Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/7OVIFqM_SYfL4qxvnPbf3OwjCVs.roa
File: 7OVIFqM_SYfL4qxvnPbf3OwjCVs.roa (raw, json)
Hash identifier: 5xVRHPzK31+d5Cekh6X8keWvsN8ui/vF4/Z+Kro3w0I=
Subject key identifier: EC:E5:48:16:A3:3F:49:87:CB:E2:AC:6F:9C:F6:DF:DC:EC:23:09:5B
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 01856D9D3DED4CF5683C32B8C2C52092A2F3
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/7OVIFqM_SYfL4qxvnPbf3OwjCVs.roa
Signing time: Sun 01 Jan 2023 13:54:59 +0000
ROA not before: Sun 01 Jan 2023 13:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211415
IP address blocks: 45.83.238.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:3d:ed:4c:f5:68:3c:32:b8:c2:c5:20:92:a2:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Jan 1 13:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ece54816a33f4987cbe2ac6f9cf6dfdcec23095b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a0:42:5e:3c:51:46:33:db:fa:d2:d7:9f:ba:
be:1e:f6:5f:d2:34:43:07:9b:1c:49:ee:13:1e:b0:
d7:ff:59:11:42:c7:d2:3e:e7:cb:bf:25:9d:b8:02:
64:ce:60:27:8f:eb:7b:6e:6b:a6:4c:ff:15:bb:4c:
3b:4b:a8:cf:b9:ef:68:62:53:b2:51:6b:3e:c4:d5:
04:fd:bd:ea:1a:e8:8f:65:bb:b3:72:2e:d2:7c:61:
e6:34:ca:d3:a8:53:5a:b3:ed:52:3a:cb:bd:92:1a:
11:48:5e:28:0b:ec:23:db:64:d2:d7:9a:c0:41:b4:
41:d4:14:e1:4c:e9:cc:fb:f7:47:6e:9f:ca:85:4f:
ce:0b:ad:13:0f:c7:0a:b6:5d:4c:5a:82:aa:34:ed:
5a:98:cd:bc:b3:19:47:03:13:fd:e2:35:a5:0d:9c:
74:ba:4f:ba:45:b3:a8:23:1d:63:96:21:af:35:4b:
14:b2:d5:10:7d:35:d2:1d:fb:7e:37:2e:74:42:ff:
d4:8d:1d:5d:7f:26:c6:ad:ce:45:9c:65:6b:f0:20:
ca:7d:2c:fe:da:b3:62:62:f9:54:ba:2f:1b:f0:ec:
57:e6:48:2c:7e:1f:61:bd:93:c5:d8:ff:ea:a0:84:
f4:50:13:46:03:ed:8a:ec:2a:be:72:13:e9:0e:a4:
b0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E5:48:16:A3:3F:49:87:CB:E2:AC:6F:9C:F6:DF:DC:EC:23:09:5B
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/7OVIFqM_SYfL4qxvnPbf3OwjCVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.238.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:0e:43:2b:56:60:5d:47:41:65:38:ce:50:ce:69:62:b2:0b:
01:41:99:26:90:4f:da:e1:fe:74:4a:77:da:af:e6:79:09:eb:
85:79:e8:4b:7d:f0:ad:15:a2:0e:6a:f1:2c:2b:76:fa:e5:2c:
42:34:26:91:09:cb:30:35:62:35:28:cc:fe:55:6f:57:e9:7c:
82:18:b8:22:84:09:c4:a1:a4:04:56:fd:f1:83:d2:77:11:93:
00:22:cf:91:6d:48:23:55:b3:bf:5c:78:35:76:94:43:72:d8:
81:ce:fa:7b:18:6e:32:98:a5:66:23:f5:f2:ce:2f:42:23:be:
e8:9c:a5:a4:5c:51:ff:09:3d:99:5c:db:1a:d2:cf:1a:3e:29:
4a:76:ce:af:8f:50:a9:b9:d3:72:88:12:fa:5f:80:99:70:86:
7c:0b:4f:82:70:5c:98:ad:cc:f0:d0:2e:64:d2:ca:ad:00:86:
9d:35:e1:2f:9e:dd:68:8d:8b:37:6a:d5:43:99:56:31:a5:79:
64:32:7f:4b:f2:90:91:11:7d:84:42:1c:3d:f3:25:51:5d:79:
42:a4:be:46:31:dc:3d:6e:b7:d0:b5:3b:6d:34:7f:14:8d:6e:
ee:ac:5f:8b:93:3c:7d:e4:a0:58:d3:65:44:12:70:19:31:c0:
36:65:16:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:39 2023 by rpki-client on console-ams.rpki-client.org