Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/KeavawT4MmNsFoalJHk3CapsGMU.roa
File: KeavawT4MmNsFoalJHk3CapsGMU.roa (raw, json)
Hash identifier: mONtjpF7mMivuipEhQrgnzZdegsL1HohvkyM9t6xeJ0=
Subject key identifier: 29:E6:AF:6B:04:F8:32:63:6C:16:86:A5:24:79:37:09:AA:6C:18:C5
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018960E81DFD2A9D36AEF9E5DF5D979BF508
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/KeavawT4MmNsFoalJHk3CapsGMU.roa
Signing time: Sun 16 Jul 2023 22:52:52 +0000
ROA not before: Sun 16 Jul 2023 22:52:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49581
IP address blocks: 45.148.116.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:60:e8:1d:fd:2a:9d:36:ae:f9:e5:df:5d:97:9b:f5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jul 16 22:52:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29e6af6b04f832636c1686a524793709aa6c18c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:46:ef:6a:d8:f4:0a:c4:00:a5:57:b0:6d:44:
af:9a:21:c3:54:a9:8f:40:b0:a7:c3:41:3a:cc:ae:
e4:fb:46:0f:dc:37:0f:ae:0e:b1:0d:d8:83:d7:cd:
a0:a5:bc:ac:1b:2d:5a:f9:ab:dd:65:2a:a5:ae:99:
d9:f6:60:c5:6b:e9:f5:bb:66:b5:93:fc:eb:7c:e3:
f2:7c:29:c0:04:c0:8b:5f:08:72:a9:06:84:d1:66:
8b:8b:d8:e7:ea:d4:2f:be:20:6f:d9:66:89:e3:c7:
f9:07:47:f7:44:ef:8d:b8:09:b1:25:2a:42:1f:7f:
12:16:0d:e2:b4:bd:b1:7e:07:b5:23:e5:dc:93:e7:
ec:7b:63:ea:93:9f:7d:f3:bf:b7:bc:3f:1e:12:89:
c6:0a:73:e5:56:89:6d:91:ee:b5:b7:8c:44:ac:70:
4c:71:16:65:80:82:c7:1c:79:40:2d:97:c6:cf:b3:
d1:35:9a:d6:8a:91:f4:65:bf:db:80:88:97:2e:d4:
8d:71:5e:99:ce:b8:cd:f0:1a:07:c7:47:76:ca:14:
7b:d5:8d:97:66:b3:4a:dd:c5:bf:86:e9:cc:e0:93:
57:64:22:7e:54:db:58:3b:f3:5e:0c:6a:67:f5:65:
d6:34:b1:b1:62:28:7c:c8:f5:ea:fe:cf:84:60:bc:
86:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E6:AF:6B:04:F8:32:63:6C:16:86:A5:24:79:37:09:AA:6C:18:C5
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/KeavawT4MmNsFoalJHk3CapsGMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.116.0/22
Signature Algorithm: sha256WithRSAEncryption
65:b6:86:f0:a1:eb:0f:12:26:bc:1e:87:69:b4:59:f0:02:b7:
ac:44:7d:3e:93:fa:ef:4e:2e:66:16:d5:e8:f8:ca:1b:aa:99:
b0:dc:e0:9c:86:17:42:9d:52:d2:67:0e:74:01:18:31:0c:5c:
73:ed:48:d4:42:29:b9:3f:02:c2:08:0b:a2:07:76:07:2b:51:
cf:25:21:10:c7:3a:cb:74:63:c8:32:84:30:f5:94:6b:e9:b6:
73:5b:1d:35:ab:f2:1d:9b:43:7f:e8:6a:dc:a9:75:08:0b:38:
a4:55:0d:90:4f:de:34:92:eb:cc:6d:e7:f8:2f:41:14:bf:68:
b7:0b:1b:e8:dd:83:dc:ab:af:d0:f8:85:a7:22:04:b5:09:90:
b2:22:f2:61:01:eb:0e:21:66:d9:2a:75:fc:5a:fd:b9:e2:b6:
97:24:85:61:18:d9:f8:4d:e9:8c:65:15:5b:6b:01:f0:5c:53:
e5:48:d6:30:f0:0f:ef:66:31:a0:a4:b6:09:93:59:04:48:f8:
8b:c1:df:86:4d:f6:95:8a:db:55:65:90:25:18:b0:cc:94:4a:
d4:34:c5:0c:5d:2a:77:51:d1:6e:fc:cd:d3:36:3f:de:73:c2:
5c:85:8d:33:8d:8d:b9:4f:2a:8c:e7:e9:95:b1:2f:ae:a0:13:
87:68:21:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:15 2023 by rpki-client on console-fra.rpki-client.org