Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/AMj3p89CEXO20W0gtuEqtg-gGSc.roa
File: AMj3p89CEXO20W0gtuEqtg-gGSc.roa (raw, json)
Hash identifier: CaxgqI9wGzd7eqHff8DGbK+SoDIYbAbXbHQU1P1YRCw=
Subject key identifier: 00:C8:F7:A7:CF:42:11:73:B6:D1:6D:20:B6:E1:2A:B6:0F:A0:19:27
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 0189BD8DDCD9D7942ADB580CE6505B76404F
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/AMj3p89CEXO20W0gtuEqtg-gGSc.roa
Signing time: Thu 03 Aug 2023 22:38:58 +0000
ROA not before: Thu 03 Aug 2023 22:38:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.145.153.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bd:8d:dc:d9:d7:94:2a:db:58:0c:e6:50:5b:76:40:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Aug 3 22:38:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00c8f7a7cf421173b6d16d20b6e12ab60fa01927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1b:41:25:2e:9d:15:7b:b4:5a:af:ee:cd:74:
78:8b:f3:62:9d:1d:63:e7:e0:ae:cf:5e:50:a2:eb:
6a:c5:12:9d:5b:33:1b:4b:ed:3d:1b:c8:5b:ff:39:
1c:ea:b1:d3:6b:81:90:4e:68:0b:81:1a:9f:a3:3d:
14:4f:c5:c1:fb:54:51:f7:33:8a:7e:1b:48:c6:97:
1d:fe:87:08:5b:3f:fa:c3:b5:1f:2a:16:92:d0:dc:
07:e5:eb:97:10:1e:c3:f4:47:8d:c4:d0:32:58:1f:
11:74:1a:07:43:1e:7d:e0:26:fc:d6:29:54:6e:a7:
bb:7d:bf:ea:9d:3d:fe:79:47:e2:b9:3b:51:4c:f0:
84:6a:1d:dc:10:e7:5a:0a:3c:70:6d:79:7b:67:3a:
0c:74:e1:8a:5b:99:13:35:94:72:f8:98:75:c5:c4:
44:13:ea:ff:80:9e:d3:a6:2e:f9:5d:37:e7:4f:b1:
94:08:97:34:6c:72:bd:97:e3:af:e4:59:b0:6f:01:
c6:ed:7f:55:c5:5a:54:3b:10:c8:ff:84:a4:06:6b:
ca:1d:52:96:2e:7b:fd:e7:a6:16:11:e0:6e:a8:a4:
99:b0:9d:37:6d:1b:53:99:2a:01:cc:7a:61:ba:24:
c2:e3:8c:5d:59:46:91:21:61:ce:e1:5c:ee:35:7f:
04:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C8:F7:A7:CF:42:11:73:B6:D1:6D:20:B6:E1:2A:B6:0F:A0:19:27
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/AMj3p89CEXO20W0gtuEqtg-gGSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.153.0/24
Signature Algorithm: sha256WithRSAEncryption
61:7c:a6:c7:ee:43:75:25:8e:ff:88:3e:1f:c7:5a:61:3c:15:
53:bb:61:08:19:86:18:15:46:83:d9:a5:fd:28:b1:db:38:db:
51:a8:e3:b4:66:c9:fa:c8:13:98:e8:5e:aa:51:63:c3:d2:35:
76:9e:1b:3e:20:30:88:2b:15:32:9f:f4:6b:b9:4f:25:ba:75:
f2:97:c3:cc:ee:ea:b2:2c:f1:88:91:25:b5:dc:89:f3:6b:31:
b8:27:12:1c:3f:89:48:70:9e:c0:77:bd:05:db:7e:13:ed:02:
a0:d6:6d:15:8a:e9:55:15:58:25:4e:6b:cf:04:14:cd:ca:74:
fd:3c:46:2d:a9:ec:47:b7:d1:52:5c:a4:4e:ff:9e:df:4c:c5:
40:29:10:33:43:b8:cf:65:78:0e:a7:9a:fd:53:75:2e:74:2e:
05:b4:94:bf:18:33:b1:c2:94:8d:ad:e3:95:24:3e:35:e3:b2:
14:e7:2e:ea:60:f4:f9:32:63:68:6e:40:54:af:d9:ac:85:31:
b5:38:e0:b7:27:58:45:b8:9e:e4:d4:fd:44:ae:71:2d:1e:0c:
a4:3a:3f:46:e5:2a:c4:f5:6d:61:74:ca:af:5e:63:74:cc:0b:
8f:f2:98:30:5a:f0:40:6e:db:e9:ef:5b:07:95:8c:7a:b2:09:
ff:e4:06:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 12 07:46:23 2023 by rpki-client on console-ams.rpki-client.org