Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/1-qbN4-EBf0RKnIZC4mlAQv45ZMw.roa
File: 1-qbN4-EBf0RKnIZC4mlAQv45ZMw.roa (raw, json)
Hash identifier: BijAxReb3R2Si0NrZDY0l61/FWIbhwJCbqcKDZDGlRg=
Subject key identifier: FA:A6:CD:E3:E1:01:7F:44:4A:9C:86:42:E2:69:40:42:FE:39:64:CC
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 018967C5EBBCC8E80879F79E571B644F9522
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/1-qbN4-EBf0RKnIZC4mlAQv45ZMw.roa
Signing time: Tue 18 Jul 2023 06:52:51 +0000
ROA not before: Tue 18 Jul 2023 06:52:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 45.151.70.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:67:c5:eb:bc:c8:e8:08:79:f7:9e:57:1b:64:4f:95:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jul 18 06:52:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=faa6cde3e1017f444a9c8642e2694042fe3964cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4e:b7:ac:c0:fc:4b:e2:87:16:d3:14:30:c0:
83:0c:1f:72:14:8f:09:9c:41:4d:9e:ed:2f:d5:36:
2e:18:57:80:fd:a3:1e:7b:a0:51:0c:5b:3b:5d:96:
d2:7c:6a:09:00:7c:e8:79:25:07:12:83:4b:7d:02:
d9:bc:28:ca:21:94:a9:d3:b7:82:9d:46:69:34:75:
e0:ec:ba:1f:64:a5:72:bd:1f:25:63:42:54:28:65:
5f:9f:03:95:9f:1e:23:04:45:97:40:36:e1:2e:3e:
5f:0c:9a:cd:ea:f6:cc:af:c8:4e:f1:4e:3c:66:61:
8c:47:d3:55:c0:42:10:f6:eb:a5:ec:d5:3d:34:7f:
56:9c:cf:4e:cc:61:5f:0a:91:fe:0e:8e:11:47:53:
9d:35:bb:7c:cd:af:e5:0d:ae:97:d7:3f:8d:56:5f:
84:2f:39:db:2e:cb:39:32:ba:0e:1e:ae:84:f0:11:
c5:67:11:a8:54:57:4d:2c:8b:cf:de:e8:86:03:ab:
e5:68:ce:07:fa:a5:cc:2d:a5:e7:8e:7a:04:31:d2:
c1:07:77:69:85:f3:39:51:8f:ca:a5:8a:07:03:f4:
45:0a:36:24:0b:22:10:f9:8f:92:e3:a9:e6:c1:6f:
4f:f9:90:c1:7b:6d:56:db:70:d7:ad:de:3b:2c:10:
c3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A6:CD:E3:E1:01:7F:44:4A:9C:86:42:E2:69:40:42:FE:39:64:CC
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/1-qbN4-EBf0RKnIZC4mlAQv45ZMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.70.0/24
Signature Algorithm: sha256WithRSAEncryption
82:80:40:05:e2:c3:c7:c2:29:06:08:6e:fb:ba:12:50:e4:24:
5b:80:4d:1a:39:28:ac:19:05:3a:98:e9:19:9f:3a:64:71:a9:
e1:7b:0d:c7:1b:17:9f:31:ad:23:f2:be:da:d4:0c:48:9d:70:
0a:01:09:4f:2f:35:22:68:a8:7d:32:14:3e:cf:48:4c:b6:89:
5e:82:68:d5:23:cd:35:6d:1f:93:88:1a:88:2c:7e:b7:51:09:
b8:f4:1d:0a:28:14:37:51:00:1d:ef:4e:00:7e:2b:66:a3:22:
8e:55:f9:9b:22:ee:22:49:fc:11:d4:67:de:ba:00:43:fc:17:
21:36:0e:e4:05:dc:94:83:35:77:a5:fc:9c:0b:b2:97:d4:08:
d4:47:5f:80:8c:b6:69:5f:2e:ff:98:f2:c2:81:46:3a:c6:a4:
bc:f9:f4:1e:1a:07:dd:75:d0:8d:9a:bb:8a:d9:75:51:2f:8c:
9c:aa:fa:e6:30:4b:a8:e2:89:64:99:bd:0f:ef:9e:17:a3:08:
6a:a3:44:5f:ef:1c:64:5d:dd:d2:eb:c9:49:1d:5d:dc:ee:31:
92:2a:b3:69:0b:3e:7a:db:0b:59:dc:16:cf:4d:8c:22:7d:00:
99:b7:b9:a3:6a:77:56:bb:88:62:c1:1d:0f:ef:9f:6c:fb:61:
ce:df:b8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 18 08:12:11 2023 by rpki-client on console-fra.rpki-client.org