Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/csWEHUBk42L2IMvOse6iAM0Gkh4.roa
File: csWEHUBk42L2IMvOse6iAM0Gkh4.roa (raw, json)
Hash identifier: oS7k8TwH1CpdYKggSKVtSo9s+WrKLb1RC+9yFyGMItM=
Subject key identifier: 72:C5:84:1D:40:64:E3:62:F6:20:CB:CE:B1:EE:A2:00:CD:06:92:1E
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 01880E8B9B63EF0105FABA295F72D7586AD1
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/csWEHUBk42L2IMvOse6iAM0Gkh4.roa
Signing time: Fri 12 May 2023 06:00:10 +0000
ROA not before: Fri 12 May 2023 06:00:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13213
IP address blocks: 45.150.196.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0e:8b:9b:63:ef:01:05:fa:ba:29:5f:72:d7:58:6a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: May 12 06:00:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72c5841d4064e362f620cbceb1eea200cd06921e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c3:6f:61:e9:5d:01:20:5c:ac:d2:6b:a7:68:
0d:b6:8e:0b:13:df:3d:a2:bb:7d:ac:0f:21:6d:a9:
c7:2c:17:d7:98:e4:58:07:7c:8d:99:a6:d2:02:24:
30:ed:42:ab:cf:e5:28:a0:b8:34:55:95:50:b0:ab:
6e:ce:59:65:76:75:ae:17:33:e8:03:f7:a1:b6:df:
cb:6f:d1:ea:64:e6:e2:4a:24:8c:f9:fa:28:be:a0:
fe:21:ea:3b:e1:7e:19:dd:19:03:0d:5a:67:89:b1:
4b:3b:56:14:69:7a:c7:f9:2c:4d:17:b5:7e:a9:3d:
d1:6f:45:2c:8b:87:68:1b:f2:bd:6e:bb:0b:64:6a:
d7:c8:a1:5b:df:7c:16:59:fc:33:ce:91:6a:31:16:
87:e8:63:0f:6d:16:8d:d0:03:0e:a4:79:fc:91:dd:
74:fa:4b:d3:38:f6:16:7c:eb:30:b5:cc:49:bd:5e:
b9:1b:28:b5:32:da:32:81:cc:53:c7:bc:f7:3a:e4:
fd:41:bb:70:f7:f0:00:6b:b8:32:78:02:a1:0f:38:
ce:fe:81:72:fe:d1:bb:0a:4e:99:e9:0b:cb:b3:97:
f7:30:d1:34:90:d3:47:31:86:b2:53:8f:9f:97:22:
55:d4:ce:23:e9:69:94:49:a5:82:17:f0:57:4e:a7:
42:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C5:84:1D:40:64:E3:62:F6:20:CB:CE:B1:EE:A2:00:CD:06:92:1E
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/csWEHUBk42L2IMvOse6iAM0Gkh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.196.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:d7:63:82:8f:6a:c6:11:c1:23:8b:28:77:86:9d:4a:99:43:
de:02:5f:0d:cc:80:a0:1a:28:7a:ae:58:89:2b:fd:4f:f4:ea:
27:91:d7:32:4d:ff:79:ad:f5:7b:e0:90:4e:de:ac:49:82:9a:
f0:a6:2a:a2:2b:ac:20:2a:38:ea:b8:1d:ed:43:e4:5f:4e:27:
56:b6:24:fb:74:0d:56:33:83:60:9b:d3:82:ed:3b:9c:f3:36:
88:03:13:4e:39:b1:ad:86:ad:90:a5:8a:c5:fb:f8:a2:0f:dc:
84:7e:de:5b:6a:88:9f:9c:f0:d2:81:f9:74:92:5a:8e:c5:d9:
8d:3a:fb:81:76:a3:a7:2c:7d:17:70:9f:03:e9:46:6f:36:90:
f0:f0:1e:89:33:49:e4:95:f2:84:17:dd:98:e1:2a:cb:b7:34:
f7:e0:4a:90:12:1f:a2:6e:6d:8c:9f:a3:8e:72:e3:5c:00:a8:
15:e1:46:4b:4b:cd:1e:a2:2d:12:12:61:a9:ec:62:98:28:5c:
44:63:88:33:3c:e5:a2:7b:7e:79:0b:93:e7:93:b5:5b:a6:fe:
5b:06:56:73:20:5f:ee:ed:d2:5d:c3:01:92:88:20:d7:d7:f4:
2c:d9:b8:69:b2:7a:cb:8d:28:34:4f:a2:74:3f:be:1f:60:1d:
28:77:32:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:54 2024 by rpki-client on console-ams.rpki-client.org