Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/e4JXQr3za57Y0ihWUBWv2n6ARnA.roa
File: e4JXQr3za57Y0ihWUBWv2n6ARnA.roa (raw, json)
Hash identifier: 5GOfFLBD3SyMFvTg7Mscy3AgqEQyICbgMx3dnI2tnLE=
Subject key identifier: 7B:82:57:42:BD:F3:6B:9E:D8:D2:28:56:50:15:AF:DA:7E:80:46:70
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0185783119D2FA4ED6E4D09849342AD54487
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/e4JXQr3za57Y0ihWUBWv2n6ARnA.roa
Signing time: Tue 03 Jan 2023 15:12:41 +0000
ROA not before: Tue 03 Jan 2023 15:12:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137409
IP address blocks: 45.139.6.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:78:31:19:d2:fa:4e:d6:e4:d0:98:49:34:2a:d5:44:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 3 15:12:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b825742bdf36b9ed8d228565015afda7e804670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:13:09:46:06:b2:40:80:cb:9a:14:e9:fa:a4:
3f:48:93:ad:00:b0:0c:6b:2d:ce:50:f9:0f:a5:29:
31:53:ca:56:98:0b:69:af:3d:b8:35:f0:6d:25:17:
d4:07:4a:ac:f8:09:a9:5f:95:80:fc:e9:d7:5b:44:
9a:10:8e:64:82:3b:86:11:7d:4d:73:1c:40:85:e7:
47:60:be:36:64:30:8f:8a:3a:8a:08:d5:27:68:c6:
06:f5:6f:72:57:0f:21:4d:b4:8e:c6:74:9d:88:50:
4e:ed:05:f0:e4:cb:5f:b5:2c:69:b4:7f:cd:58:c0:
e7:8e:3f:ca:5e:60:21:7d:4a:2c:b1:4b:4e:ea:2d:
b8:68:04:4e:8b:e9:e2:0e:05:dd:a5:27:2e:35:9b:
ea:9d:08:49:a8:50:b2:97:76:ea:d4:16:00:98:91:
a5:72:23:b5:ed:04:a7:56:35:d5:01:e7:c5:c1:df:
4a:73:a0:a4:9a:cf:1e:0d:83:6d:06:db:4f:2d:2b:
19:bb:b8:2c:0c:5f:3d:1e:51:8e:6a:d1:51:ad:f2:
03:0b:40:e0:2e:c9:a2:ba:ab:3a:99:0c:7b:52:2e:
c2:0b:26:10:5f:eb:7e:5e:93:c9:ab:ff:09:c2:93:
4a:28:32:cf:85:7c:37:ea:c7:e1:b4:8e:0d:0d:ea:
91:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:82:57:42:BD:F3:6B:9E:D8:D2:28:56:50:15:AF:DA:7E:80:46:70
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/e4JXQr3za57Y0ihWUBWv2n6ARnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.6.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:fc:66:4b:81:ad:96:e3:f6:43:51:cb:64:e5:f2:60:38:77:
08:97:a5:96:32:e4:02:02:bf:7f:63:7c:2b:0c:d1:a7:ad:f8:
82:42:e1:a1:b1:02:58:e3:fd:48:eb:99:c2:37:75:5b:8f:71:
df:5f:02:d9:77:94:d7:8c:25:6d:7d:a2:2c:a9:b8:90:78:b0:
bb:eb:48:18:f8:b3:64:fd:ac:18:31:5a:73:02:ff:c9:d5:43:
5c:f3:89:7e:99:5e:30:05:56:67:61:60:d0:7c:5e:41:ad:a8:
89:73:bb:99:6e:a5:27:2b:01:56:e6:4e:1a:3a:91:f0:67:5e:
40:c8:23:67:00:5f:d6:d3:e8:6e:1d:72:66:11:0b:1a:69:a2:
a3:d5:28:8d:c9:ed:45:6b:7f:17:23:08:d8:0b:0b:53:16:a9:
89:49:e5:3b:be:42:97:ee:ff:ea:a6:12:26:de:ff:ca:a1:c6:
09:af:9c:de:a6:78:ee:e0:b3:e6:cc:e3:d1:d5:de:92:c3:64:
55:03:cf:2b:d1:ce:b2:a5:c9:5e:85:82:89:12:a8:37:6d:43:
8c:9e:47:4c:bd:0a:82:1f:5b:5b:8d:9a:fc:2a:4c:44:a8:08:
2b:1b:87:f7:77:b2:37:ff:0e:f1:93:e6:3a:38:c7:de:41:6d:
d7:a5:c4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 10 16:30:59 2023 by rpki-client on console-fra.rpki-client.org