Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/Ahj5wi9-L4L6vbVG1bdSUMJatZ8.roa
File: Ahj5wi9-L4L6vbVG1bdSUMJatZ8.roa (raw, json)
Hash identifier: Mlb+kKyQPhbxnQMjowWk0fXxHb2u5hmPLlUykRgH3gI=
Subject key identifier: 02:18:F9:C2:2F:7E:2F:82:FA:BD:B5:46:D5:B7:52:50:C2:5A:B5:9F
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 018CBA25F24D278326604310DB36B012E302
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/Ahj5wi9-L4L6vbVG1bdSUMJatZ8.roa
Signing time: Sat 30 Dec 2023 09:54:58 +0000
ROA not before: Sat 30 Dec 2023 09:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.145.154.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ba:25:f2:4d:27:83:26:60:43:10:db:36:b0:12:e3:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Dec 30 09:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0218f9c22f7e2f82fabdb546d5b75250c25ab59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:83:e4:91:a1:f1:52:0a:8c:6e:b4:57:9a:d7:
8f:94:5b:43:7c:a3:7b:48:69:7c:62:35:93:d4:3d:
3b:b8:80:d4:41:a2:eb:e7:3f:fa:eb:af:1b:32:12:
4f:be:04:d1:9a:06:d3:0e:dc:58:e7:c2:bd:fe:8f:
9f:a4:e9:11:41:6e:76:9e:db:f9:39:11:b1:ea:a5:
87:0f:8f:1a:1c:9a:43:bf:93:6f:fe:17:09:13:01:
bf:a6:cb:f0:fa:ef:8f:8f:27:c6:29:8f:b1:10:c1:
1f:12:b6:da:e3:c4:25:26:63:98:75:2f:8f:f4:2f:
14:e7:62:0a:50:2b:33:8c:0a:3d:da:a8:22:c8:7b:
1c:35:a6:88:1d:37:bc:1c:46:c3:65:12:00:91:75:
8e:66:6f:27:47:9b:32:b0:f0:68:61:b8:ac:5d:dc:
f1:3f:b2:23:3f:c0:ad:9c:7c:15:17:4b:17:8b:56:
a4:97:83:af:cd:9c:e4:54:8d:87:37:f1:d8:13:ee:
dc:34:26:91:8b:53:cd:b9:87:e2:99:8b:f5:32:4f:
89:dc:95:c5:ab:70:05:94:55:a7:77:84:d8:51:cb:
14:9b:1a:c1:88:22:fd:56:70:5a:c9:77:bb:dc:9c:
b2:5b:e0:ad:5e:e5:09:63:03:81:86:da:9b:d5:06:
7f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:18:F9:C2:2F:7E:2F:82:FA:BD:B5:46:D5:B7:52:50:C2:5A:B5:9F
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/Ahj5wi9-L4L6vbVG1bdSUMJatZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.154.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:9f:93:bf:24:89:da:78:ad:76:9f:39:64:89:49:61:55:de:
f3:5f:1f:a9:2c:93:4a:34:86:b6:2c:84:fe:fb:eb:01:cd:ab:
c0:eb:95:15:20:96:c7:64:d1:d4:8c:0a:eb:ed:ab:32:87:3f:
3f:bd:78:f5:94:f9:42:ab:a5:77:e9:ab:b2:dc:5a:95:6b:a4:
93:b5:b4:9e:f2:e9:83:7c:3f:9a:dc:bf:a7:43:29:0e:a5:7d:
cd:43:bd:e6:54:4e:d5:73:dc:df:be:b7:ba:bf:a2:25:91:e0:
1a:22:f4:5e:52:0b:24:29:3f:d1:1c:85:ed:90:7d:de:67:83:
3b:0e:e6:15:14:1e:09:25:e5:cd:9f:a9:10:6a:aa:de:33:3b:
f6:31:56:60:4f:36:b4:ef:62:4c:2d:f7:e2:02:29:93:52:27:
95:f8:52:55:eb:5f:18:6e:c4:fb:9d:3a:bb:2a:ef:03:ca:e8:
6c:e6:32:54:6c:f8:cc:b9:ab:a0:06:f1:7d:29:28:d7:67:6b:
f5:8c:ca:0d:36:07:01:6f:fc:b9:20:7d:8b:7b:2b:f1:3f:7d:
05:ff:29:e6:96:b2:35:75:64:ea:d9:c8:02:7a:be:f7:51:bb:
69:0a:6b:99:76:00:08:e2:5e:8f:90:a6:a1:84:6a:58:aa:86:
d1:6f:52:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:00 2024 by rpki-client on console-fra.rpki-client.org