Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/tSL3pF55ytrXHlSV__oo75Mkl1c.roa
File: tSL3pF55ytrXHlSV__oo75Mkl1c.roa (raw, json)
Hash identifier: UAP7w48AVIPvMf2QwHEeoWKy1X8/cVX6qapXbIjRQTc=
Subject key identifier: B5:22:F7:A4:5E:79:CA:DA:D7:1E:54:95:FF:FA:28:EF:93:24:97:57
Certificate issuer: /CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
Certificate serial: 0185C5CF5E34E778646924DFC5BD21FA3003
Authority key identifier: 6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/tSL3pF55ytrXHlSV__oo75Mkl1c.roa
Signing time: Wed 18 Jan 2023 16:56:19 +0000
ROA not before: Wed 18 Jan 2023 16:56:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 45.150.6.0/24 maxlen: 24
45.150.7.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c5:cf:5e:34:e7:78:64:69:24:df:c5:bd:21:fa:30:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
Validity
Not Before: Jan 18 16:56:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b522f7a45e79cadad71e5495fffa28ef93249757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d4:4b:24:7b:77:56:66:23:ed:c6:1c:89:e8:
9d:e7:f1:97:df:ba:09:19:03:4f:ae:48:05:a7:bd:
ec:72:49:93:9d:1c:54:dd:1b:61:15:64:5a:7d:81:
c5:02:6d:98:42:44:cc:41:65:42:bf:ef:b1:ae:71:
51:87:1a:4a:62:b3:cf:c2:55:e0:9a:a8:76:be:fb:
dc:bd:c8:b9:cd:e5:d8:b1:cd:ac:f6:b5:c1:50:f1:
05:b1:50:30:3f:e0:ac:a6:ef:2c:83:92:5e:86:df:
04:dd:fa:53:e7:7c:6c:a2:e2:5a:80:41:c1:9a:fa:
8f:5e:2b:d7:0e:1b:da:f5:96:00:0c:4f:8f:b4:3f:
b6:79:10:1b:c6:55:a6:9a:14:0c:78:cb:b9:c3:77:
cb:7a:50:df:e2:50:88:1a:c1:7b:d7:af:0c:26:10:
be:0f:91:cb:b5:1d:f1:f2:06:e2:ca:25:ce:d6:1d:
01:eb:dc:40:07:14:39:bb:43:47:53:a0:ea:b6:fd:
b2:63:4a:be:44:86:46:1a:c8:e7:a7:85:75:8e:26:
97:3f:25:e3:23:27:df:93:10:21:29:13:fe:45:d4:
c3:71:75:90:73:8f:7b:84:d5:ca:26:e0:0e:5b:53:
53:73:ba:c9:fc:15:27:ce:70:79:12:e4:4a:2f:04:
9c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:22:F7:A4:5E:79:CA:DA:D7:1E:54:95:FF:FA:28:EF:93:24:97:57
X509v3 Authority Key Identifier:
keyid:6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/tSL3pF55ytrXHlSV__oo75Mkl1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/a9DFs_psKIhgzLbZAgDLuOV9t_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.6.0/23
Signature Algorithm: sha256WithRSAEncryption
79:fb:12:0a:ee:85:6d:04:e0:e5:2c:4e:d6:0b:14:12:1e:fa:
1e:7d:de:99:f3:fa:73:96:79:15:83:6e:92:89:46:1d:30:17:
9b:d3:e5:cc:0b:60:3a:e8:b9:83:97:69:e3:0c:04:75:af:88:
41:40:ef:d0:e6:e8:02:23:aa:1b:8c:3a:20:0d:b5:5a:d1:aa:
ec:0f:10:15:dc:46:c7:de:ba:d5:7b:82:c7:01:8c:d3:22:a3:
90:bd:fa:b1:ed:6d:03:b4:02:70:ac:06:9b:09:68:7a:45:f3:
d5:db:33:46:f8:47:02:e6:3c:ce:32:90:c6:3a:57:fb:70:a3:
55:1e:c5:d7:2f:64:ef:f9:57:07:11:60:fb:de:68:a6:92:72:
21:7d:bb:6b:cd:e9:42:e5:73:b8:2f:99:7f:a9:9c:b7:ff:dd:
d4:04:b3:38:ce:7e:3b:7f:f2:f8:fe:b3:7a:93:e6:42:18:86:
75:ff:af:c5:b7:13:97:fa:55:cb:a6:48:a3:e7:d9:9f:67:a0:
fb:64:cc:7e:48:6b:61:70:a7:b3:56:96:ed:33:3c:20:09:30:
e2:4e:1d:44:79:39:3b:97:b8:0b:be:41:52:be:1c:63:68:12:
91:3a:54:fd:65:79:ba:af:f5:6b:dc:b4:1a:b7:c8:9f:16:74:
a6:b1:f1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 12 08:45:26 2023 by rpki-client on console-ams.rpki-client.org