Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/1-lI7TEr0TTasHkv14nNIt5O8UfM.roa
File: 1-lI7TEr0TTasHkv14nNIt5O8UfM.roa (raw, json)
Hash identifier: KLGB1odlsRQoXsPM5YBnWrZqMkC/hdPN8xDk/bgkXHU=
Subject key identifier: FA:52:3B:4C:4A:F4:4D:36:AC:1E:4B:F5:E2:73:48:B7:93:BC:51:F3
Certificate issuer: /CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Certificate serial: 01856DE66785729F1A94132D9E5EDC73530C
Authority key identifier: 13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/1-lI7TEr0TTasHkv14nNIt5O8UfM.roa
Signing time: Sun 01 Jan 2023 15:14:54 +0000
ROA not before: Sun 01 Jan 2023 15:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 45.80.48.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e6:67:85:72:9f:1a:94:13:2d:9e:5e:dc:73:53:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Validity
Not Before: Jan 1 15:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa523b4c4af44d36ac1e4bf5e27348b793bc51f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:51:e2:ac:47:86:93:b0:72:50:0b:35:5a:d8:
13:14:6b:a3:f1:86:8f:26:89:65:c8:f3:0b:b0:e8:
a0:b5:05:30:d8:01:00:93:70:31:6c:27:eb:71:7a:
80:20:e8:a1:06:26:b4:db:8b:7a:88:71:4c:6f:dc:
d7:17:74:49:92:a2:31:de:67:05:fb:cc:da:55:16:
1f:a6:db:5c:ad:a9:cb:68:de:0c:47:38:e4:12:8f:
bf:5d:00:95:74:84:94:13:8a:37:e7:f2:af:a2:ee:
b9:c8:63:54:a5:50:25:61:ab:79:c1:21:e4:da:9f:
b5:3b:42:ed:37:09:c9:ce:aa:d1:39:60:9b:3f:b8:
84:a1:1c:66:04:61:e7:c3:5e:22:24:79:e0:ea:13:
c6:51:74:81:16:62:85:af:ba:04:78:2d:e6:f6:0d:
17:2b:08:00:3e:01:d7:47:81:bf:3f:58:b2:f1:11:
85:b7:80:75:1c:9a:6c:d2:b8:af:32:b2:53:28:29:
4c:94:2f:89:04:91:82:84:de:64:72:08:b5:f7:d4:
e8:a0:f4:ac:00:fd:e3:95:1d:a8:ee:f7:9f:d0:bd:
a1:f8:ad:52:5e:8b:02:ee:47:c2:44:43:86:c8:c2:
12:68:42:de:a3:c1:24:72:70:ea:b1:1b:45:09:35:
77:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:52:3B:4C:4A:F4:4D:36:AC:1E:4B:F5:E2:73:48:B7:93:BC:51:F3
X509v3 Authority Key Identifier:
keyid:13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/1-lI7TEr0TTasHkv14nNIt5O8UfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.48.0/24
Signature Algorithm: sha256WithRSAEncryption
68:f1:0f:d0:41:c5:43:81:d4:7d:b5:51:73:c7:d2:23:9e:50:
69:f1:70:6a:bb:e5:a1:da:8d:79:85:79:fc:19:99:67:50:9c:
3e:93:ab:2d:b4:80:c2:38:ec:a7:41:2b:65:ca:1f:e5:13:5d:
f2:b9:cd:e7:74:4e:d6:aa:12:1a:ce:8f:98:b2:11:cb:ab:7a:
66:e7:7d:6e:b7:86:0b:f6:94:1b:5b:9a:af:b5:27:0b:b5:1f:
ff:96:31:72:3a:dd:bc:d9:bd:b5:77:30:93:2c:0b:11:81:e2:
b2:ee:5c:fe:fe:32:85:e8:a1:6f:1b:ba:28:a9:36:83:e0:84:
9d:d2:24:42:44:6b:05:27:aa:55:7f:45:b0:14:e8:1b:10:0b:
26:09:79:d0:10:2a:a8:81:cf:b5:bc:da:1c:23:49:fc:b9:b2:
34:e0:1b:93:40:b4:13:03:9f:d5:df:3c:b5:4a:45:6b:f0:ee:
dc:ee:f4:63:ff:7d:26:cd:1c:52:2b:3e:fb:e9:07:0b:ff:7f:
ca:1d:67:ba:ea:2f:09:ff:8f:2c:3f:0c:ae:86:e3:16:e5:05:
a7:03:b6:ae:64:a9:c8:37:58:3e:09:3e:c4:01:95:99:d0:1b:
61:95:14:65:8f:ed:86:aa:3a:97:7b:03:35:a8:52:e3:84:d9:
99:75:cb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:00 2024 by rpki-client on console-fra.rpki-client.org