Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EYbXnBNC4Y6a7satFzz-6PU-jNo.roa
File: EYbXnBNC4Y6a7satFzz-6PU-jNo.roa (raw, json)
Hash identifier: iwaC5uKyBUUpDP8STFvbhpNhOCnIDJds0bsVRPFP+WQ=
Subject key identifier: 11:86:D7:9C:13:42:E1:8E:9A:EE:C6:AD:17:3C:FE:E8:F5:3E:8C:DA
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185DE40AC41E15077AB60DD8B1C5197FBC6
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EYbXnBNC4Y6a7satFzz-6PU-jNo.roa
Signing time: Mon 23 Jan 2023 10:50:58 +0000
ROA not before: Mon 23 Jan 2023 10:50:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202827
IP address blocks: 45.148.117.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:de:40:ac:41:e1:50:77:ab:60:dd:8b:1c:51:97:fb:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 23 10:50:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1186d79c1342e18e9aeec6ad173cfee8f53e8cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b2:fe:d5:d8:7a:a4:62:2b:6b:a9:0e:e5:a7:
10:d5:f6:dc:19:70:8f:e8:f2:51:4a:26:43:d0:d6:
c7:76:d7:06:fe:d2:2d:68:7b:40:a0:8b:6b:01:96:
3d:ff:39:79:fa:48:a1:77:bc:66:80:10:c8:29:43:
7b:af:53:57:b3:aa:9e:b5:54:6b:84:07:12:41:17:
6c:1c:c3:85:17:0c:78:20:10:ea:b1:f4:1c:cd:11:
dd:aa:4a:79:dd:6b:de:1c:19:2b:b0:a8:5c:c2:be:
c8:45:17:81:b5:6b:c5:db:99:02:7f:61:6e:77:e0:
8a:36:24:c0:36:e9:52:a1:fe:58:ec:a9:21:97:14:
1e:bf:36:b6:50:74:7f:1a:df:de:0a:11:0b:6c:30:
db:bf:d9:da:bc:d7:f8:13:2b:21:85:d5:5c:9a:21:
fc:4e:2c:32:b5:b5:a7:3a:1f:c9:21:89:81:e2:bb:
3b:13:6c:a6:5a:8f:85:23:15:dd:7b:79:60:12:c3:
52:90:50:13:23:06:c8:b7:42:88:3e:11:b8:99:9f:
d4:86:41:fb:7f:92:c7:bd:72:46:3f:65:e9:f7:e9:
21:5d:24:79:b4:42:20:c9:3d:13:68:79:24:56:a9:
0a:2c:3c:e9:fe:54:e4:fe:9d:27:b7:dd:55:85:22:
fe:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:86:D7:9C:13:42:E1:8E:9A:EE:C6:AD:17:3C:FE:E8:F5:3E:8C:DA
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EYbXnBNC4Y6a7satFzz-6PU-jNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.117.0/24
Signature Algorithm: sha256WithRSAEncryption
93:41:95:b4:eb:35:3f:03:da:7a:de:a8:6d:ad:e3:99:8c:e0:
79:15:1a:9a:fd:b0:7a:ac:56:0c:6f:17:77:09:a5:b2:19:f4:
92:26:b4:ab:59:d0:dc:73:a0:7d:95:65:24:e8:61:09:b5:c1:
15:5c:83:e9:1f:d0:02:67:f6:0c:ee:97:98:e0:c6:ae:03:17:
d7:0e:bb:b9:cb:46:ca:41:76:cd:93:50:20:8f:00:11:d4:ed:
32:52:40:29:ce:e4:de:07:93:85:46:d4:bd:1c:6f:cd:9a:07:
f7:89:7e:03:f5:5d:34:f0:c8:b7:e7:32:91:4a:59:3a:0b:e9:
63:eb:02:de:d7:a6:36:6f:34:0a:49:7d:11:1e:57:2c:66:6b:
d4:99:ad:9e:00:64:83:31:3b:d0:ea:65:fc:11:c5:60:4e:b4:
64:8d:6d:7d:21:db:e3:0f:a1:c2:6f:51:f7:9e:04:81:c9:a0:
70:e6:8f:fa:86:89:8a:e9:a1:30:55:c3:3a:a6:7b:74:2d:40:
f2:6e:aa:38:96:54:06:4c:06:ff:d7:96:32:8a:7e:be:30:20:
3e:27:1d:74:6e:8c:8c:f2:49:22:96:25:1b:1a:72:29:f6:c5:
c6:5a:41:d2:b2:70:5b:81:b8:32:d8:cd:0b:2e:61:5a:6a:11:
9e:24:e8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:57 2023 by rpki-client on console-ams.rpki-client.org