Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/cTLcNfBO6_4UoItOAzpK-tTf9G4.roa
File: cTLcNfBO6_4UoItOAzpK-tTf9G4.roa (raw, json)
Hash identifier: dsfe8r0nufffzSdjRgfXD2u29Og7rJ6TAuaRGcGFxGo=
Subject key identifier: 71:32:DC:35:F0:4E:EB:FE:14:A0:8B:4E:03:3A:4A:FA:D4:DF:F4:6E
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 018C418528158FB849BC0596D0D493BC8481
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/cTLcNfBO6_4UoItOAzpK-tTf9G4.roa
Signing time: Wed 06 Dec 2023 23:44:54 +0000
ROA not before: Wed 06 Dec 2023 23:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.145.152.0/24 maxlen: 24
45.145.154.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:41:85:28:15:8f:b8:49:bc:05:96:d0:d4:93:bc:84:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Dec 6 23:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7132dc35f04eebfe14a08b4e033a4afad4dff46e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bb:08:a6:78:f5:9b:2f:f1:98:02:82:07:fe:
9b:f2:40:7d:a4:52:10:07:c3:f8:44:77:4f:ba:79:
46:45:09:61:bc:fd:16:7e:ce:0d:b3:44:c2:5a:2d:
0d:d1:6d:45:0e:72:b4:e3:0b:d1:be:44:06:d1:c7:
13:64:92:04:62:40:e1:08:c6:e4:90:f8:9b:97:6c:
c9:ce:f1:93:f9:17:69:5c:bc:99:a0:55:37:a8:7e:
07:b3:b2:84:e5:ea:47:53:b8:13:8e:94:58:b2:ae:
d1:16:67:7f:65:c0:b9:71:53:ee:d6:98:7d:27:2d:
c8:de:ce:77:56:45:8b:77:d4:de:b9:7b:47:a9:1d:
23:3e:97:94:b8:d2:a9:7e:9d:70:11:23:91:8e:db:
cd:0e:d4:5b:53:dd:98:99:75:c5:47:a9:9f:7d:43:
6a:46:92:51:18:6e:69:2b:19:1b:6d:c9:33:07:4e:
e8:36:ef:e7:6c:5a:11:eb:99:93:e3:4b:66:9e:6a:
d3:1f:ad:81:84:2b:93:2d:7b:e5:2d:fd:2d:d5:be:
b9:71:ed:f6:e4:4d:cb:ac:20:4a:54:61:15:bd:ee:
6e:ec:2d:89:b6:08:ca:e8:72:0a:9e:2b:c1:3c:0b:
98:d2:61:26:53:b5:f7:0a:4a:e8:6f:24:79:2a:2e:
d6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:32:DC:35:F0:4E:EB:FE:14:A0:8B:4E:03:3A:4A:FA:D4:DF:F4:6E
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/cTLcNfBO6_4UoItOAzpK-tTf9G4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.152.0/24
45.145.154.0/23
Signature Algorithm: sha256WithRSAEncryption
06:a3:40:20:95:9b:af:71:45:83:9a:39:aa:42:35:0e:72:99:
13:90:67:c3:a9:cd:5c:a4:63:fb:c1:66:9b:18:9a:4c:06:42:
4a:25:ea:1a:86:fd:21:6f:5f:4f:ca:ee:7d:c8:45:22:02:4b:
19:26:87:5d:e5:e2:a3:bd:32:3f:6e:fb:15:8c:47:66:94:51:
1e:04:3d:77:84:9d:3d:42:9e:f3:30:83:8c:e3:be:81:9f:7f:
f0:fc:10:12:96:7e:55:00:4c:6e:5b:62:15:de:4a:58:77:14:
54:91:db:b5:a9:d7:b6:06:d0:8e:fd:1f:ae:b2:fe:71:d4:6d:
f4:df:50:a8:37:36:87:62:b6:b9:0f:d1:c1:f7:5a:0f:75:69:
da:0d:2b:96:fe:c2:70:86:fd:0c:7a:d5:ed:d8:f4:1a:04:56:
99:11:5d:02:c3:0e:76:8d:50:7f:6b:48:99:0c:07:78:09:4a:
f0:52:56:3f:5c:57:70:31:79:83:b7:61:18:b1:28:e3:a4:49:
81:4d:75:28:21:be:0c:7c:4b:1b:1d:67:ac:dd:d9:26:81:1d:
cb:4a:c0:ef:9a:90:1f:c2:fd:a6:26:c6:f5:49:8f:bc:7d:c0:
4f:b4:aa:82:f9:a1:e7:38:d0:09:73:40:5a:35:b8:96:0e:39:
4a:de:cd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 10 13:54:15 2023 by rpki-client on console-fra.rpki-client.org