Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/3NTma7jGwZwzIY_2jwiypeaY_Ao.roa
File: 3NTma7jGwZwzIY_2jwiypeaY_Ao.roa (raw, json)
Hash identifier: kIG+VHGSJmmxj3OB5FJ0UThb820N4bZP4sq6/RPIY6c=
Subject key identifier: DC:D4:E6:6B:B8:C6:C1:9C:33:21:8F:F6:8F:08:B2:A5:E6:98:FC:0A
Certificate issuer: /CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
Certificate serial: 018B22E551DE2F98764C0F5C4A7F696DC184
Authority key identifier: 6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/3NTma7jGwZwzIY_2jwiypeaY_Ao.roa
Signing time: Thu 12 Oct 2023 07:58:55 +0000
ROA not before: Thu 12 Oct 2023 07:58:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 45.150.6.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:22:e5:51:de:2f:98:76:4c:0f:5c:4a:7f:69:6d:c1:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
Validity
Not Before: Oct 12 07:58:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dcd4e66bb8c6c19c33218ff68f08b2a5e698fc0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d8:0e:b0:69:11:d4:8e:29:89:5d:0a:d9:e6:
c1:d2:3e:b1:bd:43:6f:84:e8:4d:a2:51:e5:15:cc:
ea:0a:53:79:d0:83:58:a8:23:dc:db:4f:67:ed:89:
4e:cd:dd:d8:c8:03:3b:0c:cc:1b:30:eb:b8:8e:fc:
87:77:78:a5:26:f3:62:ec:a4:26:2b:e2:1e:0e:ba:
5f:fe:1f:79:d0:d7:e4:55:ce:2a:97:df:38:61:88:
eb:d6:2b:7a:e1:39:06:89:40:ab:b5:f2:b3:18:f3:
47:72:86:27:86:cc:c3:11:0d:b3:ba:b9:d8:53:fc:
ed:83:7b:59:fd:43:5f:5e:08:bf:b5:ff:f1:a1:75:
db:08:5b:99:c6:77:d3:2b:00:34:dc:be:c0:41:c6:
29:60:ec:7d:8e:25:6c:ad:5c:c5:c2:03:31:a3:70:
c0:88:e1:06:06:1a:1b:d4:cf:ee:b7:7f:63:d6:97:
34:45:12:6a:50:98:7c:32:db:b8:55:0a:8a:38:86:
b1:6f:77:cc:79:ad:4a:fb:4c:58:ed:b7:e9:09:10:
b9:3c:74:b2:67:56:7f:1a:3e:2d:26:7c:69:ca:79:
69:91:cb:dd:d0:87:4b:d8:41:cf:5e:f3:14:49:3f:
d3:cf:d5:bf:26:41:fa:d1:cd:52:a0:92:a9:53:c7:
d9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D4:E6:6B:B8:C6:C1:9C:33:21:8F:F6:8F:08:B2:A5:E6:98:FC:0A
X509v3 Authority Key Identifier:
keyid:6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/3NTma7jGwZwzIY_2jwiypeaY_Ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/a9DFs_psKIhgzLbZAgDLuOV9t_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.6.0/24
Signature Algorithm: sha256WithRSAEncryption
38:ca:67:2a:92:14:aa:5f:08:0a:0a:dd:5b:32:4c:34:8a:33:
14:f4:78:81:19:15:a7:f3:08:71:23:c6:b0:3d:55:23:2f:ea:
6f:3c:18:4b:0b:68:73:d1:92:9c:b0:92:d5:ad:af:73:1a:7a:
0d:ae:ee:98:4c:c3:e7:63:96:2b:61:96:96:ec:71:68:03:26:
47:7b:8e:75:66:4c:c8:6f:e2:b0:db:59:9e:16:95:5a:c2:00:
df:32:2a:8a:35:43:d7:48:3d:02:f9:93:0b:c4:fc:06:8a:db:
ad:fc:4e:2a:aa:1f:d3:7e:77:6e:4b:66:93:4f:b4:63:a0:4a:
3b:5e:cd:c3:69:4b:32:3b:ed:93:ac:56:65:88:88:c6:19:1e:
47:48:6c:18:8b:7d:23:d3:be:04:34:ef:ab:a4:00:84:26:9c:
52:68:ed:08:91:e4:92:c8:30:ab:c1:76:7f:f3:e0:92:ba:de:
e9:24:db:d7:92:a7:5e:da:55:d5:26:30:f4:6c:c2:a6:cf:79:
b0:b4:b0:ea:ab:1c:21:6a:7b:fa:bf:98:33:99:d6:79:21:15:
a2:59:27:6c:aa:87:61:4f:ab:24:82:be:8a:49:7b:60:e4:57:
2b:2a:a0:a8:1f:67:e6:c3:b5:c9:57:68:80:2d:5f:f3:6e:24:
9e:ad:cd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 23 09:28:11 2023 by rpki-client on console-fra.rpki-client.org