Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/NxyGlbnvp-ZSHuBaXCAob_Ib0lc.roa
File: NxyGlbnvp-ZSHuBaXCAob_Ib0lc.roa (raw, json)
Hash identifier: hS1UHIP5r+k7XiF0feBNGr1AAYZz/1NRedlOJLjZ9ew=
Subject key identifier: 37:1C:86:95:B9:EF:A7:E6:52:1E:E0:5A:5C:20:28:6F:F2:1B:D2:57
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 018BA06550FCA9F0F42D59D158E8874FA903
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/NxyGlbnvp-ZSHuBaXCAob_Ib0lc.roa
Signing time: Sun 05 Nov 2023 16:51:16 +0000
ROA not before: Sun 05 Nov 2023 16:51:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.145.152.0/24 maxlen: 24
45.145.154.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a0:65:50:fc:a9:f0:f4:2d:59:d1:58:e8:87:4f:a9:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Nov 5 16:51:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=371c8695b9efa7e6521ee05a5c20286ff21bd257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ad:d6:13:4d:a1:85:b3:e3:77:dd:02:f9:79:
7e:4d:55:0a:cd:2d:b6:8f:dc:f3:97:e8:ff:30:45:
dc:5e:7b:38:4d:58:5b:18:33:5c:e1:7f:ed:9c:dd:
31:a0:e2:ee:c5:73:1b:c5:8a:b8:3d:0c:fb:12:76:
b0:8e:ea:1f:51:35:5f:c1:50:7e:a1:23:4d:9e:7e:
2e:4a:ba:0b:67:79:00:ba:ce:78:cc:8b:49:c8:57:
1c:c4:63:d3:c2:c5:f3:0d:cf:f7:88:e6:c5:40:c5:
7d:6e:23:ce:be:3e:d3:4c:99:52:28:11:75:0f:d1:
d5:68:96:39:b9:11:9d:29:46:2b:c4:46:c4:f1:69:
0b:98:b0:5f:92:86:0c:73:ad:ef:06:ab:7e:49:94:
73:4d:fd:89:99:fb:ce:8f:3a:8d:88:0a:17:d8:29:
b5:29:dc:49:c1:ef:ff:98:a6:b1:e4:0c:19:46:2b:
c1:be:be:30:47:fa:47:d6:cb:a2:51:9d:0e:ad:3c:
18:7d:ce:c9:c3:82:e8:c4:16:6a:88:5d:48:e5:6d:
7e:35:09:5c:44:0d:0d:17:51:5d:79:1f:b2:ca:37:
92:16:6f:e9:04:e6:10:66:28:df:69:e1:95:7d:76:
c6:d6:c6:91:45:59:71:c1:a8:39:91:3c:99:04:36:
e9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:1C:86:95:B9:EF:A7:E6:52:1E:E0:5A:5C:20:28:6F:F2:1B:D2:57
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/NxyGlbnvp-ZSHuBaXCAob_Ib0lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.152.0/24
45.145.154.0/23
Signature Algorithm: sha256WithRSAEncryption
40:52:6d:c8:4c:0d:1e:f1:4f:1f:47:82:7b:2e:d4:4a:38:9a:
1b:f7:ae:63:68:71:fb:fe:ca:ae:ae:8f:c7:f1:1e:19:28:51:
d7:f1:d1:15:61:f6:aa:8c:66:e9:67:e2:e7:11:bf:8d:f2:fd:
65:32:c4:18:2e:44:c2:3b:a6:3c:4c:31:f1:9b:74:91:b6:df:
cc:dd:55:42:66:bf:4f:92:88:fe:98:c8:40:07:d9:5e:44:bd:
0c:d7:46:bc:26:41:17:3c:75:c2:37:38:ec:5a:72:ed:1e:c6:
4c:1f:53:18:b8:2b:b4:fe:b8:36:90:78:31:07:76:2c:a2:4b:
51:c3:32:97:95:9f:d2:7d:c6:07:ec:08:3d:1a:e6:15:36:e8:
81:b8:37:1e:92:1f:d0:f7:68:da:44:8a:dd:8b:4c:6c:cd:7f:
73:cd:b8:6f:6b:f6:26:05:4e:f5:1b:fa:10:88:a3:24:43:fa:
40:96:a2:18:32:c2:3d:3c:33:cb:ad:b6:64:27:c3:94:1d:2b:
f8:0c:f4:8a:41:7f:87:2f:02:aa:ea:9f:5e:4c:6f:a1:06:82:
3f:bc:43:f2:a9:82:59:d9:0d:dd:4e:b0:f5:a8:12:25:57:c5:
e0:28:70:13:d7:02:ed:dc:2b:96:3d:b2:25:e6:f1:7b:03:d4:
bb:9a:58:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 7 22:39:24 2023 by rpki-client on console-ams.rpki-client.org