Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/0WOaQbFhSkQ4R0agrVm2no2-7O8.roa
File: 0WOaQbFhSkQ4R0agrVm2no2-7O8.roa (raw, json)
Hash identifier: J+HR0/Au99S0TCupNcjiGvXYIR+hvlNvV4CDx2D8jCw=
Subject key identifier: D1:63:9A:41:B1:61:4A:44:38:47:46:A0:AD:59:B6:9E:8D:BE:EC:EF
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 0189FA3C132E1D6CFD0FD9FF1EDBADB260EB
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/0WOaQbFhSkQ4R0agrVm2no2-7O8.roa
Signing time: Tue 15 Aug 2023 17:26:28 +0000
ROA not before: Tue 15 Aug 2023 17:26:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.145.155.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fa:3c:13:2e:1d:6c:fd:0f:d9:ff:1e:db:ad:b2:60:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Aug 15 17:26:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1639a41b1614a44384746a0ad59b69e8dbeecef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5d:6b:f4:56:88:6f:04:f3:74:e5:03:a1:e6:
6f:ea:c2:5a:a4:f5:58:41:59:4b:b6:78:55:7a:0c:
a1:02:28:a9:53:bc:a7:7b:60:fe:05:49:28:9c:9b:
91:29:1f:95:eb:ab:48:b3:73:be:3b:6a:9f:d6:2b:
aa:34:e8:65:e3:99:5f:08:d0:e5:77:ea:e3:2d:43:
70:67:c7:44:84:03:8d:d2:eb:15:6f:d1:1c:eb:34:
36:bb:cd:2b:db:0b:86:38:37:c8:d8:5f:73:b4:4c:
30:6c:97:4f:82:5b:fa:cb:be:db:e4:21:66:cc:d4:
35:64:e0:14:81:fc:f3:ab:37:d2:4d:26:1e:3d:99:
74:f4:eb:85:20:39:6e:2e:8e:25:a7:7b:b3:ca:a6:
a1:ee:80:c8:27:55:33:d2:95:a7:28:12:85:c8:61:
dd:3b:24:15:60:37:91:0d:4e:67:86:11:e3:05:e9:
d5:da:0b:08:93:10:3d:7d:a0:5c:27:b1:69:e8:8d:
aa:7c:d9:41:bd:ca:d7:54:67:98:11:0d:d5:8e:13:
fd:5d:64:f4:35:22:eb:ef:81:27:c0:83:f4:9c:5b:
66:39:6c:b8:06:cf:a8:2c:4b:b4:c1:58:12:60:8e:
8e:71:ea:53:18:1c:63:8b:ad:06:00:9d:0b:a5:c5:
e0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:63:9A:41:B1:61:4A:44:38:47:46:A0:AD:59:B6:9E:8D:BE:EC:EF
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/0WOaQbFhSkQ4R0agrVm2no2-7O8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.155.0/24
Signature Algorithm: sha256WithRSAEncryption
00:6e:e5:97:e8:e5:0c:19:34:0d:19:7c:63:66:d7:3d:4d:d7:
57:41:9a:53:81:e8:30:58:a0:8a:ab:ca:49:d0:62:d5:8b:65:
97:ae:56:e9:c9:aa:39:02:4f:a0:12:3c:a0:26:0c:4c:a0:1e:
63:07:45:6e:77:51:eb:d0:c3:a1:2c:64:a8:fc:b9:a3:cb:9d:
1e:63:b7:8d:18:c8:a6:2a:12:48:c4:78:61:7f:cd:94:83:96:
26:f5:0c:74:00:41:73:88:ae:ef:17:6d:21:f4:e7:e4:6d:30:
2a:39:1b:57:56:8b:49:d2:9d:a2:d7:43:48:4e:fb:b0:fe:bc:
43:93:56:b2:95:bc:e1:80:8c:f9:ae:7f:aa:0b:fd:0a:17:30:
91:56:48:65:61:ae:3c:16:e5:0f:72:3b:5d:b0:f1:47:2c:51:
2d:cb:87:f5:36:75:3d:92:fa:ac:97:62:db:60:17:16:d1:30:
c5:c0:69:fa:e7:71:e5:8b:2f:9f:49:26:15:78:b1:8c:e6:1f:
4a:51:01:58:34:93:a8:36:11:ed:0b:c0:b4:09:20:e7:2f:47:
51:c9:ff:ca:e7:50:75:5a:5b:59:0d:57:b3:c2:f0:09:4c:69:
a6:18:e5:98:e2:f8:c6:a7:17:99:2c:25:e0:eb:97:06:ce:d2:
0b:fa:3a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 17 12:42:56 2023 by rpki-client on console-fra.rpki-client.org