Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/3TVWatsu4WFRT6nZvW_mL9ydDt0.roa
File: 3TVWatsu4WFRT6nZvW_mL9ydDt0.roa (raw, json)
Hash identifier: ILN3iexwhBUc21VJIbYcIUEke7Av/qYoCwVI03isRUU=
Subject key identifier: DD:35:56:6A:DB:2E:E1:61:51:4F:A9:D9:BD:6F:E6:2F:DC:9D:0E:DD
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 018610A40DC69D5CF44425743CA51966E704
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/3TVWatsu4WFRT6nZvW_mL9ydDt0.roa
Signing time: Thu 02 Feb 2023 05:40:32 +0000
ROA not before: Thu 02 Feb 2023 05:40:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49870
IP address blocks: 45.155.165.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:10:a4:0d:c6:9d:5c:f4:44:25:74:3c:a5:19:66:e7:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Feb 2 05:40:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd35566adb2ee161514fa9d9bd6fe62fdc9d0edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:78:5a:f4:2b:31:af:97:62:0f:5d:03:16:41:
9e:11:6a:9d:59:ef:d0:08:2f:4d:a7:6d:59:f0:b3:
c3:eb:da:a1:fb:6c:16:0c:a8:20:48:52:19:3c:b9:
e2:8f:7d:c6:d4:15:ae:10:96:1b:28:53:6a:97:75:
93:e8:2c:0c:36:df:51:97:57:68:d8:ad:36:f6:91:
61:c2:7b:20:1d:59:80:63:03:97:ba:f1:30:f4:f6:
ae:ae:9e:65:6e:74:94:a2:d9:11:9b:25:01:2e:95:
51:f6:cf:1c:36:85:24:a7:80:66:1d:53:92:1d:f3:
30:24:fd:d4:cc:88:9d:02:79:73:56:21:e8:b6:ea:
c0:69:3b:84:30:27:1b:bc:a5:e4:63:58:9f:7f:ab:
44:a5:4f:6d:33:9f:4e:6f:74:5a:ce:37:d6:d6:dd:
bc:90:3f:18:1b:d1:9b:33:84:af:d5:cc:17:18:7f:
e4:66:07:ec:83:2b:5a:56:ec:41:dd:9c:fb:63:4d:
9a:69:47:5a:1c:c6:b6:ba:0d:0d:2c:a4:48:0c:6f:
54:14:47:ef:c4:63:b4:e9:9e:da:93:ec:1a:51:f5:
b1:5e:71:7b:ab:b8:5d:e9:e3:d1:2c:39:9f:33:af:
20:61:56:6c:a1:e7:0c:2b:79:d7:65:d0:da:58:69:
9c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:35:56:6A:DB:2E:E1:61:51:4F:A9:D9:BD:6F:E6:2F:DC:9D:0E:DD
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/3TVWatsu4WFRT6nZvW_mL9ydDt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.165.0/24
Signature Algorithm: sha256WithRSAEncryption
68:0a:c3:85:6a:a0:18:f2:ec:e7:82:dc:02:fd:da:db:d0:07:
87:1e:d1:23:9c:c3:9d:f8:71:ff:f9:c8:bf:2f:bb:a2:9d:cb:
ea:42:00:86:b3:84:fc:01:ad:80:19:4d:6c:a8:7f:bd:ab:a3:
e1:7b:2c:d6:7c:6a:55:b8:db:fc:0a:99:e3:d9:e0:d2:27:65:
93:06:ee:5f:73:26:95:ec:04:c1:18:2a:70:10:4b:d7:fb:fc:
c3:34:0f:20:b9:1c:be:cd:71:ac:0e:32:1a:ce:d1:7a:8a:20:
26:9e:81:4c:cb:59:68:7e:50:82:8a:a3:31:01:08:09:06:d7:
f9:26:33:f4:01:b8:48:b3:e9:1b:40:c3:96:5b:1e:33:88:9b:
40:02:7d:fc:78:2b:b2:9c:db:f0:93:79:65:65:4f:ee:ef:2e:
15:c4:ef:f0:74:1a:d4:f6:15:fe:1a:8f:6b:08:f1:e2:7e:57:
70:e5:5c:6b:9e:8e:b6:9c:fb:e7:ca:ab:f5:c3:b6:2f:8d:32:
79:8e:a7:3a:fa:b6:b3:19:60:04:b5:c2:6b:57:2d:8f:92:e3:
60:75:df:09:86:f0:95:62:6f:0c:d2:82:9b:88:93:d4:94:4c:
e3:e8:c3:22:7b:e1:15:00:16:ed:5b:e1:9f:56:0d:b6:3a:83:
fd:fb:4a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:42 2023 by rpki-client on console-ams.rpki-client.org