Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/I3MWDijdEGlCmctnwsqF3jozsjA.roa
File: I3MWDijdEGlCmctnwsqF3jozsjA.roa (raw, json)
Hash identifier: UBi2Y+MLhuMoMIU7q+M7sncmCRm5A0l8DF+aVRiGYgk=
Subject key identifier: 23:73:16:0E:28:DD:10:69:42:99:CB:67:C2:CA:85:DE:3A:33:B2:30
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 018835409448CA796B429BC8B36BB472396B
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/I3MWDijdEGlCmctnwsqF3jozsjA.roa
Signing time: Fri 19 May 2023 18:23:24 +0000
ROA not before: Fri 19 May 2023 18:23:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198587
IP address blocks: 45.155.165.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:35:40:94:48:ca:79:6b:42:9b:c8:b3:6b:b4:72:39:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: May 19 18:23:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2373160e28dd10694299cb67c2ca85de3a33b230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9c:b4:25:c0:a9:a6:50:60:0b:6d:d5:83:39:
e5:b1:f1:c2:ec:6c:d0:1a:7a:bc:f3:b2:b2:89:f3:
91:65:be:01:63:0f:0b:53:8e:2e:b8:51:b1:78:16:
a6:92:1f:0e:7e:eb:9d:a9:4b:dc:6b:ae:dd:97:88:
90:98:35:12:a5:d4:16:0c:7b:1f:bd:01:ce:34:f4:
de:29:5e:c8:fb:03:c1:e7:19:00:24:04:a9:48:6d:
7c:3f:41:a1:cc:6b:8b:7a:61:21:5c:c6:1a:30:41:
8f:71:6d:ca:a9:8b:96:93:fa:a5:4f:dc:3a:3e:37:
93:b7:dd:f7:ad:32:87:36:f7:f4:2f:b3:df:ab:90:
54:7e:5e:87:54:24:b9:0e:91:a8:de:cb:4d:3b:cf:
94:4c:f3:82:be:27:31:a5:64:d2:4d:33:77:15:5f:
e7:9a:1b:59:aa:9b:79:55:c3:79:b8:fa:65:9b:39:
15:b8:67:39:9c:89:80:e2:c6:02:4f:f0:ac:4f:82:
3a:e4:41:87:27:f1:fd:a3:df:ad:ca:33:d0:7c:fb:
9c:3b:73:0c:bd:01:ac:80:1e:9c:0f:08:37:db:30:
3b:c8:6c:ae:82:b1:c2:a0:ab:71:1c:fe:c8:01:7d:
95:68:df:13:32:ef:3d:61:b9:a7:c0:46:9f:5a:a1:
3e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:73:16:0E:28:DD:10:69:42:99:CB:67:C2:CA:85:DE:3A:33:B2:30
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/I3MWDijdEGlCmctnwsqF3jozsjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.165.0/24
Signature Algorithm: sha256WithRSAEncryption
25:4f:2d:f6:ce:9e:e5:4e:10:63:cc:30:6f:78:d5:f5:ce:6a:
b5:ad:8f:91:c6:9e:b4:6c:13:b3:fc:62:1c:29:1e:69:c2:bd:
75:3d:94:a1:40:1a:8e:b1:95:6d:f4:1b:3d:49:94:04:72:5c:
24:4f:3b:e9:38:8e:0a:6a:27:db:14:3c:b5:7f:29:a7:5a:19:
f0:63:00:58:cf:17:68:1f:51:ed:9b:df:40:0b:77:c7:97:35:
6b:1e:d2:b6:2d:de:61:3e:9c:67:ee:17:6c:8e:8f:59:67:63:
b2:c9:f5:e1:da:f6:a6:4b:c3:67:0f:80:ec:07:af:1d:2f:ba:
9d:34:cd:74:f1:14:48:d1:5c:b6:05:f6:f1:bf:d2:fd:3d:8b:
4e:9b:46:ba:d3:db:d5:79:81:90:3e:69:6e:6c:d6:a5:ae:6f:
34:3e:46:0e:1b:47:85:30:4e:a0:ca:9f:8b:dc:c3:62:15:eb:
77:1b:7b:6f:7c:10:2b:37:9a:d1:d7:bd:d8:7b:ec:78:77:82:
29:d2:91:ee:51:ff:d0:70:04:45:67:fe:9b:30:b6:fd:f6:5a:
e7:29:fa:83:3d:80:72:a9:af:c9:56:44:97:4a:52:83:c6:f1:
da:48:f1:0c:f8:1d:45:20:7d:40:ad:65:b9:5c:e8:c3:14:9e:
f5:15:e3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:59 2023 by rpki-client on console-fra.rpki-client.org