Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/xlsNX6Cj5H-mTUspxhvWpU1fWjg.roa
File: xlsNX6Cj5H-mTUspxhvWpU1fWjg.roa (raw, json)
Hash identifier: o39Ego5sIblS6vKb4/+PlF1HBpCj+lhGV4JkC+fRzjE=
Subject key identifier: C6:5B:0D:5F:A0:A3:E4:7F:A6:4D:4B:29:C6:1B:D6:A5:4D:5F:5A:38
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 01856FC28430335550E9EC775BA90D6A175B
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/xlsNX6Cj5H-mTUspxhvWpU1fWjg.roa
Signing time: Sun 01 Jan 2023 23:54:56 +0000
ROA not before: Sun 01 Jan 2023 23:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 45.132.25.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:84:30:33:55:50:e9:ec:77:5b:a9:0d:6a:17:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Jan 1 23:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c65b0d5fa0a3e47fa64d4b29c61bd6a54d5f5a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:16:4b:a7:d6:2a:fc:34:99:67:86:e7:a1:27:
6d:3d:0a:32:d4:73:35:54:af:50:8d:8c:ba:ed:38:
c1:98:98:d3:e5:e0:b6:6b:9b:f8:c4:14:9a:93:24:
1a:08:2f:75:72:b3:11:cf:e3:e7:7e:c3:cc:88:09:
2b:7b:10:01:86:24:86:03:6f:fa:42:94:ba:fd:1d:
5f:ce:12:a8:77:9f:bd:20:a5:d8:2a:66:1d:7c:02:
c9:d9:15:a1:f8:c2:01:84:1e:e3:72:c1:aa:91:76:
36:08:4f:fa:e9:9c:44:b2:c4:b8:06:db:47:e3:71:
f0:b2:79:88:a4:9c:88:c8:b6:11:c4:e1:d8:6f:92:
eb:82:ba:dc:97:11:71:c4:19:04:f6:2d:b4:65:a4:
4f:ac:08:e0:d9:d7:78:18:e4:2f:3d:67:fd:e5:e6:
ce:b3:c1:52:d8:df:35:22:73:a3:e1:00:07:3e:48:
dd:81:79:79:bc:f5:51:cd:58:ba:2b:95:c7:17:e2:
f8:50:17:21:58:f2:00:d0:c8:e4:7a:90:e5:32:be:
f6:5b:13:f1:9a:2c:3d:a8:45:15:6e:ed:61:52:31:
cf:4f:5e:c2:30:1a:41:12:d3:3f:37:2e:cc:db:1f:
a6:30:46:0b:5c:35:1a:05:3f:6d:15:b2:c7:70:c5:
db:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5B:0D:5F:A0:A3:E4:7F:A6:4D:4B:29:C6:1B:D6:A5:4D:5F:5A:38
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/xlsNX6Cj5H-mTUspxhvWpU1fWjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.25.0/24
Signature Algorithm: sha256WithRSAEncryption
28:56:45:e4:a9:47:53:25:b3:c6:e3:d8:31:4c:6a:d6:f4:79:
5f:6e:de:a1:64:09:0d:01:34:f8:6c:56:2d:e4:ad:48:7d:7f:
fa:1f:21:82:5f:5c:c7:9b:99:24:e6:2c:f2:54:f2:b5:8b:97:
e0:f9:c9:59:ac:42:62:e0:a7:b0:3f:ab:94:ac:f7:bf:ce:7b:
00:6c:88:fe:d5:08:d6:e5:d0:4b:df:d9:29:5e:37:80:10:e1:
3c:a2:2a:ed:10:df:a0:ed:43:54:e8:1a:21:8d:67:a3:a8:c4:
dd:2a:bf:20:74:7b:c2:f9:01:5e:4d:d5:2a:29:f1:6f:1e:21:
c2:33:24:28:c1:c5:3e:18:6e:6c:80:db:04:4f:5f:4e:9b:f7:
f1:fb:b8:ea:92:e1:46:61:3d:e1:f5:4a:cf:34:f1:54:b6:f4:
9d:02:63:d6:9c:01:2d:71:02:5d:54:93:7d:42:c8:7a:61:81:
27:0c:c9:8e:84:37:51:68:81:a3:43:00:d7:37:fa:bb:f6:48:
3a:d2:a3:e5:49:9e:80:03:0a:c3:16:e9:0d:54:3d:0a:f7:2a:
44:db:70:b0:48:20:2d:8d:cd:9e:fb:07:1c:8c:25:b1:bd:60:
00:87:a8:e2:b5:d2:b3:a1:4b:aa:14:7f:87:43:91:c2:d6:43:
11:8c:44:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:00 2024 by rpki-client on console-fra.rpki-client.org