Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/7DrMsCRBcFvHJSHUy-R6svNMQIE.roa
File: 7DrMsCRBcFvHJSHUy-R6svNMQIE.roa (raw, json)
Hash identifier: dGt3uVDCdc9WjTGE/9IEcs41CtHRpxrX10L3tNOwBfQ=
Subject key identifier: EC:3A:CC:B0:24:41:70:5B:C7:25:21:D4:CB:E4:7A:B2:F3:4C:40:81
Certificate issuer: /CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Certificate serial: 01856F823EBD22EA86FDA4FBD3E698D1C934
Authority key identifier: 0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/7DrMsCRBcFvHJSHUy-R6svNMQIE.roa
Signing time: Sun 01 Jan 2023 22:44:44 +0000
ROA not before: Sun 01 Jan 2023 22:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204372
IP address blocks: 45.12.185.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:82:3e:bd:22:ea:86:fd:a4:fb:d3:e6:98:d1:c9:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Validity
Not Before: Jan 1 22:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec3accb02441705bc72521d4cbe47ab2f34c4081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:55:b6:82:0f:df:ad:5c:1d:10:fe:4d:77:3d:
09:90:08:c8:d0:ba:2e:c6:36:83:a1:be:04:64:92:
ee:b1:02:c9:54:a8:48:f9:80:13:d8:bb:f6:8e:56:
53:d2:71:63:7d:7e:f2:f3:6c:62:ef:6a:0d:68:a6:
f7:5a:09:e2:b1:7e:5a:da:89:fd:46:5e:c6:29:67:
2d:9a:19:90:5e:c2:1e:e1:c1:c9:65:f8:ec:33:3a:
f4:2b:8d:f7:f7:11:22:ae:a4:31:b0:7b:b5:d6:85:
00:65:4b:9d:aa:f4:10:a5:e6:58:68:02:36:28:92:
d0:4a:a9:46:d2:84:e7:f3:79:39:d9:bb:5c:cf:ff:
6f:c8:c2:0c:d7:e1:69:cd:a7:90:4e:6a:80:d6:4c:
9c:51:65:50:91:2b:5e:13:79:95:5e:98:57:f6:5d:
c1:3f:7d:26:0f:df:4b:4e:1c:27:c3:96:b1:e1:af:
bf:e1:a6:98:86:8c:5c:68:4f:76:1a:7b:c9:a8:df:
5d:74:69:c1:eb:d7:1b:c0:a3:23:94:fe:0a:a0:51:
80:6b:15:1e:6b:46:75:02:7f:f5:6e:03:40:98:58:
d4:41:af:dd:3e:14:9c:0a:40:8f:a7:a7:cd:a2:50:
75:a2:59:92:aa:89:85:ef:09:06:04:b3:78:04:69:
0e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3A:CC:B0:24:41:70:5B:C7:25:21:D4:CB:E4:7A:B2:F3:4C:40:81
X509v3 Authority Key Identifier:
keyid:0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/7DrMsCRBcFvHJSHUy-R6svNMQIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.185.0/24
Signature Algorithm: sha256WithRSAEncryption
59:d5:03:03:a1:c8:17:90:7f:71:2e:60:96:c9:37:05:1a:24:
34:d6:ce:f8:24:1f:40:53:e3:ec:b0:98:37:73:ec:56:f9:03:
c2:d3:8e:d1:af:57:9e:b5:14:25:23:81:96:c3:fe:35:c3:4a:
d7:96:83:ed:0f:ac:1a:67:5d:4c:2b:7f:7c:f2:75:63:cd:e6:
f9:1c:55:3f:24:94:11:12:2b:a8:3d:c4:1e:87:64:cb:7f:93:
e9:b4:58:52:33:af:ef:cf:44:ff:b6:1a:cc:52:9b:c3:e1:04:
fc:d3:09:17:f3:64:48:ce:0c:43:8b:b5:ff:c7:f7:8e:61:73:
1c:b1:f3:7c:90:26:91:f0:48:22:ec:24:83:ee:e7:0b:f9:a0:
fa:a1:01:9d:fe:7c:01:4c:06:a1:c6:04:14:89:10:de:28:95:
63:e2:5b:cd:ac:14:07:7e:19:92:34:9b:db:77:fd:ca:a4:b0:
59:c5:b2:a6:8a:c9:07:a4:ac:7d:d7:d9:1c:c7:54:02:49:b5:
66:55:d8:41:a4:28:61:38:36:ed:bd:e1:bd:81:97:d0:3e:ed:
dc:0f:77:39:31:58:29:71:05:16:b8:08:68:ba:bc:e5:95:4a:
e7:fd:85:ec:05:b8:41:ea:22:3c:2d:a8:5c:d9:a4:10:a6:af:
a4:77:d0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:28 2024 by rpki-client on console-ams.rpki-client.org