Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/KATIy6UDo2TTJgdVa3_VirnSndM.roa
File: KATIy6UDo2TTJgdVa3_VirnSndM.roa (raw, json)
Hash identifier: hhthsGz+Q9MMqha+VT7x2ccTYVvnFm71rhNoLvL9pHQ=
Subject key identifier: 28:04:C8:CB:A5:03:A3:64:D3:26:07:55:6B:7F:D5:8A:B9:D2:9D:D3
Certificate issuer: /CN=c8d5e37178d8524c72660a1d796165999e586622
Certificate serial: 018570F0B58A2715B6C194F747E6B8861198
Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/KATIy6UDo2TTJgdVa3_VirnSndM.roa
Signing time: Mon 02 Jan 2023 05:25:01 +0000
ROA not before: Mon 02 Jan 2023 05:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198521
IP address blocks: 45.15.52.0/24 maxlen: 32
45.15.54.0/23 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:b5:8a:27:15:b6:c1:94:f7:47:e6:b8:86:11:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622
Validity
Not Before: Jan 2 05:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2804c8cba503a364d32607556b7fd58ab9d29dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:20:26:29:2f:54:45:62:8f:3f:2b:9f:36:10:
d6:85:58:aa:9b:7d:42:d9:d0:d3:98:f7:c7:80:86:
70:99:30:fe:b7:42:bf:0c:b5:c9:b8:79:48:8c:bf:
c1:9c:6d:fd:68:91:7d:4d:2f:10:74:91:7f:fb:e5:
71:52:9f:e8:2b:15:dc:53:ac:56:1b:dc:65:15:83:
94:12:61:ae:62:dd:33:a0:25:32:95:a0:69:5b:34:
06:aa:c1:38:d7:b2:ef:a5:67:df:79:d9:3d:54:04:
11:36:06:df:52:5c:8e:c1:da:03:86:c6:f8:7f:13:
a6:67:56:f2:b5:32:8a:6d:3d:f4:c0:d7:f1:e3:50:
39:af:4e:31:4f:5f:05:dc:91:88:45:34:f4:61:5f:
ab:ff:39:75:54:ee:a5:72:fa:fe:05:f4:73:76:31:
4a:44:78:f8:c5:67:60:7f:29:d5:24:0c:93:e8:8c:
50:91:92:b5:51:02:61:21:99:59:60:8f:67:ec:e4:
be:25:18:51:38:91:89:29:62:5d:b2:82:a2:da:aa:
06:e4:bc:af:a9:8e:80:87:21:15:5c:d9:10:f4:c5:
e9:f4:0c:17:f7:c0:9e:76:32:25:c2:64:c5:df:3e:
e4:c9:3d:cc:fd:b9:37:e0:49:b5:76:db:2d:f2:bd:
ce:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:04:C8:CB:A5:03:A3:64:D3:26:07:55:6B:7F:D5:8A:B9:D2:9D:D3
X509v3 Authority Key Identifier:
keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/KATIy6UDo2TTJgdVa3_VirnSndM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.52.0/24
45.15.54.0/23
Signature Algorithm: sha256WithRSAEncryption
22:49:46:52:09:8e:f4:6c:6b:15:96:57:ff:c0:29:ec:c8:f4:
c0:e9:6f:34:c8:bb:31:7d:ee:fb:de:74:65:51:99:46:8a:2c:
d8:9f:10:e2:12:50:61:b2:7a:35:88:25:77:7b:88:03:28:e9:
7f:26:85:13:3b:b5:42:0c:49:8e:08:8d:66:a1:9b:a4:9a:d3:
b4:89:8a:98:cd:66:72:33:8a:85:fd:6e:d9:2e:76:0f:0c:97:
82:9b:19:4e:d6:da:db:42:3f:1a:51:4f:4b:5d:d9:6b:c6:da:
ae:d3:c7:93:53:43:7c:a7:22:f1:97:33:2a:71:a7:e1:63:f5:
2e:36:65:44:d6:c1:cf:97:2d:31:91:52:a0:5d:21:4c:ed:b7:
94:f4:b7:6b:ad:1b:10:e2:22:ef:58:3e:56:2e:42:8e:c8:7f:
06:a9:69:e7:fa:50:36:26:71:c3:4d:42:2d:3b:f3:13:d7:95:
e1:20:2d:4a:b2:5c:ca:4b:81:ed:41:1a:c4:1b:cf:ba:82:5a:
c7:90:ed:fe:01:25:ae:ff:2a:3b:94:de:ce:ee:16:ee:a0:2d:
90:ef:c2:f3:d0:72:d3:34:c2:68:14:3c:ac:89:3b:94:1a:be:
10:53:85:9e:70:c5:5c:32:71:a9:ab:82:e3:a8:f1:90:26:69:
77:4f:74:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:31 2024 by rpki-client on console-ams.rpki-client.org