Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/nQ_b0zV1wYPlrDVxGKcwCzh3P-8.roa
File: nQ_b0zV1wYPlrDVxGKcwCzh3P-8.roa (raw, json)
Hash identifier: 1IINYO8bxvGm6gnIavzNhd85YTBtlGA+Ee83bEPlaOg=
Subject key identifier: 9D:0F:DB:D3:35:75:C1:83:E5:AC:35:71:18:A7:30:0B:38:77:3F:EF
Certificate issuer: /CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
Certificate serial: 018BFE3BEAC382F1D931F99B4143B36390F9
Authority key identifier: 6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/nQ_b0zV1wYPlrDVxGKcwCzh3P-8.roa
Signing time: Thu 23 Nov 2023 22:10:21 +0000
ROA not before: Thu 23 Nov 2023 22:10:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.150.7.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fe:3b:ea:c3:82:f1:d9:31:f9:9b:41:43:b3:63:90:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
Validity
Not Before: Nov 23 22:10:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d0fdbd33575c183e5ac357118a7300b38773fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:54:b9:75:f8:a4:20:d1:18:4a:36:e6:5b:37:
25:22:1f:6d:2c:82:2e:f8:66:c0:3e:5d:f5:f8:10:
6e:3a:9e:cd:c9:09:3d:4c:83:c9:f3:2c:01:16:c6:
08:29:c3:07:10:a7:5f:b3:8a:42:55:9d:56:64:aa:
c7:a9:68:d7:9d:75:e5:ff:97:f0:9c:80:34:16:64:
63:dc:bd:fa:f7:b9:a0:ca:98:02:f5:7f:7a:86:c0:
26:34:a4:c9:f0:fe:fd:b7:8b:e9:04:9d:6e:49:29:
e9:95:21:42:1d:a1:64:1b:a4:54:77:22:f1:57:73:
e2:6a:bd:58:46:c7:b5:15:20:3a:e6:91:51:f1:00:
88:48:3d:7f:76:19:93:17:1a:71:c0:8e:9e:d7:a6:
19:39:89:10:40:4e:f0:f2:96:69:f0:24:c9:87:c7:
48:7d:e0:f0:54:d6:ee:54:90:a7:f6:8f:7e:07:9d:
70:f6:c6:7a:f2:a7:8b:81:0a:96:66:00:57:ec:8d:
9e:e0:1b:08:1b:fe:a0:32:55:3f:e0:fb:dd:7b:4c:
b6:74:d0:78:84:4a:1d:d4:19:14:00:fd:43:f1:78:
bd:3a:89:4e:17:e9:9b:42:c3:45:d3:83:e7:6b:ef:
c5:31:ee:7d:03:a9:b1:1a:d6:fa:5e:5c:f8:0d:3a:
94:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:0F:DB:D3:35:75:C1:83:E5:AC:35:71:18:A7:30:0B:38:77:3F:EF
X509v3 Authority Key Identifier:
keyid:6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/nQ_b0zV1wYPlrDVxGKcwCzh3P-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/a9DFs_psKIhgzLbZAgDLuOV9t_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.7.0/24
Signature Algorithm: sha256WithRSAEncryption
08:09:02:e4:57:a4:79:0e:4e:7a:dd:bf:39:c4:64:94:c2:14:
a9:2d:83:09:35:64:42:1e:d9:1a:76:8a:b2:7c:ad:08:b4:5c:
4c:69:86:85:71:c1:bf:ec:18:57:21:9c:4d:05:15:50:f6:68:
e2:48:23:88:dc:3b:56:04:89:92:88:3a:2a:17:70:e7:0a:b8:
a5:cc:05:92:76:8d:b5:d4:78:c5:18:74:de:79:50:9e:45:3f:
6a:5f:76:fc:c7:54:30:8b:cd:07:09:6d:5b:15:4c:44:e7:7c:
7e:c3:72:be:cf:92:bf:4c:35:e9:2a:af:d5:d1:5b:92:2f:be:
c5:36:b6:25:34:2a:0f:94:fb:77:c9:c5:3b:b8:a6:80:2b:0f:
cd:f5:f4:d2:80:01:79:84:4a:d7:c8:54:a7:2d:bb:f2:c7:09:
10:5d:03:3d:e5:6e:10:12:d7:77:22:5b:fd:a3:09:4e:3f:91:
b4:fe:1a:36:1b:3c:b2:7b:15:ae:ed:67:6a:65:bb:f0:68:38:
bb:0d:c4:4a:ec:97:cc:04:8d:79:33:b9:52:4b:b1:54:5d:94:
77:9b:f2:3e:1f:6f:9f:60:15:f9:89:27:1e:50:07:55:f8:97:
ca:bc:14:54:49:00:15:e1:f6:33:8f:82:e2:f6:e6:12:72:ee:
3d:98:72:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:09 2024 by rpki-client on console-fra.rpki-client.org