Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/CxfjaZ9IUIsvKEWZLG1uRzrQjP8.roa
File: CxfjaZ9IUIsvKEWZLG1uRzrQjP8.roa (raw, json)
Hash identifier: V/TMQBzxwNXdw8dqhc89yo2E+I/ifbk0gU1Ii8fTorM=
Subject key identifier: 0B:17:E3:69:9F:48:50:8B:2F:28:45:99:2C:6D:6E:47:3A:D0:8C:FF
Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad
Certificate serial: 018583C2D58842637BCD8DF44AD64F1BB241
Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/CxfjaZ9IUIsvKEWZLG1uRzrQjP8.roa
Signing time: Thu 05 Jan 2023 21:07:42 +0000
ROA not before: Thu 05 Jan 2023 21:07:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400039
IP address blocks: 45.143.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:83:c2:d5:88:42:63:7b:cd:8d:f4:4a:d6:4f:1b:b2:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad
Validity
Not Before: Jan 5 21:07:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b17e3699f48508b2f2845992c6d6e473ad08cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f5:14:d8:8e:04:eb:23:9d:78:2b:d6:90:55:
23:6c:d4:52:24:0c:72:a2:f4:58:86:50:aa:bb:b3:
9e:07:75:de:d9:c5:59:b1:6e:c5:17:bb:f8:25:03:
91:76:95:8c:c6:17:19:29:8f:f9:c1:f4:78:cc:85:
00:aa:83:84:04:ba:a4:7a:8c:4e:47:84:14:07:a3:
dd:99:f8:e6:4d:d2:64:75:1e:d6:dc:e0:3a:53:f6:
17:c7:a7:35:be:fc:8b:94:9a:28:11:3d:98:24:47:
68:37:57:d1:8d:69:0c:3c:26:86:61:a5:3b:3e:f1:
74:e9:fe:67:ff:37:d9:b0:41:f1:93:94:20:bc:54:
1b:b5:67:74:17:89:f5:06:8f:70:89:4e:43:a9:85:
a8:18:84:4a:69:51:ab:b9:9a:68:e8:d3:53:fa:4b:
70:7e:b0:17:b7:52:48:5d:c7:66:f3:12:21:13:3a:
2f:10:32:2c:c4:95:9f:70:4b:92:bb:11:1f:ab:1e:
ac:be:34:e5:d5:0e:1d:c8:e3:91:5b:c4:b4:e5:3e:
34:f7:52:ce:a5:76:62:b9:16:13:64:f0:f1:83:54:
a8:e1:d7:7a:3f:a3:27:07:59:a9:70:71:42:7a:66:
70:cd:06:e4:7e:9b:94:a8:fb:bc:31:09:ff:20:3d:
f8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:17:E3:69:9F:48:50:8B:2F:28:45:99:2C:6D:6E:47:3A:D0:8C:FF
X509v3 Authority Key Identifier:
keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/CxfjaZ9IUIsvKEWZLG1uRzrQjP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.10.0/24
Signature Algorithm: sha256WithRSAEncryption
33:65:ea:1e:3c:35:b0:9b:24:0e:ba:d1:d3:00:1f:67:b7:42:
07:79:f2:32:d9:a7:13:b0:ad:52:71:eb:c5:d4:46:f0:e0:29:
36:05:a6:cc:fb:6d:4d:ae:ba:9b:d4:94:ac:d6:7e:6a:cd:63:
3d:80:22:9e:2b:0a:e5:72:7c:e5:35:9b:36:fb:c8:ac:db:3e:
55:0e:5c:0a:52:64:84:df:2e:16:b6:f1:b7:a8:5b:08:9b:6f:
1f:2c:9e:21:4b:1d:82:ae:09:86:98:56:86:f5:40:8e:f4:39:
b4:c4:7c:fc:d3:27:06:18:f7:79:e1:e4:91:58:b0:0e:59:27:
0b:1a:56:eb:b5:dc:f1:ce:df:f4:d6:d4:0f:54:52:aa:70:88:
49:de:38:5c:0c:66:ec:84:c3:b6:58:19:cd:28:7b:57:b1:ec:
36:1d:7e:2d:64:37:75:f6:c3:87:7f:de:3a:f3:bf:28:df:df:
1a:8e:15:95:96:9c:6f:62:25:ca:95:6e:03:15:e9:63:d7:aa:
46:9f:c0:27:71:67:1f:ca:56:01:52:0f:12:2b:37:88:88:62:
08:a9:6b:66:39:55:3e:96:51:87:6a:f9:80:79:33:20:94:56:
df:e1:ce:d8:99:50:d0:ca:8d:22:fa:76:16:cc:2c:81:39:e3:
20:dd:27:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:48 2024 by rpki-client on console-ams.rpki-client.org