Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/Mr2-6CT489c8-SImwM4VdiWS2CU.roa
File: Mr2-6CT489c8-SImwM4VdiWS2CU.roa (raw, json)
Hash identifier: V2J4EXFQ/0MICcdUt+9RkvRFmxVRBn3Y9HrrsX9JwhA=
Subject key identifier: 32:BD:BE:E8:24:F8:F3:D7:3C:F9:22:26:C0:CE:15:76:25:92:D8:25
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 01880E8B9C96F60C64D44C485AC16A508F3C
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/Mr2-6CT489c8-SImwM4VdiWS2CU.roa
Signing time: Fri 12 May 2023 06:00:10 +0000
ROA not before: Fri 12 May 2023 06:00:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 134835
IP address blocks: 45.83.237.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0e:8b:9c:96:f6:0c:64:d4:4c:48:5a:c1:6a:50:8f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: May 12 06:00:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32bdbee824f8f3d73cf92226c0ce15762592d825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6a:ca:46:6a:3b:3a:b7:41:85:39:e8:2e:74:
c6:7c:ea:57:59:a0:e2:f9:7a:32:26:f1:84:ab:13:
4c:4e:85:a5:2c:7a:d5:a4:5c:46:6f:c7:c7:02:a0:
03:ea:c1:29:65:cd:43:65:81:6b:79:c6:47:3b:79:
89:60:bd:47:55:74:62:8f:d7:16:cd:9f:07:7b:84:
4c:1e:44:b7:b7:05:d7:da:08:af:71:78:30:0a:35:
9a:52:b5:a1:d4:98:a0:06:df:9b:06:60:0c:fd:9e:
72:f1:f0:a7:de:bb:a3:2e:b7:38:a0:5a:38:41:77:
97:b4:ef:f9:cc:05:2b:8f:1f:29:0b:bc:83:ad:6d:
53:80:8c:f0:23:6e:b3:84:07:75:e2:20:94:1e:94:
a7:d0:98:d8:38:6f:6a:1e:11:4d:55:0f:10:63:ae:
bd:3b:60:a0:8b:ca:93:ef:04:59:36:6e:e7:cf:72:
a1:89:99:9f:1b:b2:24:cd:60:a2:06:16:1b:ba:ec:
d5:67:d4:6b:05:b5:c5:e7:40:67:84:e8:6c:37:67:
55:df:5f:3d:12:fa:73:cf:8b:6e:54:3a:64:a6:aa:
4e:eb:c4:60:c4:6b:e0:92:c3:0b:a9:24:02:23:b8:
f0:da:76:87:40:3c:c8:f5:9f:fd:20:f7:37:23:9c:
fa:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BD:BE:E8:24:F8:F3:D7:3C:F9:22:26:C0:CE:15:76:25:92:D8:25
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/Mr2-6CT489c8-SImwM4VdiWS2CU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.237.0/24
Signature Algorithm: sha256WithRSAEncryption
36:bb:77:51:d6:15:a1:0c:4a:46:48:3c:34:5c:ed:36:c7:0b:
0f:69:4b:13:91:0d:8b:cb:1d:14:80:ce:ad:76:be:2c:1c:0c:
80:98:b5:ec:88:d3:86:99:19:a8:d0:88:fb:1e:d3:2a:2c:20:
21:a9:32:b1:7e:f6:0c:6d:b2:0c:21:b7:09:39:15:e4:8d:a6:
fe:43:ae:18:36:f5:b9:36:f2:52:ad:30:dd:1d:08:f6:00:58:
a6:3d:2d:27:a4:5a:a9:27:52:1e:f3:0c:fb:cd:49:78:6b:29:
dd:71:ec:15:dd:fc:ce:7d:83:cf:f1:3f:af:e6:1d:20:9f:3c:
90:52:86:65:bd:16:30:a2:70:60:bf:99:63:3c:f6:6c:df:b5:
9d:79:45:1d:bb:92:59:bd:96:35:7c:e0:8c:97:e7:d4:c2:da:
46:52:2f:5e:eb:8e:eb:62:0d:7c:65:02:8d:ed:e6:34:ab:32:
fe:3b:0a:9b:0a:0c:36:49:6f:6d:58:b2:f1:f8:3d:ae:d3:d4:
db:15:d6:4a:d1:80:3a:ed:1d:d1:4d:63:39:2b:84:28:4c:6a:
cd:1c:17:a4:db:ba:42:31:f3:7d:d0:d0:3f:df:e0:db:97:25:
54:9b:fb:2f:e0:9a:d8:82:3f:05:c5:11:4e:e2:b7:e4:40:9d:
09:8d:71:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:04 2024 by rpki-client on console-fra.rpki-client.org