Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/0ULd2nxyMYgu8xvnT0WfZhq3afY.roa
File: 0ULd2nxyMYgu8xvnT0WfZhq3afY.roa (raw, json)
Hash identifier: ylGcLDEFiVoSoVqrLZGEKwVv5X1mxN6hYw2AXryi3fA=
Subject key identifier: D1:42:DD:DA:7C:72:31:88:2E:F3:1B:E7:4F:45:9F:66:1A:B7:69:F6
Certificate issuer: /CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Certificate serial: 018962D1E985D13233540FA95376F72B647B
Authority key identifier: 13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/0ULd2nxyMYgu8xvnT0WfZhq3afY.roa
Signing time: Mon 17 Jul 2023 07:47:51 +0000
ROA not before: Mon 17 Jul 2023 07:47:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64073
IP address blocks: 45.80.50.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:62:d1:e9:85:d1:32:33:54:0f:a9:53:76:f7:2b:64:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Validity
Not Before: Jul 17 07:47:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d142ddda7c7231882ef31be74f459f661ab769f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cd:eb:6e:e3:f5:db:df:22:1a:69:f1:c7:4d:
d4:40:cd:e3:d8:01:11:1a:df:b6:13:41:ad:96:c6:
cc:3d:c5:3b:eb:53:dd:f7:05:6f:f4:22:98:01:14:
56:f2:d7:9c:c6:29:e2:b0:59:02:89:58:c2:24:ac:
67:2d:2d:24:b8:ac:3b:36:ae:b7:af:c1:25:e0:65:
e4:7e:42:d7:0b:bb:03:e6:1c:40:ce:8e:1e:d0:61:
9d:f7:30:cd:77:fd:10:00:ed:bf:04:69:49:11:3a:
ae:8a:14:64:5b:6e:59:64:4d:f9:90:53:16:c2:02:
9b:df:a3:93:4e:4f:96:f1:60:53:ca:ae:d3:d0:70:
b8:20:d9:5a:29:bf:c6:b5:71:43:f6:6d:e8:a3:81:
65:40:9b:0a:3f:40:58:34:01:ad:e6:72:00:27:0f:
dd:14:e4:1b:02:e3:a0:d7:c1:e8:3c:0d:ae:37:e1:
65:77:82:55:1a:8f:34:be:34:5a:00:03:19:07:c8:
56:3b:95:d0:85:f7:4d:d2:07:c8:8f:10:0b:8e:0d:
87:7f:06:9f:3e:cf:e6:1e:06:d5:dd:a0:5b:2f:4e:
4f:1b:08:3a:eb:79:fc:36:f0:f6:46:eb:95:b5:43:
90:b8:d4:71:28:5b:9a:f5:89:ab:d5:b9:ec:dd:db:
87:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:42:DD:DA:7C:72:31:88:2E:F3:1B:E7:4F:45:9F:66:1A:B7:69:F6
X509v3 Authority Key Identifier:
keyid:13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/0ULd2nxyMYgu8xvnT0WfZhq3afY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.50.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:95:4c:bb:04:bd:45:c3:f1:5b:01:6f:27:45:73:ad:0e:3e:
38:03:89:2a:e0:c9:4f:88:d8:22:32:72:39:78:be:97:f9:cc:
3b:1a:f2:a7:11:0a:e7:57:42:cd:b3:c9:f9:c5:ed:49:61:2a:
61:0e:e0:d1:57:ae:7c:9d:63:cd:34:c1:bb:73:80:89:8f:2a:
b5:f5:b9:71:19:ed:4e:ed:44:40:0f:0a:2d:0e:7a:99:8f:df:
15:d7:0f:eb:fd:5f:7f:6a:83:9a:8f:f7:55:ed:5a:6d:39:8f:
8a:4a:ff:88:eb:25:3b:16:ed:19:b2:f3:bc:4c:ce:4f:87:57:
a3:b6:30:62:aa:10:01:96:a1:e9:f2:d2:69:da:c2:d0:e7:f5:
a1:7b:54:af:67:fb:4f:e8:3a:55:62:26:21:99:67:9c:20:c8:
91:f4:d9:b1:f5:25:90:90:0d:ca:4d:f6:9c:fe:ea:54:61:6d:
e8:0c:c6:54:cd:67:e9:f9:4d:74:00:4c:e0:98:15:24:17:a5:
20:04:7a:34:c7:70:cd:a0:f3:e8:74:b6:11:2b:59:37:4d:1c:
7b:a8:61:57:32:b9:03:4d:fc:93:e3:18:32:2c:a2:e5:a8:1a:
ad:ce:dd:19:e2:de:38:3f:d7:f4:85:aa:03:da:84:47:92:4b:
a4:86:65:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:00 2024 by rpki-client on console-fra.rpki-client.org