Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/0E_k_qbgjvhFDd6eeBQChO2aObo.roa
File: 0E_k_qbgjvhFDd6eeBQChO2aObo.roa (raw, json)
Hash identifier: TB5/tg+TB8XMSJKFITcjvNfX5r+bQ2Eyfot4bGYbsnI=
Subject key identifier: D0:4F:E4:FE:A6:E0:8E:F8:45:0D:DE:9E:78:14:02:84:ED:9A:39:BA
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 01857203625FEDFA60DB2B3427BA55DA8C9E
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/0E_k_qbgjvhFDd6eeBQChO2aObo.roa
Signing time: Mon 02 Jan 2023 10:25:02 +0000
ROA not before: Mon 02 Jan 2023 10:25:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51765
IP address blocks: 45.159.249.0/24 maxlen: 24
141.98.169.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:03:62:5f:ed:fa:60:db:2b:34:27:ba:55:da:8c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Jan 2 10:25:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d04fe4fea6e08ef8450dde9e78140284ed9a39ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:83:d8:92:18:cd:e9:d6:bb:d0:bb:83:8f:b5:
26:50:7d:7c:f6:aa:8f:91:4c:85:5a:d6:a4:a9:32:
b6:85:f2:95:3e:c3:b6:57:47:7a:7f:76:2c:48:fb:
b1:13:e1:fc:eb:f3:bf:fe:19:5f:b0:36:b7:64:09:
71:24:90:05:cf:b2:15:4e:2d:fb:db:0c:60:77:69:
b9:27:21:f4:ee:e5:d3:4d:e2:d2:ff:d6:04:01:76:
bb:08:56:ad:9f:61:21:76:43:7c:c2:27:0f:09:b1:
6b:76:d0:02:8d:89:36:e7:a0:38:97:82:cf:a8:74:
64:04:83:bc:9f:f5:71:10:a5:bd:5d:30:65:7e:5b:
3e:63:9a:3d:41:3f:bd:e6:37:04:c0:3c:cd:20:c5:
e6:0d:28:ce:cb:47:c7:86:30:5e:40:05:e7:6f:d4:
6d:ad:2e:31:a9:93:81:d0:82:9b:5a:1d:2e:8d:56:
95:2d:d9:82:69:1a:88:18:0a:9b:da:22:be:5f:ab:
e7:95:4e:cf:13:7b:d5:3f:a7:90:05:b9:d7:89:59:
f2:0a:6b:78:53:ff:be:ba:3a:16:64:6d:f4:f8:59:
71:fe:f6:82:1b:49:58:18:75:cf:fa:59:30:4f:55:
16:ef:01:e7:e2:38:f2:a4:81:04:ce:21:98:95:26:
cb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:4F:E4:FE:A6:E0:8E:F8:45:0D:DE:9E:78:14:02:84:ED:9A:39:BA
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/0E_k_qbgjvhFDd6eeBQChO2aObo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.249.0/24
141.98.169.0/24
Signature Algorithm: sha256WithRSAEncryption
34:e7:92:b4:52:11:21:bf:83:0b:f7:aa:9e:70:73:ea:b9:06:
d6:b0:58:f3:a2:7a:8e:f5:4a:b2:97:09:ca:26:58:a1:44:06:
f7:e0:d2:ac:91:d4:6b:2e:02:aa:08:8c:3a:60:eb:68:72:c3:
b8:5b:8f:e9:b5:e0:ae:2b:f0:2b:e7:71:d4:26:e3:5d:ae:54:
12:02:17:33:c3:99:54:ae:1e:83:45:11:23:52:63:8e:ea:e7:
29:65:35:31:37:c3:23:43:e6:f8:4b:56:3f:1d:b2:b1:67:8c:
30:ce:34:72:96:df:5b:a8:01:31:0f:1e:43:28:0b:56:b5:f3:
12:cf:89:f4:1a:59:31:d1:9d:ec:52:9b:c8:c5:fb:b8:ed:c3:
b5:ba:6c:13:66:c4:cb:05:20:a9:53:a2:5f:dc:45:46:23:ff:
1a:23:c6:67:32:16:38:5c:a3:eb:a6:73:75:31:63:87:7b:9f:
c8:28:2b:e2:d5:3a:f6:bc:38:ee:dc:5d:40:87:54:43:9a:44:
73:a7:75:fc:eb:8f:33:4b:4e:e1:25:8b:b6:1a:82:a7:d1:2e:
c7:d3:88:21:de:49:ef:c4:2a:f8:08:db:ec:c1:3c:1b:38:d7:
2d:20:77:2f:9d:ad:70:16:15:aa:78:58:86:87:8b:82:f3:10:
bb:21:b5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:17 2024 by rpki-client on console-ams.rpki-client.org