Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/NlqKNfTuHhgla_qWaIOiBXih0ng.roa
File: NlqKNfTuHhgla_qWaIOiBXih0ng.roa (raw, json)
Hash identifier: 6C84RGyOeQfhBAqDjtFgSBTmjyLY0iu0waVg8xN4qKw=
Subject key identifier: 36:5A:8A:35:F4:EE:1E:18:25:6B:FA:96:68:83:A2:05:78:A1:D2:78
Certificate issuer: /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Certificate serial: 01892178C96CF2F1800D9B25566C0660B3BC
Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/NlqKNfTuHhgla_qWaIOiBXih0ng.roa
Signing time: Tue 04 Jul 2023 15:15:11 +0000
ROA not before: Tue 04 Jul 2023 15:15:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64458
IP address blocks: 45.90.74.0/24 maxlen: 24
45.90.72.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:21:78:c9:6c:f2:f1:80:0d:9b:25:56:6c:06:60:b3:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Validity
Not Before: Jul 4 15:15:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=365a8a35f4ee1e18256bfa966883a20578a1d278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:94:b8:16:1a:93:ae:fe:ec:e3:95:f7:a8:36:
84:f3:c3:26:33:c7:d4:e7:cf:8c:e0:ac:45:d6:3e:
9a:ed:29:de:7c:a4:bd:27:ef:8a:35:ba:e7:f1:b6:
a4:cf:3e:74:02:d8:f2:0e:0d:a4:37:ce:dc:9f:70:
6d:41:07:6b:6a:ec:c6:ca:1b:53:34:e7:10:5a:eb:
fd:9b:28:c7:a3:59:c0:52:c1:5c:f2:69:f4:70:1b:
82:9d:23:f9:55:da:d9:7f:f3:48:c4:b1:e7:ea:f4:
6f:d6:d1:57:75:8f:56:1b:99:7f:a9:0e:2c:a0:09:
79:4c:4b:ac:fb:26:27:6c:9b:e9:06:14:7d:06:04:
cc:f7:2f:eb:44:f6:8d:25:ee:98:d2:1a:e7:ea:6c:
44:0a:f7:77:e7:c5:53:b5:d5:24:b4:b7:22:37:92:
d5:73:9c:06:47:ce:73:c4:15:be:79:b7:b0:78:9f:
2b:55:58:76:fe:d2:c9:09:de:17:4c:3e:ad:a2:0e:
75:b7:30:65:b0:5c:17:f2:6b:66:e7:ec:3a:80:7f:
d5:a5:6a:1d:e2:dd:ac:c0:a8:c9:c1:55:ab:12:fe:
67:ff:32:e6:cd:68:86:ae:2e:ef:c9:c3:5d:27:37:
d5:ea:76:d9:4e:0e:b8:a5:f0:f9:31:c7:ee:96:47:
d2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5A:8A:35:F4:EE:1E:18:25:6B:FA:96:68:83:A2:05:78:A1:D2:78
X509v3 Authority Key Identifier:
keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/NlqKNfTuHhgla_qWaIOiBXih0ng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.72.0/24
45.90.74.0/24
Signature Algorithm: sha256WithRSAEncryption
48:d6:06:bd:66:36:06:2c:c5:b3:cc:7c:c8:8b:c1:88:76:09:
f5:0d:68:be:d3:4d:21:14:33:e5:1e:93:5c:95:f3:4b:78:aa:
73:84:81:63:7e:9a:86:19:04:f1:df:66:94:7c:0b:36:79:b9:
fe:c2:59:65:09:9b:02:e1:0b:cd:0f:83:2a:8d:da:d2:23:c5:
34:8d:14:93:9a:5c:63:46:e1:f7:46:7a:8c:a8:13:06:e9:c8:
d3:28:17:3f:6d:cc:4f:ba:f9:b3:83:de:38:22:e9:b1:f0:8b:
d3:ca:9e:8d:7a:f6:c2:d3:05:25:a9:86:0f:e0:34:84:3f:8f:
1f:5e:9f:3a:22:a3:21:e3:38:2f:8a:dd:09:e3:85:4e:91:79:
d3:34:3e:14:aa:c6:a7:c3:77:4d:03:8e:3a:7b:21:ad:2a:46:
8b:b9:db:b6:35:03:1d:e1:44:f6:f2:0d:20:88:8c:a4:7b:29:
b9:53:54:08:0f:06:2c:c3:0f:60:67:f1:a0:d5:98:62:9f:99:
9c:c2:4a:2f:c0:5a:fa:3b:8c:4e:3a:53:df:ef:1c:c7:82:7d:
85:52:80:1c:fa:cf:13:06:b4:bb:14:ec:c6:30:e7:c3:67:ec:
f7:51:37:28:18:bd:c0:4d:a6:4e:17:f0:b5:cd:de:00:0f:00:
5c:77:b6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 23 16:52:59 2023 by rpki-client on console-fra.rpki-client.org