Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/05QI2uitP6W1-_FfLcRslbBJxSA.roa
File: 05QI2uitP6W1-_FfLcRslbBJxSA.roa (raw, json)
Hash identifier: TP1MhSGq0BibzxM6aKW91rssHkq0+dci9FqnPV45RFo=
Subject key identifier: D3:94:08:DA:E8:AD:3F:A5:B5:FB:F1:5F:2D:C4:6C:95:B0:49:C5:20
Certificate issuer: /CN=b817162877da9f4030bbcb9fe8ac143e6ab2871b
Certificate serial: 018571276D153381C9E0FF6982B6254E0C23
Authority key identifier: B8:17:16:28:77:DA:9F:40:30:BB:CB:9F:E8:AC:14:3E:6A:B2:87:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/05QI2uitP6W1-_FfLcRslbBJxSA.roa
Signing time: Mon 02 Jan 2023 06:24:47 +0000
ROA not before: Mon 02 Jan 2023 06:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49028
IP address blocks: 45.145.165.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:6d:15:33:81:c9:e0:ff:69:82:b6:25:4e:0c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b817162877da9f4030bbcb9fe8ac143e6ab2871b
Validity
Not Before: Jan 2 06:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d39408dae8ad3fa5b5fbf15f2dc46c95b049c520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:73:6b:ec:db:9d:47:16:c6:24:0b:4b:6c:75:
2a:5a:3c:f7:06:0b:c7:75:73:ed:68:45:71:5d:f0:
46:d1:54:50:32:5c:0b:a5:5e:7d:64:a0:f6:28:15:
39:cb:3b:66:4a:e8:8e:b0:b6:e1:49:53:6d:63:81:
e4:bf:63:50:76:1e:cf:e1:da:b5:ef:a7:6b:2e:e6:
ed:e7:b7:8d:62:eb:3a:eb:0f:51:93:f6:9f:97:8a:
af:2a:51:51:50:40:65:08:da:da:f3:11:0e:e0:9e:
43:13:97:2c:82:f3:40:ea:17:b9:e4:73:ab:83:34:
fc:fb:24:4d:a4:01:35:41:9a:d2:c2:4e:ae:2e:92:
b1:88:3a:d8:a6:be:47:86:9a:25:d3:8f:b9:a9:d6:
e3:94:f0:f5:ea:c9:ec:89:3c:38:cb:26:0e:17:c0:
6a:92:27:db:0c:2d:e7:1f:28:de:9d:b2:52:c2:df:
5b:32:f0:16:e7:f7:a7:57:d9:72:d0:07:0b:09:37:
94:3a:59:fe:81:1e:f5:90:ce:61:4f:66:53:0b:e4:
89:e3:39:c4:2f:4f:94:36:ec:76:2e:49:02:c5:6f:
c4:1b:87:07:be:fa:58:30:ed:af:d4:59:35:c1:e7:
44:6b:9f:52:0b:bc:59:9f:ca:63:fa:12:36:20:b3:
30:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:94:08:DA:E8:AD:3F:A5:B5:FB:F1:5F:2D:C4:6C:95:B0:49:C5:20
X509v3 Authority Key Identifier:
keyid:B8:17:16:28:77:DA:9F:40:30:BB:CB:9F:E8:AC:14:3E:6A:B2:87:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/05QI2uitP6W1-_FfLcRslbBJxSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.165.0/24
Signature Algorithm: sha256WithRSAEncryption
61:bc:f5:91:8b:cb:c3:68:ad:1e:06:60:bb:ae:f9:13:d9:51:
56:31:94:bf:90:d6:de:94:3c:0a:60:0b:22:72:96:a2:1e:f8:
9d:d7:da:fa:cd:84:b3:b2:85:f9:1f:dd:c7:21:25:0b:11:e4:
c4:77:91:01:50:e9:78:06:f7:ad:49:2d:fd:72:a0:86:85:5a:
d7:b3:9a:c7:c2:b4:75:89:4f:93:81:cc:19:9a:b6:60:a7:19:
bb:a7:cc:6c:94:63:d4:ee:53:05:56:56:68:8c:02:e8:90:56:
e5:2d:b1:c2:3a:33:8d:ee:a7:71:88:46:3b:ad:8b:c1:3a:1f:
07:2f:6d:71:cb:f2:16:94:72:ed:0a:90:67:3c:bf:eb:26:84:
2b:42:ed:b4:b4:cf:63:d1:7f:3b:71:b4:9e:29:be:4c:e4:e3:
ae:48:b9:ae:40:0f:ea:b1:95:2d:20:b5:97:9a:e6:b7:56:69:
5e:1d:c4:05:34:b4:1e:f7:ab:05:eb:a4:2f:3f:63:dd:ee:3f:
d4:ca:67:b0:eb:81:5e:a6:9f:3d:5e:cf:19:ef:fb:35:24:30:
f5:e7:05:23:49:a3:a2:02:3d:34:36:e4:3a:6c:4e:bb:2f:38:
00:72:f9:16:fa:5c:45:70:d6:f4:2a:4e:e3:56:b7:af:14:af:
cb:a4:a4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:54 2024 by rpki-client on console-ams.rpki-client.org