Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/FfN8CmpO0kd44nX-kFL1BlTxkd8.roa
File: FfN8CmpO0kd44nX-kFL1BlTxkd8.roa (raw, json)
Hash identifier: TP8wiV2DvrkqtDJ2L2ejCIs7/Wu5dfF5e0fECR5p04A=
Subject key identifier: 15:F3:7C:0A:6A:4E:D2:47:78:E2:75:FE:90:52:F5:06:54:F1:91:DF
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 018A8D7501A35406D1B6A89A863002350870
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/FfN8CmpO0kd44nX-kFL1BlTxkd8.roa
Signing time: Wed 13 Sep 2023 07:32:50 +0000
ROA not before: Wed 13 Sep 2023 07:32:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.145.153.0/24 maxlen: 24
80.83.80.0/21 maxlen: 24
80.83.88.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8d:75:01:a3:54:06:d1:b6:a8:9a:86:30:02:35:08:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Sep 13 07:32:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15f37c0a6a4ed24778e275fe9052f50654f191df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ef:15:d5:b1:58:aa:f9:14:3b:f6:b8:a3:61:
3d:59:e6:39:64:3f:24:d9:8e:3f:b6:b7:9a:d5:c2:
14:97:69:57:32:24:aa:09:ff:82:39:68:be:2e:03:
bc:80:a8:ee:f3:7f:c2:29:88:de:8f:49:33:9c:b8:
43:8f:61:aa:eb:b6:c0:a3:12:83:07:10:5f:ad:ad:
66:d4:b2:45:cd:b5:fa:7d:9f:16:65:8b:6f:4b:16:
82:11:b9:05:a3:9f:e2:13:12:85:52:01:ab:39:d8:
f6:09:c6:9a:06:da:98:53:f5:68:36:66:ba:c0:ba:
2e:9c:bf:59:9f:f7:25:24:50:06:72:13:1d:88:4d:
73:33:ba:fd:78:e7:59:50:84:98:07:36:4e:5a:28:
72:3f:e9:14:47:b1:60:46:00:81:0c:0d:ad:49:67:
69:84:ae:0a:71:ef:dd:4f:e9:d8:b4:10:d0:4e:69:
a8:85:43:5a:e2:74:61:20:20:e6:ff:12:39:2d:86:
27:9a:02:71:d0:56:7c:9d:82:56:3e:38:1d:09:35:
3e:8c:07:70:f2:3e:c9:d3:72:0f:58:a1:dc:cb:6e:
a0:d6:fa:b5:4b:e5:83:e7:35:ec:4e:c1:9c:ad:04:
c3:5f:b5:f2:d3:f0:7f:ef:da:79:ea:ca:91:fb:3e:
39:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F3:7C:0A:6A:4E:D2:47:78:E2:75:FE:90:52:F5:06:54:F1:91:DF
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/FfN8CmpO0kd44nX-kFL1BlTxkd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.153.0/24
80.83.80.0-80.83.89.255
Signature Algorithm: sha256WithRSAEncryption
80:2e:31:73:06:23:aa:98:ec:1d:f0:04:d0:98:49:9e:d5:2e:
2f:a5:09:37:61:1b:a9:fc:52:f7:b3:68:de:46:e2:1c:bb:98:
f1:27:85:8f:9f:3f:a7:4f:61:cd:7b:98:36:93:c9:5e:43:59:
03:8f:cb:37:70:8c:a8:02:68:80:32:0f:b4:47:bb:3b:08:e1:
f9:58:83:a6:f1:c5:f8:6c:0b:94:ab:30:21:24:2c:da:50:62:
01:f9:a5:f3:ed:53:b0:fe:33:3a:b4:b9:8a:c8:ce:5e:95:32:
5b:fe:9c:0b:06:1b:f5:9e:73:b9:36:fc:52:5a:d1:26:7c:3c:
7a:49:9a:f0:53:73:ac:2f:ea:ca:13:21:a3:b2:60:5f:d5:2e:
22:71:ce:db:ee:10:20:21:f1:60:ed:12:53:b4:5e:a3:13:7d:
b8:55:46:58:9d:37:1f:6a:b6:95:45:a0:1b:6f:f2:6e:84:c7:
ca:82:8f:91:3b:d2:ad:47:2e:9d:46:25:b9:7f:2a:22:b2:75:
47:83:65:6b:bf:e1:d9:6f:36:2f:c5:a4:4d:d6:64:be:06:1c:
0b:03:7f:8f:69:eb:59:cb:60:61:d8:35:5c:08:04:24:94:17:
2d:15:ef:93:fc:fc:9e:da:6e:5d:f1:b6:89:17:d7:43:e9:f1:
b3:24:85:fe
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 15 10:05:59 2023 by rpki-client on console-ams.rpki-client.org