Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/wRqkPJhh1ZINxgujNVCMF3NL85k.roa
File: wRqkPJhh1ZINxgujNVCMF3NL85k.roa (raw, json)
Hash identifier: Wb5w6/SDU2TaPEBlSlBYQj2XQA8G/Kbr9odyEOWc/R8=
Subject key identifier: C1:1A:A4:3C:98:61:D5:92:0D:C6:0B:A3:35:50:8C:17:73:4B:F3:99
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 0185715E4E99EB362E5A4A6F4CF4C165B873
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/wRqkPJhh1ZINxgujNVCMF3NL85k.roa
Signing time: Mon 02 Jan 2023 07:24:43 +0000
ROA not before: Mon 02 Jan 2023 07:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.140.246.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:4e:99:eb:36:2e:5a:4a:6f:4c:f4:c1:65:b8:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Jan 2 07:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c11aa43c9861d5920dc60ba335508c17734bf399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:98:f7:37:ee:82:3a:9f:c9:54:fb:a0:2b:aa:
2d:04:d1:5e:3c:05:5d:a5:0d:2a:e8:a8:6c:d8:a7:
73:e1:5f:94:ff:3d:f4:7a:d2:86:ea:0f:a1:d0:b3:
25:9b:75:03:3d:5e:83:1b:26:91:b1:5a:55:8d:60:
9e:b5:c6:fb:7f:e3:99:bd:b0:18:c7:ed:fd:42:77:
3d:42:b1:af:58:91:0d:7b:a5:d8:9f:44:95:0b:d6:
b3:09:21:67:88:3a:02:e8:7d:16:c5:50:56:c1:30:
59:e8:aa:78:28:39:92:09:b9:96:c2:51:d0:1b:b9:
7a:c2:7c:b4:7b:3e:ac:fa:dd:d6:1b:0d:f1:c2:f4:
01:52:e3:ed:7c:3b:ca:91:5a:83:fc:41:a5:cb:72:
42:30:47:d6:05:da:69:d5:4d:64:79:0a:70:c6:55:
74:a3:50:08:ae:5e:8b:4f:43:94:4e:ba:26:6a:f9:
c2:1b:ee:14:9d:0d:bb:a9:7e:ee:98:38:cf:68:23:
0d:dd:09:25:60:81:bc:82:f4:23:c2:25:48:da:e5:
7d:f0:a3:1b:4c:5f:72:4a:09:81:ed:42:66:b8:f2:
de:e5:17:ba:e1:90:64:8f:4e:cc:3a:45:fb:d0:33:
68:2a:0d:8d:79:8f:ef:0a:68:3f:7e:e7:5d:d0:aa:
52:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1A:A4:3C:98:61:D5:92:0D:C6:0B:A3:35:50:8C:17:73:4B:F3:99
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/wRqkPJhh1ZINxgujNVCMF3NL85k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.246.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:de:87:98:15:f3:c4:8c:23:d8:6a:26:ca:05:74:9a:52:c2:
f8:9c:e5:9a:7a:56:be:1c:16:8a:99:1f:5e:17:f9:7b:65:3f:
fd:2d:e0:8c:88:32:03:35:23:b7:c7:81:bd:bf:2c:48:f6:25:
74:1e:62:cf:ec:6f:2d:fb:b6:ba:2d:25:0e:f3:b8:a9:d4:bc:
9f:08:23:4e:6c:78:e5:58:f0:19:bb:f1:ff:d5:bf:86:5c:11:
50:c0:c0:b8:33:a0:fb:70:3c:11:cd:d3:40:ff:02:b0:36:c6:
62:7f:25:4c:49:5e:55:2f:3d:b3:60:29:a8:32:48:1c:a1:b0:
a2:e1:56:cc:35:36:a8:e5:23:6c:43:cf:82:72:33:2f:c3:6e:
f6:be:38:34:50:21:6d:c8:d9:3e:de:1b:59:6c:e8:a1:4d:79:
7e:57:d5:c2:ba:0b:f9:0f:71:bc:10:98:ce:5b:f8:63:aa:85:
d4:68:20:d2:9e:e8:83:dd:6a:db:d1:46:0b:c3:26:3f:71:df:
2d:6a:32:d7:48:c0:77:f9:16:51:c0:61:ad:50:a4:35:98:97:
18:87:86:bf:ad:47:8a:f5:05:98:f5:6b:53:08:3f:f4:c8:4c:
2d:b2:72:c1:c7:16:53:98:2c:72:b5:f4:d4:10:7b:ae:bc:8b:
38:6c:94:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:48 2023 by rpki-client on console-fra.rpki-client.org