Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/eHasV6_j2oE8PEM0ujPURd7cins.roa
File: eHasV6_j2oE8PEM0ujPURd7cins.roa (raw, json)
Hash identifier: h62LmWi1HHgzicP3HMkFGLqShlZTTh5M/SWiHPVLsQA=
Subject key identifier: 78:76:AC:57:AF:E3:DA:81:3C:3C:43:34:BA:33:D4:45:DE:DC:8A:7B
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 018A4644BDFA46627FFCC16D8BA2FC948BD5
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/eHasV6_j2oE8PEM0ujPURd7cins.roa
Signing time: Wed 30 Aug 2023 11:47:04 +0000
ROA not before: Wed 30 Aug 2023 11:47:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399073
IP address blocks: 45.145.154.0/24 maxlen: 24
45.145.155.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:46:44:bd:fa:46:62:7f:fc:c1:6d:8b:a2:fc:94:8b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Aug 30 11:47:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7876ac57afe3da813c3c4334ba33d445dedc8a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:79:8d:44:1d:05:ed:ae:22:5d:28:91:b0:e8:
45:97:8d:51:c5:88:93:76:0f:dc:fc:d2:f1:11:47:
93:eb:59:4a:59:8c:82:a0:11:d5:a1:5e:39:33:0e:
8f:05:77:1e:f5:04:1b:f6:8b:17:fa:f0:bd:35:05:
34:20:12:9d:91:da:97:2b:2c:13:6c:dc:4e:20:ba:
2a:4b:a3:93:57:e1:ee:ad:02:c1:26:11:e1:40:a4:
a2:82:fc:8d:38:0d:1a:86:2b:90:39:07:d4:bf:a9:
d7:2d:57:43:a3:6f:7b:74:52:84:af:7a:99:87:0d:
cd:b9:e7:70:30:26:e7:82:af:82:99:eb:62:5c:b3:
66:15:ee:c9:97:ff:10:63:f3:67:bf:c9:22:fd:d5:
5e:de:4f:52:3d:75:cc:16:ce:2e:c1:8d:57:7b:4f:
57:96:0f:ef:09:6c:2d:ef:f3:63:8a:a9:b5:df:07:
7f:56:ef:ea:7e:19:ce:fb:d4:8c:38:5c:7c:d6:53:
07:2b:92:72:e3:61:b0:57:fb:51:f3:a0:f4:36:d3:
05:71:40:85:16:ce:83:5d:3d:93:ea:31:3c:47:ae:
75:a6:d5:a5:4e:9f:fe:ad:f4:01:ae:72:33:1b:08:
ad:93:16:15:6d:55:99:a6:ed:10:33:c2:27:8d:7f:
ef:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:76:AC:57:AF:E3:DA:81:3C:3C:43:34:BA:33:D4:45:DE:DC:8A:7B
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/eHasV6_j2oE8PEM0ujPURd7cins.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.154.0/23
Signature Algorithm: sha256WithRSAEncryption
69:e5:9a:1d:a3:51:ee:00:00:a6:75:1e:24:2e:1c:19:f7:3c:
e4:64:9b:64:e6:c6:37:be:5a:84:27:08:6c:a1:72:e1:3c:55:
34:99:ff:70:c9:89:9c:03:c1:94:5d:7a:9a:84:2a:c1:db:6d:
82:4f:f5:ab:db:57:eb:51:58:61:fb:b3:dc:31:24:42:4d:95:
7f:c0:79:53:40:f5:8c:66:37:31:0c:1e:a1:ec:f8:8d:af:ab:
44:7f:95:aa:f3:9b:af:99:37:a0:de:61:28:20:54:02:d5:33:
9f:72:90:1a:b0:5f:ff:ea:01:3f:de:4f:d7:64:6b:d6:2e:07:
19:1b:9d:39:f3:54:ec:4b:56:4c:0a:72:b7:67:ca:8f:a3:c9:
c4:f5:e7:87:5f:1a:19:3a:fd:05:af:8b:74:f2:b1:b4:5c:7f:
2d:9a:77:17:fc:71:5b:a5:73:8c:33:a9:0d:3c:cc:d8:78:02:
2b:86:01:b9:ee:fc:67:ca:64:3c:4c:4d:1a:b0:53:5c:2e:24:
ae:10:3d:bd:56:4a:a9:e5:b6:2b:0d:7a:e8:b8:7a:b0:a8:ca:
fa:e5:78:59:4a:54:92:ea:37:32:aa:3c:be:4f:80:dd:ef:83:
b5:b2:e5:b6:ed:30:d6:e6:93:f7:1b:d6:08:09:47:38:6b:c2:
02:af:a6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 31 11:41:42 2023 by rpki-client on console-ams.rpki-client.org