Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/OdGBES98MkH2WUZCwRp7gx10-FU.roa
File: OdGBES98MkH2WUZCwRp7gx10-FU.roa (raw, json)
Hash identifier: uUfr9kBzYTl/7B5IZtyArdRCLMkOC3QqxIvRsyMB0RM=
Subject key identifier: 39:D1:81:11:2F:7C:32:41:F6:59:46:42:C1:1A:7B:83:1D:74:F8:55
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 0186DBD0B80B88677E2A943CDE9684D227FD
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/OdGBES98MkH2WUZCwRp7gx10-FU.roa
Signing time: Mon 13 Mar 2023 16:32:14 +0000
ROA not before: Mon 13 Mar 2023 16:32:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201364
IP address blocks: 45.80.31.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:db:d0:b8:0b:88:67:7e:2a:94:3c:de:96:84:d2:27:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Mar 13 16:32:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39d181112f7c3241f6594642c11a7b831d74f855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c4:d9:b7:7e:04:5a:5b:a1:7d:aa:00:1e:e6:
c2:2f:f4:4a:da:4d:36:cb:10:e1:2f:55:86:55:5f:
29:0d:51:7d:49:f2:5c:f9:19:18:a6:9f:e3:dc:da:
3d:64:be:ba:7c:d3:7d:02:c3:34:dd:ac:95:04:3d:
f0:b7:75:84:b0:d6:92:a9:e6:63:6d:dc:6b:bf:1a:
3e:ed:86:d2:ec:b0:fb:eb:73:98:5d:33:53:55:0e:
90:f8:f4:45:df:96:d8:d7:50:31:ac:33:a4:6e:04:
20:ec:ee:3e:bc:84:b2:c8:19:14:d6:bd:62:a1:0e:
e9:be:e0:44:e0:09:a2:f0:88:f7:69:95:f8:91:ac:
71:eb:6f:ec:50:28:67:74:46:8a:b2:37:6d:78:fc:
8c:68:d9:44:c5:dc:f7:0a:b8:0b:b4:b2:8e:2b:8e:
1a:55:53:e5:b2:1d:86:bd:c1:c3:4e:a9:f7:af:09:
0e:b6:fa:39:09:e1:2b:d7:c6:56:8e:4b:dd:d1:d3:
ca:99:a9:f8:21:78:fc:c3:db:be:ca:07:d9:d9:68:
a1:a2:17:32:99:9a:d5:06:38:22:3f:bc:a5:68:74:
f4:ed:38:23:8d:a1:fb:a8:36:c5:7b:1b:1f:5b:fd:
b2:af:75:9f:70:33:f4:12:56:c0:07:57:6c:84:ae:
5a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D1:81:11:2F:7C:32:41:F6:59:46:42:C1:1A:7B:83:1D:74:F8:55
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/OdGBES98MkH2WUZCwRp7gx10-FU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.31.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:da:8e:72:6a:23:21:b0:fd:0a:d2:58:0f:a4:ee:bc:d0:1d:
c0:56:e0:18:26:d9:44:ca:04:e9:5f:a5:c0:5c:98:de:2d:7d:
3f:94:07:0c:bd:4c:68:fb:fe:d5:d9:a5:56:5a:68:8c:f6:6d:
c8:da:1e:e7:a2:8c:1a:ed:c1:d0:51:80:54:ee:a1:df:60:4b:
95:f0:45:7b:fc:b7:22:15:e0:e4:8b:a9:07:f4:19:0c:92:f7:
5e:59:ef:68:ae:20:52:46:3f:93:ac:87:3e:12:29:db:32:5f:
05:22:ac:89:92:0f:de:48:54:b4:1b:b4:ab:f3:7c:1b:99:69:
a7:d5:03:89:7a:f6:fa:d8:0d:fe:a0:e9:09:b3:ef:29:8c:22:
3d:32:9f:c6:c1:f2:c6:0f:a2:d8:89:81:7f:11:44:ef:d0:69:
ca:14:c6:74:b8:33:c0:20:df:78:18:77:21:11:9a:e5:1b:b8:
11:77:e2:c2:5f:cd:57:f7:c7:7c:58:f6:e3:cd:88:fd:41:43:
a1:3d:4f:d6:a2:18:0c:41:a4:b6:3c:63:96:a6:ca:7c:9b:4b:
2b:e9:af:62:61:37:3c:5c:06:ad:04:0e:56:43:69:a6:c1:d7:
f2:22:47:b9:ad:4a:ad:00:3f:6d:ce:96:85:11:ad:2f:51:8c:
2d:a1:36:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-fra.rpki-client.org