Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/9urwKH3aSu85CsSf2uq6GPUa10c.roa
File: 9urwKH3aSu85CsSf2uq6GPUa10c.roa (raw, json)
Hash identifier: QP4ku5Sa0cpJ3xrJsUBPN1p/Pu9RdlWC/6GFV/4chT0=
Subject key identifier: F6:EA:F0:28:7D:DA:4A:EF:39:0A:C4:9F:DA:EA:BA:18:F5:1A:D7:47
Certificate issuer: /CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
Certificate serial: 0185F4E77613D24123DBF153CC82DA39B880
Authority key identifier: 6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/9urwKH3aSu85CsSf2uq6GPUa10c.roa
Signing time: Fri 27 Jan 2023 20:24:47 +0000
ROA not before: Fri 27 Jan 2023 20:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 45.150.4.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f4:e7:76:13:d2:41:23:db:f1:53:cc:82:da:39:b8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
Validity
Not Before: Jan 27 20:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6eaf0287dda4aef390ac49fdaeaba18f51ad747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:64:86:78:58:46:a4:8d:f5:60:95:57:04:f1:
a7:01:29:49:9a:c7:77:e5:82:8f:ba:0d:a6:36:19:
76:96:72:e3:1d:1c:63:53:45:e1:42:e5:3c:54:59:
75:30:0f:ae:76:88:70:40:e0:4b:fb:f1:51:95:70:
60:bb:85:1a:73:04:81:62:8d:8a:67:b9:24:5a:18:
29:d4:de:12:f1:37:0d:f0:99:31:b2:a9:db:79:d5:
02:c0:da:a7:86:5d:c6:d0:ac:c9:d1:de:d5:3d:f1:
58:78:e1:b9:b8:33:b6:39:26:98:e3:ea:2f:b0:aa:
7a:2e:95:3c:81:c0:74:bf:c5:37:73:4a:f4:9b:28:
ce:c5:13:bc:e7:4d:3d:5e:e4:e9:ab:0c:9b:08:40:
75:74:69:f8:65:d0:eb:a2:0c:f7:22:fd:af:bd:dc:
09:40:97:f7:a4:29:1f:ff:3b:d1:13:16:35:e5:82:
eb:b6:38:96:3f:98:53:91:7c:09:16:8a:28:94:0b:
ff:9e:53:f5:a5:01:11:c5:2f:1c:2a:ae:7c:b4:52:
ef:ad:09:e0:22:44:bf:06:64:55:98:e6:bb:6d:4a:
dc:30:40:eb:5e:63:ec:a7:02:75:3b:d5:4f:97:3e:
d2:55:59:d8:a4:40:16:12:1c:c5:06:0c:8f:ce:d3:
33:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:EA:F0:28:7D:DA:4A:EF:39:0A:C4:9F:DA:EA:BA:18:F5:1A:D7:47
X509v3 Authority Key Identifier:
keyid:6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/9urwKH3aSu85CsSf2uq6GPUa10c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/a9DFs_psKIhgzLbZAgDLuOV9t_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.4.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:76:cf:49:ce:6f:e0:35:78:0a:46:49:68:f2:9f:4d:5b:a8:
79:3d:d4:5b:7b:97:9d:2e:8c:33:7f:25:41:54:2e:6e:58:29:
1e:bc:08:fa:f4:8a:7d:c0:20:f5:92:44:45:8f:7f:ea:b2:e9:
6e:61:78:77:40:07:95:d6:ae:95:3a:15:28:ca:2c:34:e3:a6:
16:e3:1f:94:97:c2:1d:9f:b1:8a:af:4c:f1:d0:b4:51:23:ba:
73:cd:10:b8:24:75:4f:c0:ee:c2:95:f9:42:3f:1f:66:a3:7f:
ac:a6:9a:22:4f:3a:ea:0f:f2:09:58:1e:2d:d6:92:b2:45:37:
d5:bb:c7:55:c9:94:54:08:e9:ca:e1:3c:54:83:ff:5e:b0:8c:
77:36:9a:80:70:41:42:77:59:43:40:a5:c0:20:2f:26:c5:12:
15:21:95:de:07:31:3d:de:95:0e:25:a5:53:28:e2:a8:8b:da:
ba:9c:63:65:82:11:0b:bd:67:bd:3f:c4:e7:66:72:85:6a:96:
e4:b1:38:5d:d9:be:99:66:56:14:ee:51:ce:d6:f1:f5:e2:e3:
8a:44:63:9c:bb:49:1c:71:10:fd:d2:04:05:39:c2:ff:a6:79:
5e:d6:b7:2a:67:a5:9e:ea:07:54:fc:2a:f4:c0:1c:06:89:81:
4f:26:5e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:42 2023 by rpki-client on console-fra.rpki-client.org