Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/fLhk3dxVkSaaISXCT-ILBPF_j7I.roa
File: fLhk3dxVkSaaISXCT-ILBPF_j7I.roa (raw, json)
Hash identifier: DrENto0iIJR+VCnm5L/hcmqHJdCNqEjcuOuP51MWLBs=
Subject key identifier: 7C:B8:64:DD:DC:55:91:26:9A:21:25:C2:4F:E2:0B:04:F1:7F:8F:B2
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 01856F1DD75B19F09106A45F1F89FE0BA32D
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/fLhk3dxVkSaaISXCT-ILBPF_j7I.roa
Signing time: Sun 01 Jan 2023 20:55:04 +0000
ROA not before: Sun 01 Jan 2023 20:55:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62805
IP address blocks: 45.87.166.0/24 maxlen: 24
45.87.165.0/24 maxlen: 24
45.87.167.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:d7:5b:19:f0:91:06:a4:5f:1f:89:fe:0b:a3:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 20:55:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cb864dddc5591269a2125c24fe20b04f17f8fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:42:d0:75:69:7f:84:1e:b9:21:1d:42:ac:ec:
b2:00:b1:99:55:61:39:15:02:da:11:10:60:ff:00:
9c:1e:5d:56:07:e2:6a:a3:f9:b7:0d:fd:00:09:1b:
f6:27:7e:0e:fa:f7:ae:7e:39:17:bb:1e:fc:9a:48:
e8:fb:e8:b8:37:77:07:43:d5:63:2a:a7:f0:fc:1b:
56:af:51:a7:a6:80:16:09:0c:e7:f1:ac:11:5a:ef:
68:0c:38:4c:95:20:c4:78:b3:e7:20:71:ea:6a:a6:
df:c3:10:df:c9:8b:98:ee:d1:ff:17:a4:d2:29:b6:
3d:c8:a0:c4:50:ad:5e:27:55:67:a9:25:c1:62:4c:
10:93:b8:99:dd:d9:94:bb:f9:87:34:fa:94:28:74:
b4:c5:07:dc:34:03:1e:a2:fc:4c:25:01:8b:07:04:
f5:9c:72:cd:90:ec:cb:59:34:af:a0:fc:93:e4:1b:
7b:30:fc:8f:b8:58:16:b6:10:3e:d4:c3:05:95:c0:
da:64:da:38:90:f4:0a:fb:59:d8:55:b1:5d:4e:74:
8d:b7:aa:f7:5a:26:d6:fc:fe:ac:11:90:9a:3c:27:
35:96:fd:cc:0f:56:db:93:d2:3c:1c:49:d4:4d:51:
a3:cd:be:c8:00:8c:8d:f4:66:e7:71:fb:1f:25:b9:
b1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B8:64:DD:DC:55:91:26:9A:21:25:C2:4F:E2:0B:04:F1:7F:8F:B2
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/fLhk3dxVkSaaISXCT-ILBPF_j7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.165.0-45.87.167.255
Signature Algorithm: sha256WithRSAEncryption
48:c3:90:ca:4e:d3:fb:3d:0d:81:b5:e9:72:27:ca:cd:c3:82:
e2:ae:1e:5d:0f:12:5a:fb:c6:a6:aa:77:78:71:e8:bb:05:54:
0d:59:24:13:3e:4f:7e:92:01:46:da:b2:d6:ab:ea:a8:24:55:
ab:8c:11:64:23:8b:e2:4f:b0:66:6d:b3:bb:94:1e:4a:0d:3e:
37:1c:25:29:19:8e:61:6c:24:5d:68:f1:4d:b7:00:3d:18:75:
86:cb:fb:cc:33:9b:67:30:0f:ff:cd:43:bc:b2:09:69:63:35:
8e:5b:ba:89:d6:88:3a:98:86:4a:7d:bf:d8:fa:c9:4d:d0:7d:
6d:f2:3d:e3:3f:49:44:40:f9:58:03:03:ec:cb:c0:5e:4e:27:
1c:8d:64:f3:45:31:b8:1c:f1:69:cf:6a:46:37:be:0c:82:e2:
c5:66:60:24:8c:95:e1:69:46:99:6b:28:fc:9d:0f:ff:75:3e:
2c:52:03:eb:a0:0d:a6:37:ef:ff:93:ee:c8:f8:1c:07:d1:e6:
96:d4:d0:fa:53:90:0e:9e:b0:7b:4a:cc:e8:96:bc:32:ab:8d:
a4:39:43:72:e6:b3:d4:b1:a2:41:4b:62:df:f5:2e:a6:82:28:
b0:ef:a9:b4:c1:3c:2a:41:3e:47:11:ed:7d:4e:b6:49:e2:53:
47:2f:ba:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:43 2024 by rpki-client on console-ams.rpki-client.org