Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/Ek4Fe20W0Jf_98_mfLksVJN3wf4.roa
File: Ek4Fe20W0Jf_98_mfLksVJN3wf4.roa (raw, json)
Hash identifier: /5pH5BTRH1JJDP2ueUYVcN0r/S0dNzg7PGzsLp9mAQc=
Subject key identifier: 12:4E:05:7B:6D:16:D0:97:FF:F7:CF:E6:7C:B9:2C:54:93:77:C1:FE
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 018A45E0082662B23A646D0AAA49CF107AD7
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/Ek4Fe20W0Jf_98_mfLksVJN3wf4.roa
Signing time: Wed 30 Aug 2023 09:57:04 +0000
ROA not before: Wed 30 Aug 2023 09:57:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59651
IP address blocks: 45.143.6.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:45:e0:08:26:62:b2:3a:64:6d:0a:aa:49:cf:10:7a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Aug 30 09:57:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=124e057b6d16d097fff7cfe67cb92c549377c1fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c0:dc:a7:99:ea:bc:5c:4a:88:3f:f5:22:b2:
ad:a7:36:73:95:eb:1d:5f:06:01:2e:4f:ca:f3:b8:
58:ca:fc:6b:3a:f8:c3:6b:39:87:f5:09:48:be:46:
3b:10:cc:09:ee:49:a0:9d:e4:19:19:42:78:cf:2c:
59:4f:df:64:81:ba:ad:ef:c0:e3:5a:60:26:64:88:
b7:31:30:c9:3d:25:81:68:2b:8e:3e:70:42:da:bf:
67:47:98:46:08:a4:49:78:6f:9f:3b:3d:93:39:cf:
3e:57:eb:9f:cf:19:72:aa:56:36:62:09:8e:ea:85:
5e:0f:4a:3c:1a:81:b5:f2:a2:aa:50:ac:61:e5:94:
32:26:2a:d5:6d:03:30:9e:70:0b:4b:24:ab:cd:ee:
76:de:69:f8:cb:ad:25:5a:7e:1c:8a:c8:9b:c2:50:
e3:2c:e3:e4:24:21:77:71:30:4f:20:6c:f4:76:49:
da:f9:b8:5c:fd:29:dc:72:41:aa:a9:b8:4e:35:8e:
76:26:fd:a7:b5:b2:47:e2:53:06:4c:af:16:c8:36:
ca:d7:14:51:c5:4b:af:db:9e:4f:a8:65:99:4c:09:
21:1a:f3:50:4d:6b:5c:e5:d3:00:31:dc:94:d5:6d:
ce:a5:fd:cc:34:8e:9b:e3:1f:f9:72:b4:75:3b:5f:
eb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4E:05:7B:6D:16:D0:97:FF:F7:CF:E6:7C:B9:2C:54:93:77:C1:FE
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/Ek4Fe20W0Jf_98_mfLksVJN3wf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.6.0/24
Signature Algorithm: sha256WithRSAEncryption
88:f7:ea:19:fc:5f:79:87:df:82:63:44:09:03:dd:bd:17:8b:
3f:a1:ea:29:91:dd:6e:4e:5f:85:9a:48:d9:0a:91:2f:00:16:
b5:d4:43:e4:b3:6f:d3:3a:fd:80:2e:f5:ed:0b:f4:83:b6:07:
6d:74:b4:37:f6:7a:a5:cd:02:97:02:c9:30:7e:f8:20:54:d4:
13:18:d3:cd:16:f7:48:85:fc:17:8b:8f:c0:4e:d2:1f:97:8c:
9c:7f:99:1f:1a:78:ec:fa:f9:6b:85:1b:9d:06:87:bd:84:b0:
88:44:70:fe:f3:41:10:f5:ad:38:bc:46:8e:50:a8:f0:54:94:
81:e2:76:cb:df:2a:4a:8e:4e:30:4c:22:3d:1a:ac:34:a0:75:
d0:3d:1a:b3:c9:84:eb:52:7b:83:31:36:a7:4d:6b:3e:d1:7a:
df:c2:78:7b:69:84:de:a2:52:5e:ea:00:1d:d8:43:15:51:25:
27:0c:47:18:f9:87:f8:37:70:07:b9:14:a9:70:18:e1:0e:5b:
1d:a1:e4:80:00:e7:bd:0d:66:64:12:9d:6a:50:d7:49:cf:ba:
eb:1c:28:de:5c:6e:8d:01:a9:65:56:c5:0c:10:c9:13:a2:7f:
50:0e:17:38:18:dc:22:74:3b:a7:7e:43:e8:38:78:d2:81:43:
1a:ae:cd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 11:55:29 2023 by rpki-client on console-ams.rpki-client.org