Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/8THM3Bw4BpG2tUG4yIegAnw1Ck8.roa
File: 8THM3Bw4BpG2tUG4yIegAnw1Ck8.roa (raw, json)
Hash identifier: n4pd+CrUv8ki5VlnL6BSVCECdRaJSJWx3yBMBiSVbNo=
Subject key identifier: F1:31:CC:DC:1C:38:06:91:B6:B5:41:B8:C8:87:A0:02:7C:35:0A:4F
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 018B32D3137F234E1069A647035571EC55F2
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/8THM3Bw4BpG2tUG4yIegAnw1Ck8.roa
Signing time: Sun 15 Oct 2023 10:12:55 +0000
ROA not before: Sun 15 Oct 2023 10:12:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198100
IP address blocks: 45.145.154.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:32:d3:13:7f:23:4e:10:69:a6:47:03:55:71:ec:55:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Oct 15 10:12:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f131ccdc1c380691b6b541b8c887a0027c350a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:11:a7:b5:f6:d1:86:40:90:6d:c2:49:84:8f:
d6:65:43:be:2a:6e:b4:1d:d0:74:9f:69:2e:21:c7:
26:46:f6:9c:cc:96:a3:75:c4:01:21:ab:89:0a:84:
14:b0:37:c5:a2:0f:ee:86:fb:bf:92:aa:f7:b1:96:
e2:d9:2e:be:58:4c:04:44:c3:58:ff:2f:24:a9:9a:
b8:78:88:75:36:90:58:e7:32:49:eb:a6:b1:6e:88:
8f:dc:1f:41:e9:1f:a8:3f:0e:ed:68:e2:d3:6e:63:
79:81:87:51:1f:e5:6a:20:64:2a:bf:09:20:5d:e1:
c2:0e:4b:df:52:1b:2e:ff:e4:a3:51:4b:d6:f0:00:
0e:87:d2:7e:83:25:2c:c3:d1:ca:e5:fa:8b:44:91:
e4:b3:f5:5a:20:10:96:c6:c0:74:0d:60:34:09:b1:
0c:af:f8:33:da:28:f7:08:0a:b0:8a:bb:79:cd:b8:
55:3d:74:94:a2:4d:c6:aa:73:3f:b7:c0:b4:79:29:
7b:b9:3e:3a:21:fb:a1:6c:cd:99:30:c2:04:b8:30:
e4:78:85:d5:49:22:1c:7c:e0:51:c3:ef:6a:4a:20:
df:2c:df:5b:75:68:90:71:c6:97:d2:dc:9f:ed:b6:
9a:57:20:15:a6:2f:4e:a1:64:4b:f6:84:4c:4c:16:
6e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:31:CC:DC:1C:38:06:91:B6:B5:41:B8:C8:87:A0:02:7C:35:0A:4F
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/8THM3Bw4BpG2tUG4yIegAnw1Ck8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.154.0/24
Signature Algorithm: sha256WithRSAEncryption
62:c2:30:57:e6:16:16:65:0b:d0:53:d5:b4:fa:9f:e7:67:d3:
ab:2d:4d:55:d9:5b:fb:71:68:d6:a0:ac:f2:fe:e1:63:13:c1:
78:16:bd:c0:3a:5d:60:c9:92:17:d1:61:aa:e1:67:22:ec:9f:
2f:49:11:aa:2c:b7:8d:1b:5d:d8:6b:cc:36:77:a2:03:42:1d:
fd:39:ab:ff:22:db:46:98:d4:1b:18:b9:33:fd:44:59:44:0c:
18:9c:e2:1c:4d:8e:b3:4a:ac:e3:6c:42:47:74:a7:e3:a7:ac:
47:83:71:eb:fc:c2:9c:b1:5a:1e:ce:f2:95:ce:11:be:55:1a:
3f:0a:85:8d:37:05:17:b0:4a:4f:fe:40:4b:b2:2a:9e:e0:dc:
26:e2:6d:ca:55:bb:90:66:74:cd:17:81:1e:2c:85:69:84:65:
86:79:2b:04:a2:1e:9d:26:60:2d:9b:39:20:df:5b:42:df:5f:
d7:b7:aa:cd:e6:a3:ae:e0:12:55:2f:92:69:88:55:2d:97:44:
b7:57:28:24:b9:43:80:d1:81:a6:cb:bc:b7:cc:cb:6d:89:af:
23:0a:32:3a:c2:3a:77:28:b4:4e:0c:78:cf:da:3d:e3:19:43:
a6:6e:ae:d0:a9:bd:df:5c:78:e5:b8:ab:a3:bd:f6:01:07:17:
ab:b3:64:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:00 2024 by rpki-client on console-fra.rpki-client.org