Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/ffc311-3110-47f5-8c4f-0c9f76a34005/1/Hvp5XzWx2CqIkLajieBiE0lE1UA.roa
File: Hvp5XzWx2CqIkLajieBiE0lE1UA.roa (raw, json)
Hash identifier: XOPsfUg7ElMaGWAm853BBxNuQA3+9FYY8wIUDc1Njs4=
Subject key identifier: 1E:FA:79:5F:35:B1:D8:2A:88:90:B6:A3:89:E0:62:13:49:44:D5:40
Certificate issuer: /CN=7d47d63346951d9316bbc2578645b5eae24531b9
Certificate serial: 01892196FC7CB6F8A9B1ECBE48D35F27E317
Authority key identifier: 7D:47:D6:33:46:95:1D:93:16:BB:C2:57:86:45:B5:EA:E2:45:31:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUfWM0aVHZMWu8JXhkW16uJFMbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/ffc311-3110-47f5-8c4f-0c9f76a34005/1/Hvp5XzWx2CqIkLajieBiE0lE1UA.roa
Signing time: Tue 04 Jul 2023 15:48:10 +0000
ROA not before: Tue 04 Jul 2023 15:48:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31122
IP address blocks: 45.11.168.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:21:96:fc:7c:b6:f8:a9:b1:ec:be:48:d3:5f:27:e3:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d47d63346951d9316bbc2578645b5eae24531b9
Validity
Not Before: Jul 4 15:48:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1efa795f35b1d82a8890b6a389e062134944d540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ee:c0:7e:a7:54:45:72:ab:09:9c:8d:7c:0a:
27:2d:e8:3f:17:53:b3:26:8b:6e:fb:52:52:33:5b:
01:fc:ad:6f:4f:e2:20:00:b2:b5:6b:29:09:cd:f1:
44:40:d0:5d:0d:a6:01:9e:98:4b:b1:e1:2e:9b:fb:
7d:87:22:c5:54:7e:d5:f9:80:61:0b:e0:e4:f0:f3:
20:71:b0:06:c2:4a:df:8f:6a:89:11:75:71:91:07:
73:5b:01:25:fb:e6:4b:8b:3f:70:1b:8d:30:8e:64:
cf:31:1e:e0:c1:7a:b2:4c:f6:19:1a:73:37:0a:01:
3f:58:c5:fa:71:a4:7b:23:99:a4:79:97:46:6e:66:
8c:43:58:46:ee:36:da:1f:52:ca:f6:d3:5e:96:54:
7c:d8:37:33:ae:f3:98:da:15:e4:6d:d3:b0:cb:e3:
17:2c:a6:01:b4:a5:ab:6f:ab:2b:2a:ef:29:ad:fb:
08:53:f4:f0:8d:7a:79:9c:b1:6c:1c:e4:28:a8:20:
61:cf:6c:87:8e:6e:85:6e:10:ba:b5:2c:9f:4c:44:
14:c8:4e:10:4d:30:12:41:76:1c:eb:55:d4:0f:0b:
37:3a:fb:58:df:f2:de:99:8e:2a:cc:c2:fa:27:27:
57:40:63:2e:d7:fe:9f:5a:61:dd:32:eb:64:45:96:
9d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:FA:79:5F:35:B1:D8:2A:88:90:B6:A3:89:E0:62:13:49:44:D5:40
X509v3 Authority Key Identifier:
keyid:7D:47:D6:33:46:95:1D:93:16:BB:C2:57:86:45:B5:EA:E2:45:31:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUfWM0aVHZMWu8JXhkW16uJFMbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ffc311-3110-47f5-8c4f-0c9f76a34005/1/Hvp5XzWx2CqIkLajieBiE0lE1UA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ffc311-3110-47f5-8c4f-0c9f76a34005/1/fUfWM0aVHZMWu8JXhkW16uJFMbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.168.0/22
Signature Algorithm: sha256WithRSAEncryption
68:96:72:41:2b:b2:d1:e0:39:f3:cc:1e:2e:80:fc:b5:1b:55:
49:6b:ac:72:b0:60:07:43:77:b7:ab:ed:6e:67:7d:f8:2a:5f:
ec:4a:a5:67:39:71:ff:0c:2d:3a:cf:a7:e7:32:66:7d:64:f5:
ec:4d:ba:2b:30:a3:05:2c:a8:c4:7c:85:53:ea:e3:02:c3:cb:
df:2a:84:30:40:8e:2c:97:63:69:91:33:b3:ca:f8:2b:a3:d9:
d7:92:7e:48:b7:da:63:78:88:ce:be:20:22:71:90:f4:14:46:
35:c1:78:1b:27:52:a1:12:af:11:ca:76:61:c1:67:95:04:19:
29:e2:81:22:7c:a2:f6:b0:c0:a3:4a:44:ee:c4:2b:e3:32:f4:
5b:26:e5:3a:d9:90:88:35:ce:a8:04:20:a3:5c:bf:55:43:63:
bc:2f:d2:ae:da:d4:cd:46:8c:17:b5:d0:8a:1e:10:c4:9b:1a:
2e:07:f1:ba:99:e1:59:f8:ab:c9:ff:7d:93:5a:8e:8c:a2:f3:
cf:70:6c:5d:7b:a3:20:b4:5d:05:15:61:0e:ee:e6:85:e1:e0:
7c:13:c9:25:4e:e7:f9:23:c6:20:88:a0:21:d6:dc:09:f7:28:
6e:eb:b4:c6:74:a3:b0:05:ed:38:7c:a5:57:44:a5:f3:07:1e:
31:09:ee:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:01 2024 by rpki-client on console-fra.rpki-client.org