Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/Pn7cRuqosGAHJhYZu0mm7AQa3tk.roa
File: Pn7cRuqosGAHJhYZu0mm7AQa3tk.roa (raw, json)
Hash identifier: pjf6ABfMXJDseX8eF/Awpo+/DCJ1xFc5Jf88zYYbAhE=
Subject key identifier: 3E:7E:DC:46:EA:A8:B0:60:07:26:16:19:BB:49:A6:EC:04:1A:DE:D9
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 018949514A93838B8BE6AAE1BA6053C84BEE
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/Pn7cRuqosGAHJhYZu0mm7AQa3tk.roa
Signing time: Wed 12 Jul 2023 08:56:51 +0000
ROA not before: Wed 12 Jul 2023 08:56:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59651
IP address blocks: 45.155.165.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:49:51:4a:93:83:8b:8b:e6:aa:e1:ba:60:53:c8:4b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Jul 12 08:56:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e7edc46eaa8b06007261619bb49a6ec041aded9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2a:5e:0f:78:53:2f:21:84:a8:97:04:39:2c:
18:76:24:28:30:9b:e1:bb:2a:9b:6c:34:f7:60:f8:
04:7e:ce:21:eb:72:63:52:29:a9:33:c5:7e:19:71:
22:b6:13:8a:45:20:ae:65:4d:ec:31:c6:bf:de:8e:
16:68:c6:ca:52:32:20:a1:2d:66:63:da:73:34:80:
18:e0:98:a2:c0:10:a7:39:c8:d4:ae:68:e6:b2:8d:
f3:96:92:9a:3f:fc:e1:4c:1e:41:6b:08:76:b9:12:
f4:20:e0:6b:41:f0:6e:ff:f8:88:e3:a6:10:da:25:
b3:f0:92:f7:14:af:3c:35:25:5a:79:1e:36:4a:4f:
a3:f2:da:fb:a1:99:00:f1:52:d4:cf:75:ce:6a:aa:
bf:42:bd:1d:1b:35:5e:02:e5:f1:9a:a4:80:b6:3b:
f0:b1:c7:79:a9:96:91:b6:1c:75:36:da:30:f2:a0:
cf:56:5f:ba:f4:4e:97:e1:9d:47:0f:ac:10:12:5f:
51:1b:8e:b4:6f:12:98:1c:49:02:45:9f:b6:00:07:
25:b7:3f:f1:f1:28:6b:95:66:a2:0c:05:37:3d:92:
0d:46:6c:a3:2b:4b:84:df:09:5d:ff:23:6e:7f:9b:
f2:27:13:cf:3f:ed:31:df:65:00:a5:fc:92:7b:49:
00:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7E:DC:46:EA:A8:B0:60:07:26:16:19:BB:49:A6:EC:04:1A:DE:D9
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/Pn7cRuqosGAHJhYZu0mm7AQa3tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.165.0/24
Signature Algorithm: sha256WithRSAEncryption
47:34:ec:61:fd:01:84:1c:c0:d4:db:f2:a5:6c:13:dc:e0:11:
8d:21:d6:64:eb:de:d4:ca:7b:2b:f8:a3:3c:af:0f:c4:a8:7b:
97:80:33:1e:e6:e9:c7:f6:b6:6b:f9:a8:25:a0:10:f1:17:10:
8b:1e:aa:bc:c1:37:f8:bd:79:68:c4:9c:a2:ea:3b:8d:e9:77:
b1:2a:02:19:24:1f:64:f2:f1:32:c1:c8:cf:40:38:b1:c3:28:
66:3b:0c:0a:57:bc:24:5a:0a:6a:fc:c1:c2:14:bc:1c:33:9a:
16:fb:e7:31:6c:f6:83:11:07:db:84:c1:41:d0:46:a5:2a:0d:
46:72:50:46:1a:74:76:a4:b1:f1:29:ce:33:d1:75:3f:ab:53:
0c:b8:90:fe:32:14:54:d4:db:cd:78:52:9e:2e:6a:8d:7f:5f:
6b:0f:39:a8:4b:e3:c7:43:5d:98:72:b0:e4:c2:45:ed:bf:e6:
c9:7e:58:1e:a5:a5:c5:58:4a:40:eb:9d:d6:0c:eb:5d:f0:33:
a3:e0:ec:6f:4b:59:be:df:7b:0a:98:51:d9:6a:87:a4:df:9e:
52:b1:b9:f6:4e:02:15:02:34:cc:33:48:05:35:4d:cf:5d:25:
26:e9:7a:24:3d:7e:91:8c:dc:f0:9d:8f:44:da:1e:0e:d1:85:
8f:f3:a7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 20:38:01 2023 by rpki-client on console-fra.rpki-client.org