Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/127qZetwbKImkIqGP_TsUIjI4NY.roa
File: 127qZetwbKImkIqGP_TsUIjI4NY.roa (raw, json)
Hash identifier: jEbotfvaxKfnWUp/D+Pe7I7UuFQgFubiBB/2J0IkC+Y=
Subject key identifier: D7:6E:EA:65:EB:70:6C:A2:26:90:8A:86:3F:F4:EC:50:88:C8:E0:D6
Certificate issuer: /CN=9b32a2e8fcbeee63020ba93daab9076c37bc9991
Certificate serial: 01856F700CA3B8B41EDE0CD4BAAC2CA2E6F8
Authority key identifier: 9B:32:A2:E8:FC:BE:EE:63:02:0B:A9:3D:AA:B9:07:6C:37:BC:99:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/127qZetwbKImkIqGP_TsUIjI4NY.roa
Signing time: Sun 01 Jan 2023 22:24:52 +0000
ROA not before: Sun 01 Jan 2023 22:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39074
IP address blocks: 45.15.202.0/24 maxlen: 24
45.15.203.0/24 maxlen: 24
45.15.200.0/24 maxlen: 24
45.15.201.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:70:0c:a3:b8:b4:1e:de:0c:d4:ba:ac:2c:a2:e6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b32a2e8fcbeee63020ba93daab9076c37bc9991
Validity
Not Before: Jan 1 22:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d76eea65eb706ca226908a863ff4ec5088c8e0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:89:fc:84:82:34:bd:d9:e4:af:bc:66:39:bc:
9e:e8:39:05:3e:da:19:ce:aa:18:39:05:1b:7b:e9:
9b:fc:6a:6e:7c:db:cc:a9:74:15:ee:98:19:c9:01:
9f:ff:db:9b:c5:5b:fd:20:79:c2:68:a7:aa:f3:f7:
65:ab:22:91:29:b3:35:0c:89:ee:82:46:c2:03:1a:
41:f1:93:64:c2:38:7b:1c:11:22:5f:19:32:5b:f1:
e7:d6:44:40:54:96:bd:d1:ad:b4:94:00:e1:28:d1:
d8:94:25:99:e2:a7:fe:76:1c:38:b0:03:d5:d0:c3:
1d:e4:b1:5d:7e:98:ec:1b:04:03:6a:60:e1:32:7b:
73:3a:af:03:c8:e3:73:f9:a1:38:28:54:9c:1c:fc:
73:48:c2:c0:35:2b:58:aa:1d:5c:83:e8:74:1f:25:
65:80:16:2d:d4:1f:5f:96:f0:09:91:1e:a9:b1:c1:
7b:c3:b3:fd:e2:4c:b5:9b:0f:e2:7d:2c:21:3d:57:
5d:77:30:7e:86:ba:6d:f0:0e:3a:5e:35:63:3b:4b:
35:e3:a1:c8:c0:d3:b2:8c:50:1c:be:76:7b:ca:62:
c3:b5:1c:de:4c:c5:aa:d8:c6:63:a0:d9:85:61:e7:
16:42:44:ef:7f:5e:8c:be:f7:3c:7c:fe:e8:c9:7f:
c7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6E:EA:65:EB:70:6C:A2:26:90:8A:86:3F:F4:EC:50:88:C8:E0:D6
X509v3 Authority Key Identifier:
keyid:9B:32:A2:E8:FC:BE:EE:63:02:0B:A9:3D:AA:B9:07:6C:37:BC:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/127qZetwbKImkIqGP_TsUIjI4NY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.200.0/22
Signature Algorithm: sha256WithRSAEncryption
90:b0:99:48:90:44:8d:f5:5e:64:21:85:5e:b9:fe:3b:48:6b:
04:97:af:49:09:5a:1d:39:4a:e7:1f:90:82:ab:95:b8:8b:26:
b9:20:72:46:43:b2:19:af:35:dd:f9:af:ee:3b:60:03:7f:47:
86:b7:df:b0:b5:62:41:4e:58:64:a4:fb:ad:19:d4:bc:f8:1f:
a8:a5:2b:75:3d:fc:25:e8:b4:21:74:63:83:83:18:6a:a8:ef:
7e:9a:c0:7b:ca:3c:cc:9d:09:7a:a8:59:97:51:44:54:be:82:
6c:21:01:97:93:53:2f:62:23:2e:a1:3f:5d:eb:dd:95:37:2c:
48:5f:86:67:3d:c9:2e:ab:63:62:ad:e1:6c:dd:77:a8:4a:fe:
b3:c0:27:b1:60:f4:ff:ac:da:71:47:a3:bc:76:73:62:b2:48:
03:ca:d2:d8:62:f7:01:65:18:ef:c0:f1:7e:4c:3a:8b:92:0b:
e3:c1:2c:95:a1:18:c9:28:33:45:b7:ce:9d:a0:ca:de:4f:9b:
f5:cc:f2:19:35:2c:f8:4a:82:bf:3f:b0:93:8d:c4:a5:6a:71:
7a:c7:d9:c0:4c:b0:10:5a:11:11:02:da:31:42:26:d1:d8:f7:
1d:93:68:2e:33:5f:f7:e3:64:29:f9:61:90:26:b8:8b:82:4e:
71:a2:af:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:21 2024 by rpki-client on console-ams.rpki-client.org