Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/enurNUx0iKxKDT81C3B54ubr6XE.roa
File: enurNUx0iKxKDT81C3B54ubr6XE.roa (raw, json)
Hash identifier: +6rC8jZ/BsqgFvBWMJn8avUbm9L9NNcuka2EVh4UZyQ=
Subject key identifier: 7A:7B:AB:35:4C:74:88:AC:4A:0D:3F:35:0B:70:79:E2:E6:EB:E9:71
Certificate issuer: /CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
Certificate serial: 01896E71EE90DD0833B773FD895FDA54C246
Authority key identifier: BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/enurNUx0iKxKDT81C3B54ubr6XE.roa
Signing time: Wed 19 Jul 2023 13:58:27 +0000
ROA not before: Wed 19 Jul 2023 13:58:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209835
IP address blocks: 45.149.182.0/23 maxlen: 24
151.248.20.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6e:71:ee:90:dd:08:33:b7:73:fd:89:5f:da:54:c2:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
Validity
Not Before: Jul 19 13:58:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a7bab354c7488ac4a0d3f350b7079e2e6ebe971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:98:e7:c2:c6:2a:ab:b7:9e:59:ef:26:1d:cc:
f2:41:7f:30:a7:20:dd:48:c0:6a:99:83:03:c3:ca:
75:af:b5:0d:14:4a:72:3e:89:13:50:c5:1e:d3:47:
e7:6f:87:7f:a5:6c:46:31:3a:f6:0c:ae:f4:b4:51:
42:6f:0a:e8:36:8a:e3:80:2c:ed:93:4d:49:f6:01:
b2:1a:7c:50:bd:c2:45:05:67:ba:5b:9d:60:d5:c8:
9f:d2:af:48:13:80:b1:fb:09:5e:94:89:0e:57:f0:
46:c1:ef:ec:94:38:fb:68:d0:74:f4:5a:d7:3d:67:
66:fe:ed:c2:98:96:9f:41:fc:e7:b3:d9:c1:b4:35:
a3:57:9c:a5:90:21:72:cc:b9:9f:d4:2c:76:de:ef:
0d:b6:88:24:38:47:6a:0c:25:7d:25:a5:0e:99:7b:
41:c2:59:bc:11:a0:c4:85:60:42:fa:25:e1:33:de:
c0:e7:d9:24:c1:68:90:8e:2b:de:c1:d2:98:b3:bd:
20:77:28:b5:f1:e6:4a:5f:ec:ca:14:52:46:8a:f4:
63:c6:8e:c0:74:92:91:6b:e7:15:ae:8f:a3:d6:7c:
a8:aa:02:aa:a6:ec:59:42:c7:52:41:88:1e:3f:9a:
9b:8c:35:26:69:20:a5:d4:c6:c5:6d:3b:d8:76:1e:
17:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7B:AB:35:4C:74:88:AC:4A:0D:3F:35:0B:70:79:E2:E6:EB:E9:71
X509v3 Authority Key Identifier:
keyid:BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/enurNUx0iKxKDT81C3B54ubr6XE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.182.0/23
151.248.20.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:2f:07:e8:29:37:29:cc:8c:c5:d7:38:c1:00:c5:a5:b9:da:
0e:8a:37:65:85:64:5b:22:21:eb:47:ee:23:be:e2:0d:3a:6f:
e8:ae:f3:de:0f:7f:66:4a:02:fc:f1:f2:d4:74:c0:ca:b4:e0:
c0:08:b6:80:66:4f:e8:35:f1:5a:cb:a1:33:f0:13:5f:f6:0c:
04:3d:91:2d:25:6f:ab:d1:b2:08:6d:6d:c6:53:67:0e:39:aa:
50:97:69:d9:b5:b9:04:a2:9d:92:ea:eb:fa:93:26:67:c6:e4:
38:2c:fb:bd:d1:c1:23:35:4e:25:b8:60:ff:ef:da:29:a6:f7:
2a:82:f1:51:a3:ae:e2:1f:fb:4b:85:25:94:e2:34:fe:31:74:
9e:86:b0:cc:62:2a:a8:b3:cd:d9:5f:c1:de:24:e3:21:75:4d:
7d:b3:1b:bb:48:7b:c7:b6:a5:15:56:bf:9f:31:6a:09:ba:77:
af:c7:d3:cc:50:e8:46:71:10:bf:c8:ad:f9:09:10:b8:43:42:
92:bd:2f:16:b8:74:4e:08:53:a4:69:24:b5:01:89:ef:f7:9c:
b6:02:ba:3e:f9:f3:44:6e:a1:43:6f:00:f6:5d:a1:dc:b1:8e:
38:5b:6f:a9:d6:80:76:9d:31:f2:c1:cd:81:ec:04:be:99:43:
96:c4:82:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:03 2024 by rpki-client on console-fra.rpki-client.org