Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/16y9kVDjwrp_17ZhD-wJEO4wEY4.roa
File: 16y9kVDjwrp_17ZhD-wJEO4wEY4.roa (raw, json)
Hash identifier: +GiJPeopHMHCJC1TVW7JhclStHpz2W9cKRUNg/JSuVs=
Subject key identifier: D7:AC:BD:91:50:E3:C2:BA:7F:D7:B6:61:0F:EC:09:10:EE:30:11:8E
Certificate issuer: /CN=b817162877da9f4030bbcb9fe8ac143e6ab2871b
Certificate serial: 018571276F1128EE17F9DC453B02F6443652
Authority key identifier: B8:17:16:28:77:DA:9F:40:30:BB:CB:9F:E8:AC:14:3E:6A:B2:87:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/16y9kVDjwrp_17ZhD-wJEO4wEY4.roa
Signing time: Mon 02 Jan 2023 06:24:47 +0000
ROA not before: Mon 02 Jan 2023 06:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207992
IP address blocks: 45.145.164.0/24 maxlen: 24
45.145.166.0/24 maxlen: 24
45.145.167.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:6f:11:28:ee:17:f9:dc:45:3b:02:f6:44:36:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b817162877da9f4030bbcb9fe8ac143e6ab2871b
Validity
Not Before: Jan 2 06:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7acbd9150e3c2ba7fd7b6610fec0910ee30118e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c7:cf:df:fb:3d:23:a5:e8:d3:56:0d:bb:67:
51:cf:5a:d8:e0:ad:a4:96:85:5a:93:15:3c:68:1d:
95:fe:5c:39:57:09:06:c3:6a:ee:5e:e4:5c:00:b5:
b6:6f:70:aa:8f:64:41:da:f3:1b:ea:80:54:33:a2:
e9:8d:e1:a1:e4:1d:dc:61:18:0e:b2:b2:28:d1:9d:
ae:4a:c3:6f:39:e4:89:bc:26:ae:f6:92:6d:dd:7d:
8f:7f:f1:20:64:87:95:af:d6:61:38:63:71:04:a9:
89:2e:3d:70:00:6c:34:4c:f5:6d:78:ae:63:da:16:
4e:37:3c:ff:94:58:ee:43:85:17:04:e6:52:78:3c:
0a:0b:e0:a0:90:90:ad:14:72:a0:43:ac:22:64:20:
33:c9:d8:ec:01:61:de:fb:80:ff:72:c9:e2:76:e8:
9e:87:b4:e3:8f:74:7f:e8:0e:2f:dc:be:ef:81:7a:
d0:c4:f3:f4:cb:f3:d9:c1:43:e6:22:36:46:ba:e6:
ab:7e:86:d4:14:d9:88:46:ef:60:8f:aa:e6:24:01:
c2:e2:a1:4e:e4:c2:b1:73:85:3d:d6:0d:64:3f:52:
0a:f6:9a:62:b0:98:06:ed:25:28:47:c8:f5:17:9a:
3c:2f:8b:39:c2:1e:41:45:63:5c:7c:ef:b1:65:bd:
1b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AC:BD:91:50:E3:C2:BA:7F:D7:B6:61:0F:EC:09:10:EE:30:11:8E
X509v3 Authority Key Identifier:
keyid:B8:17:16:28:77:DA:9F:40:30:BB:CB:9F:E8:AC:14:3E:6A:B2:87:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/16y9kVDjwrp_17ZhD-wJEO4wEY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.164.0/24
45.145.166.0/23
Signature Algorithm: sha256WithRSAEncryption
89:02:4a:2b:63:99:c2:0c:91:5c:e4:c9:35:58:52:9c:ad:e6:
91:e6:0f:fd:94:5f:03:a3:aa:00:75:d8:96:f3:ae:1e:5e:8e:
d7:7c:52:f6:42:5d:71:6b:b2:8b:8f:64:2b:6e:3d:79:d5:67:
10:c9:2e:09:e6:6f:4e:74:49:2d:69:f1:a4:be:e0:30:de:91:
7f:87:9f:9b:1a:a0:70:cc:c4:3e:e8:f4:0a:91:f4:61:a2:7b:
8c:f8:25:29:43:9b:b7:02:1d:ec:f3:84:94:ed:1c:af:a4:6c:
e9:67:6b:2b:25:1f:84:ca:70:57:74:54:f0:ed:9b:b5:34:54:
b0:1d:55:78:de:ba:f5:4c:9a:5c:c9:f6:3e:5c:1e:b6:61:8e:
f8:2f:82:de:8c:b1:bb:28:75:1b:b9:fd:ed:70:c4:df:c6:45:
eb:95:0c:db:a2:2f:3b:46:d0:19:0e:f8:e4:84:62:74:ea:b3:
05:e1:25:ea:de:7e:1c:1c:0f:99:af:4c:86:3e:de:20:73:d3:
2a:94:21:e1:ba:64:6e:96:e7:f5:c9:c7:4c:a6:75:a2:19:f2:
1d:f4:d1:12:87:7f:cb:e4:f9:7e:11:52:bb:a0:a0:9d:31:3b:
a1:b1:21:1a:23:8d:58:3b:74:15:69:c9:b8:b1:53:e3:33:2b:
6f:55:f3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 28 14:03:35 2023 by rpki-client on console-ams.rpki-client.org