Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/EH2ax6e_i7Lj2oCXy0fczukWCDA.roa
File: EH2ax6e_i7Lj2oCXy0fczukWCDA.roa (raw, json)
Hash identifier: 3ys3Z8U18sa/lBPhvNir7H6CtZtyGqgJaG+V0GVc1CY=
Subject key identifier: 10:7D:9A:C7:A7:BF:8B:B2:E3:DA:80:97:CB:47:DC:CE:E9:16:08:30
Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad
Certificate serial: 01856D4AE1B0E09FD7CC70E0B10CABAFAF30
Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/EH2ax6e_i7Lj2oCXy0fczukWCDA.roa
Signing time: Sun 01 Jan 2023 12:25:01 +0000
ROA not before: Sun 01 Jan 2023 12:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30823
IP address blocks: 45.143.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:e1:b0:e0:9f:d7:cc:70:e0:b1:0c:ab:af:af:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad
Validity
Not Before: Jan 1 12:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=107d9ac7a7bf8bb2e3da8097cb47dccee9160830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:16:7a:29:d9:05:53:07:b8:aa:20:3b:1b:8a:
d9:57:b4:c9:3a:3c:00:3d:8e:33:04:59:12:a8:01:
38:e7:9a:bc:d1:75:c5:5d:90:ec:85:58:29:e1:53:
2a:39:6b:c1:1c:c1:81:d0:95:a4:34:ab:4e:c9:50:
e2:cd:c5:6e:3f:b4:02:27:d6:0c:bc:82:1f:6f:2b:
30:5e:b4:92:23:14:bc:9b:6f:56:9e:f8:36:ee:ea:
97:03:b2:02:e5:f7:ef:2e:82:0d:03:10:ba:9a:cb:
9b:d9:6f:7d:9e:c6:54:d3:a1:e0:5d:8f:f7:df:6a:
fb:1d:77:08:5c:e0:38:86:59:c7:8f:ba:b3:32:76:
84:1c:98:73:28:ce:03:e1:59:a4:89:62:d2:35:64:
d8:3d:91:95:36:f7:97:75:22:f4:7f:ce:ec:52:13:
a9:62:47:2e:3d:b2:4c:99:6b:1d:b7:21:68:8a:6a:
3f:b1:c8:66:a3:5b:3f:5f:79:97:b6:4c:57:61:fd:
90:f4:1c:e1:a5:17:96:10:4d:5e:57:ae:c2:9a:e8:
12:5e:de:f9:1b:c0:ca:28:77:bc:ad:9e:a7:4c:fa:
a2:58:e0:a5:62:97:e6:fe:2c:4c:52:0c:61:23:ac:
3c:07:bd:7a:e5:b1:66:dc:8a:e7:a2:b1:87:89:62:
90:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7D:9A:C7:A7:BF:8B:B2:E3:DA:80:97:CB:47:DC:CE:E9:16:08:30
X509v3 Authority Key Identifier:
keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/EH2ax6e_i7Lj2oCXy0fczukWCDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.10.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:d1:22:3b:ad:b2:6c:d8:eb:e0:0b:a9:b5:49:e9:b7:b9:9d:
b8:fb:8c:2c:53:59:7d:ac:14:d7:90:2a:48:e2:5e:fb:f8:c7:
e2:cc:f1:36:0c:c0:5c:92:ea:ef:48:8c:f0:6a:13:64:f5:e8:
fa:da:f2:91:77:2b:40:7a:eb:70:6e:8c:8c:36:d2:69:f8:2b:
eb:1e:8f:6b:9c:26:8f:b3:da:06:93:20:31:08:e9:f2:43:f9:
49:b0:85:42:aa:b5:8c:82:0c:40:b2:63:c4:ce:16:88:94:7d:
56:a9:94:8c:0f:c8:ad:b0:3e:5d:86:46:c6:fa:6c:4d:47:85:
91:9c:f1:55:6b:46:29:11:27:34:0c:92:8d:41:d5:08:09:23:
16:71:7b:c0:72:5b:28:c8:04:2d:27:2a:35:e3:8b:74:f1:40:
2a:3b:a4:61:cb:d5:34:da:d0:26:af:a0:cd:65:6d:6b:4f:5e:
aa:c1:c2:35:f6:e6:78:16:5d:ac:9b:e0:b7:16:a9:f8:56:e7:
b4:fe:57:ef:7e:fe:9c:cf:01:6f:2a:d6:b2:ad:20:e5:a9:e8:
24:12:ec:9b:5c:4b:99:da:e0:23:59:cb:b4:dd:6c:1c:51:91:
ee:af:88:5e:f7:b6:24:28:2b:38:a2:f7:2a:12:2e:0c:e5:8b:
e6:0c:d7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:02 2023 by rpki-client on console-fra.rpki-client.org