Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/8WFunEOg0zLRJYtQdTJt6WDS8UU.roa
File: 8WFunEOg0zLRJYtQdTJt6WDS8UU.roa (raw, json)
Hash identifier: FKMEmw/+6xexVsl1LHgjCa2KA1L301bOdJdUNMRakzM=
Subject key identifier: F1:61:6E:9C:43:A0:D3:32:D1:25:8B:50:75:32:6D:E9:60:D2:F1:45
Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad
Certificate serial: 018A4FA36BD2B914E6D986C678044F3B4B95
Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/8WFunEOg0zLRJYtQdTJt6WDS8UU.roa
Signing time: Fri 01 Sep 2023 07:27:04 +0000
ROA not before: Fri 01 Sep 2023 07:27:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.143.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4f:a3:6b:d2:b9:14:e6:d9:86:c6:78:04:4f:3b:4b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad
Validity
Not Before: Sep 1 07:27:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1616e9c43a0d332d1258b5075326de960d2f145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c4:3f:01:67:69:36:c5:0c:ea:ee:30:27:70:
04:1c:91:d9:3d:ad:c2:34:5b:78:e0:b6:18:b3:35:
32:99:d9:9b:50:c1:e6:89:21:ad:34:cd:68:99:c4:
4e:68:32:86:b5:8c:ff:d2:16:59:f4:a6:62:36:da:
9b:91:0a:4c:10:c0:6f:1e:47:91:04:8b:5b:53:3a:
98:07:8c:70:43:45:38:ac:13:c8:20:ba:2b:1e:8d:
c0:bf:89:29:e4:51:c0:a0:c6:6a:45:9b:b2:dc:a1:
d4:a3:49:48:16:de:81:85:45:71:91:d8:d7:0e:d5:
14:53:c5:56:a3:10:cc:d7:40:90:c7:8d:f7:24:2d:
c1:ba:75:48:c4:e1:ec:f9:b8:c6:0c:5f:95:0c:31:
fc:0b:47:07:59:1d:5d:18:e5:9e:a2:e2:fa:7c:31:
2f:f3:d5:8e:a4:55:bc:05:5b:3d:a8:95:0c:07:88:
c6:fb:4b:fb:98:0c:2a:fe:69:2c:6a:1a:a4:1a:bc:
99:cf:2c:47:bf:26:5e:b0:4b:d2:4e:70:12:e5:86:
b8:53:b5:38:b6:df:e8:86:c5:27:ac:db:7b:c3:f4:
f4:6b:8c:e6:68:f2:fc:64:28:04:44:e1:b7:47:7e:
dc:31:be:d4:cd:da:c0:ea:c2:f3:2f:fa:92:70:58:
b9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:61:6E:9C:43:A0:D3:32:D1:25:8B:50:75:32:6D:E9:60:D2:F1:45
X509v3 Authority Key Identifier:
keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/8WFunEOg0zLRJYtQdTJt6WDS8UU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.9.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:c4:bb:2e:89:de:a2:0e:cb:2e:9b:8b:21:e0:e3:89:58:d0:
c2:50:57:87:07:ed:29:9f:eb:1a:3f:fc:7c:9b:62:c5:1f:7e:
19:66:8a:0b:9a:42:88:05:c7:98:06:54:81:a6:8b:52:37:22:
19:fd:1e:cf:88:e1:7f:cf:17:de:96:bd:48:2b:60:82:a9:10:
65:1b:48:09:49:8c:7a:8b:b5:1b:81:d1:19:ca:63:3b:c5:1a:
d2:bb:30:dc:55:0c:2c:cb:9b:b1:d2:cc:1b:61:2b:d0:5d:c7:
14:7d:72:5b:15:65:e9:58:98:84:fb:62:e6:70:71:0c:52:4f:
57:bc:27:c5:b3:83:ed:fa:77:7e:d2:c9:c7:f1:14:8b:9f:d3:
d6:6c:54:2e:87:bd:5a:b9:58:75:b4:34:70:8b:7d:8c:76:b7:
74:45:76:75:7a:b0:62:5a:b4:a3:ac:60:be:40:fc:eb:67:14:
43:a7:04:e9:f8:2f:98:b3:40:24:66:4f:71:d5:ad:4e:4a:af:
b1:63:64:cd:17:67:44:e4:87:58:74:98:43:1a:93:02:2e:97:
8a:c6:55:39:53:76:29:c0:c9:f2:3b:09:87:ee:94:38:5e:60:
6c:bd:24:68:b7:73:f4:1c:f5:b6:80:d9:ab:96:f8:19:ee:5c:
26:8a:65:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 28 19:35:14 2023 by rpki-client on console-fra.rpki-client.org