47:c8:b7:97:3e:34:f8:aa:0c:f7:00:00:1c:50:
da:11:10:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:40 2024 by rpki-client on console-ams.rpki-client.org