Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/Dn3xKZ8N4_PdOEFV7s8i0QNsSQ4.roa
File: Dn3xKZ8N4_PdOEFV7s8i0QNsSQ4.roa (raw, json)
Hash identifier: ePV+s+VFTA92PuBYhP47qPMvXofQUee4izgw/cEOq9A=
Subject key identifier: 0E:7D:F1:29:9F:0D:E3:F3:DD:38:41:55:EE:CF:22:D1:03:6C:49:0E
Certificate issuer: /CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Certificate serial: 018C2CA1F7F6C8824CD2666E0217A45CEE21
Authority key identifier: 0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/Dn3xKZ8N4_PdOEFV7s8i0QNsSQ4.roa
Signing time: Sat 02 Dec 2023 22:24:21 +0000
ROA not before: Sat 02 Dec 2023 22:24:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212815
IP address blocks: 45.12.185.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2c:a1:f7:f6:c8:82:4c:d2:66:6e:02:17:a4:5c:ee:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Validity
Not Before: Dec 2 22:24:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e7df1299f0de3f3dd384155eecf22d1036c490e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:1b:8e:92:c5:f0:45:73:23:82:86:e7:c3:32:
1e:19:8b:8c:21:ee:c6:55:a4:8e:77:20:30:37:13:
ee:a6:06:df:4d:73:44:a8:21:85:33:01:b5:b2:98:
fd:15:ae:7a:b3:4f:96:88:39:34:41:87:1f:12:c9:
43:32:25:67:62:fa:16:75:1a:0d:ee:05:2f:ac:2c:
d8:a2:06:8d:6a:e2:a5:4e:4b:5e:87:e7:b7:36:4e:
4d:ab:bd:20:61:5c:4a:32:a4:29:7e:f5:06:07:5f:
24:ea:89:3a:3f:e4:c1:27:d0:7e:88:13:60:43:71:
9f:79:f0:11:94:66:8e:c4:22:cf:0d:9e:e8:04:ad:
0c:d7:fb:ac:e3:b0:b9:e6:37:db:12:ec:59:68:a5:
7f:19:11:2f:ed:c3:09:a6:32:a1:f1:10:1c:24:04:
52:fb:78:0f:62:eb:fa:70:35:08:55:12:50:e3:48:
73:fd:81:18:6d:c3:28:e7:3f:fb:5d:e6:c5:a4:aa:
d9:b7:9b:a1:d1:c8:05:6f:1e:7f:4c:e0:d2:fa:c9:
e7:b0:d8:ec:31:76:21:08:14:a6:5d:38:b2:84:a8:
ef:38:fc:dc:e7:e7:01:b3:b9:d5:20:21:0a:f3:54:
ae:aa:f0:d3:fd:77:20:19:4a:be:e5:ac:c1:ca:22:
a6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7D:F1:29:9F:0D:E3:F3:DD:38:41:55:EE:CF:22:D1:03:6C:49:0E
X509v3 Authority Key Identifier:
keyid:0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/Dn3xKZ8N4_PdOEFV7s8i0QNsSQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.185.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:e8:81:c1:db:c1:11:aa:76:ba:94:77:6a:d2:e2:2e:cd:aa:
55:59:49:c6:b1:84:e2:10:3a:ae:2a:13:fa:7c:07:2f:86:3c:
ce:14:38:5e:f2:73:98:72:36:74:22:b1:8b:7c:77:cc:3f:4d:
4b:ec:0d:ad:e4:1e:f6:49:f6:7e:6c:3c:f5:31:3b:0b:00:ba:
6e:2a:e8:2d:eb:7b:18:89:b1:62:07:65:1c:23:f5:26:ac:15:
cc:08:c5:26:70:5f:b1:af:a4:fb:a1:a6:17:5e:6c:15:ea:f3:
7f:56:e3:cd:ee:d2:8f:b0:1f:81:8b:7f:bc:57:d6:81:69:3b:
5d:b2:77:24:c7:a0:a4:00:26:c2:b0:04:e0:3b:d7:10:27:59:
5d:9d:75:33:33:09:2d:c1:10:7b:be:e7:4f:7f:b1:fd:ec:38:
bc:0b:73:4d:fe:88:57:e6:25:d9:67:71:a6:89:f3:49:c0:7a:
fb:e1:a1:1e:dc:d7:82:31:fb:dc:d0:53:f3:b1:a2:e3:50:33:
cb:fb:bb:28:2c:d2:f1:8e:cc:ec:a4:4b:2b:3f:e4:4c:d9:30:
a5:b5:e9:32:2c:24:b5:e8:69:84:2e:1a:6d:6d:16:fc:03:7a:
84:3d:96:df:29:57:88:58:46:8b:99:a0:59:ad:33:db:80:1d:
18:3f:56:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:12 2024 by rpki-client on console-fra.rpki-client.org