Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/Hxx78FcBG7QNZeEAqFbtrfsEqS4.roa
File: Hxx78FcBG7QNZeEAqFbtrfsEqS4.roa (raw, json)
Hash identifier: 1cJg7l03pNuW7Hl9mupEvYgec3YCxgRea3oG7UPDBHw=
Subject key identifier: 1F:1C:7B:F0:57:01:1B:B4:0D:65:E1:00:A8:56:ED:AD:FB:04:A9:2E
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 01857315F77F29D89040AC9BE973F969BD46
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/Hxx78FcBG7QNZeEAqFbtrfsEqS4.roa
Signing time: Mon 02 Jan 2023 15:24:57 +0000
ROA not before: Mon 02 Jan 2023 15:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 45.153.91.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:f7:7f:29:d8:90:40:ac:9b:e9:73:f9:69:bd:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Jan 2 15:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f1c7bf057011bb40d65e100a856edadfb04a92e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:22:e1:21:e1:99:06:fd:41:b7:e8:71:2d:85:
73:33:8c:62:90:0b:e8:4f:b1:ff:e3:34:db:1d:bc:
06:5b:34:f8:ff:18:f8:2e:11:c6:b9:da:93:9f:2f:
68:2a:5e:2d:85:43:f6:d5:51:2d:07:cd:05:d5:3f:
01:db:f9:b6:ce:11:7c:14:9c:1b:70:6f:52:04:ab:
31:8e:45:fc:66:19:7a:2f:2c:ab:ca:ca:90:5e:f6:
c0:9f:98:02:84:7f:9c:dc:f7:27:b5:9c:01:ae:3d:
d7:35:51:44:1c:bc:05:75:27:cc:11:36:56:22:88:
a0:ab:6d:d3:cc:d0:a8:11:c9:2a:a0:ca:12:3a:ea:
19:eb:02:9c:2c:8b:eb:93:0b:fb:95:4d:bd:d4:f3:
0b:a3:03:23:7d:f2:aa:6d:ea:21:2c:00:58:94:50:
74:ec:65:94:4a:49:fb:9d:09:30:d1:ec:ad:ce:aa:
d1:ca:2c:78:d6:53:42:11:5b:48:2a:90:6d:5e:06:
8a:ba:b6:02:04:9e:8a:33:aa:83:68:a2:06:4b:f9:
ab:82:b8:97:2b:ec:f1:1a:64:4d:0d:e5:64:4a:8b:
9b:71:36:15:38:1a:1e:97:db:d8:71:ab:6d:59:d6:
ad:32:4a:35:5a:c0:27:01:4f:40:e1:82:74:18:17:
71:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:1C:7B:F0:57:01:1B:B4:0D:65:E1:00:A8:56:ED:AD:FB:04:A9:2E
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/Hxx78FcBG7QNZeEAqFbtrfsEqS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.91.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:f7:fc:f2:08:0e:53:6d:e1:7f:84:84:db:a5:75:ea:25:30:
f6:16:fa:36:9e:76:07:86:4e:9c:6b:39:ec:19:1e:81:c0:5c:
69:cc:a4:e1:9b:8f:d5:dc:2c:7c:4a:bb:97:1b:12:99:00:b0:
9c:e6:a3:0b:36:0c:d5:39:20:d7:49:da:53:e4:dd:c0:5e:3a:
48:a6:83:d9:c3:da:d1:c6:d9:b0:c4:b5:44:40:94:58:8b:b0:
8e:dd:42:c4:83:e1:5c:44:6c:37:29:41:9b:43:84:10:98:6c:
d1:f3:4f:f7:c6:20:c5:8c:f1:55:68:e8:0b:3f:13:9e:91:8b:
27:54:f9:f9:45:3e:2a:4e:3c:e4:9f:d7:47:a1:65:8e:ad:3d:
7c:08:9c:39:d1:0a:b9:36:17:7f:bd:2c:f2:8a:b1:45:ec:26:
cb:a4:8d:5f:c1:90:60:e0:cd:0a:d0:e2:b8:fd:74:44:8a:ae:
b6:a4:1f:67:94:2e:a4:26:cb:4a:30:70:76:e3:e2:c5:6b:a2:
58:49:5c:08:cc:b8:cb:0e:7f:d3:49:97:80:26:36:21:5f:b6:
ae:e5:cd:0c:3f:c9:25:0d:7c:4f:41:be:b3:5c:59:c6:cd:ca:
ec:3b:76:63:eb:2c:e7:ea:f8:4b:06:24:9c:81:3a:c4:9d:ca:
c3:c2:c8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 9 19:37:46 2023 by rpki-client on console-fra.rpki-client.org