Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/J_OcY2i1mYlZsFmaE0nWiPmJSzA.roa
File: J_OcY2i1mYlZsFmaE0nWiPmJSzA.roa (raw, json)
Hash identifier: 1TT3eep1l7NF1+5KcEzfPOuYw2Ldmrv8HO4WunEtBRk=
Subject key identifier: 27:F3:9C:63:68:B5:99:89:59:B0:59:9A:13:49:D6:88:F9:89:4B:30
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 0187CE4E784CD871FCF696A064B4220CAEE8
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/J_OcY2i1mYlZsFmaE0nWiPmJSzA.roa
Signing time: Sat 29 Apr 2023 18:37:41 +0000
ROA not before: Sat 29 Apr 2023 18:37:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200019
IP address blocks: 45.148.244.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ce:4e:78:4c:d8:71:fc:f6:96:a0:64:b4:22:0c:ae:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Apr 29 18:37:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27f39c6368b5998959b0599a1349d688f9894b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:36:2d:a3:f2:13:5a:ba:ef:ae:5c:cd:49:16:
cd:25:af:34:78:90:9b:49:51:91:05:3b:31:1d:fb:
2e:90:4d:a5:00:5b:37:38:3c:98:fa:a6:d2:2d:70:
18:1d:ec:cb:4a:5c:65:62:8d:9e:e8:90:9a:0e:c3:
a9:a2:90:f5:ae:4c:23:37:64:49:d4:5e:99:1d:16:
09:49:9e:84:27:3a:c1:39:4c:17:18:22:f9:77:74:
a2:6a:86:78:da:ac:3e:8f:c5:c6:ed:46:24:38:cd:
16:98:92:40:dd:b7:1f:d5:60:4a:fc:6b:72:a4:55:
0a:9a:f7:d7:4d:86:83:da:30:34:4f:4a:c7:c9:b1:
4f:c8:cd:63:50:8b:b9:e1:fa:6e:3c:a3:8a:c1:a5:
05:8e:af:40:b9:7e:9e:57:90:82:f9:5d:33:38:e0:
1e:e7:fc:9d:cd:7c:71:2a:c0:fd:c4:68:27:92:a6:
72:27:53:dc:a8:5e:34:4f:8c:a7:36:a8:fb:ee:55:
e3:98:e1:84:d1:d6:bb:4e:30:bd:f1:33:44:b5:f4:
41:8e:6b:39:1b:4e:0a:25:11:2c:4f:53:dc:61:b3:
e4:b2:f3:46:69:7d:53:26:e8:e3:f1:e4:ea:77:98:
de:e8:12:6e:39:11:7e:fe:8c:a5:0a:08:e1:8b:9f:
91:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F3:9C:63:68:B5:99:89:59:B0:59:9A:13:49:D6:88:F9:89:4B:30
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/J_OcY2i1mYlZsFmaE0nWiPmJSzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.244.0/24
Signature Algorithm: sha256WithRSAEncryption
18:2f:92:54:82:a9:fa:b3:ee:b6:c4:b1:bd:2a:e5:0f:22:95:
25:fe:7d:14:cc:5d:67:d7:86:ff:dd:b3:b9:c1:38:d0:e3:bc:
65:ae:cd:82:86:ab:b8:d6:f7:dd:9c:d1:82:6c:9c:a6:df:37:
52:bf:a0:5a:52:37:01:c4:2d:b0:a9:da:0d:da:73:8d:a9:0d:
ea:a6:9e:36:40:30:73:0f:eb:e9:a7:01:de:db:9d:28:8d:29:
7d:c8:f7:fc:ee:57:08:b4:08:22:d0:47:34:47:10:4d:da:90:
84:ca:af:10:05:ed:d0:ad:a9:86:c0:a8:e2:4d:7f:cf:e5:4c:
1f:e6:da:3d:55:80:d5:66:0d:9f:a2:2a:1f:02:0d:f0:f3:ef:
55:6d:96:9d:57:2a:37:e3:0c:85:cd:55:89:98:af:93:95:1a:
b2:c2:f8:cc:3e:6c:c2:bb:3b:39:79:32:6d:a7:f8:56:36:ba:
85:1b:f3:01:9a:c7:33:43:44:f8:33:9e:c2:e4:6a:a3:a2:67:
0f:eb:ed:fa:81:0a:8e:4e:69:1f:08:4c:ee:74:b3:00:c6:2f:
dc:01:2b:57:1d:a4:1d:ce:be:20:53:75:e2:e8:32:54:71:3d:
b8:33:22:8e:c0:1a:f6:cb:0b:93:e9:97:2a:d6:74:ca:6c:02:
d2:01:e0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 11 16:32:43 2023 by rpki-client on console-ams.rpki-client.org