Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/ipB2no5U0E-Rbp1RNg5zGvNZGzw.roa
File: ipB2no5U0E-Rbp1RNg5zGvNZGzw.roa (raw, json)
Hash identifier: 7yf9jWasNbwx8BG0vTIwdrBlC+hDhCzcAHJ2YaWSmg8=
Subject key identifier: 8A:90:76:9E:8E:54:D0:4F:91:6E:9D:51:36:0E:73:1A:F3:59:1B:3C
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 018AFC80402E95ACC9CFFB7E5F2694A86D63
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/ipB2no5U0E-Rbp1RNg5zGvNZGzw.roa
Signing time: Wed 04 Oct 2023 21:02:58 +0000
ROA not before: Wed 04 Oct 2023 21:02:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 45.145.152.0/24 maxlen: 24
45.145.153.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fc:80:40:2e:95:ac:c9:cf:fb:7e:5f:26:94:a8:6d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Oct 4 21:02:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a90769e8e54d04f916e9d51360e731af3591b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bd:3b:6d:c6:a6:13:a6:ea:db:9b:29:78:81:
3f:ea:44:42:dc:78:26:95:94:c8:5e:b5:cf:00:83:
12:87:be:76:e0:a7:07:75:69:3a:93:dc:f4:e3:4e:
a0:1a:26:28:12:01:55:cc:b9:5c:51:6c:01:03:00:
ce:5b:76:2b:4c:44:a4:c8:05:e0:35:f4:a1:6b:18:
74:96:e2:b4:d8:85:3a:19:dc:ba:50:d8:d0:ca:4f:
c8:11:02:91:3d:da:0f:22:66:78:64:ae:61:f6:53:
ed:b4:15:17:a4:b4:4b:51:50:cd:06:29:ce:bc:f5:
31:db:c2:2b:1f:dc:18:69:0c:ee:b1:89:a7:47:6b:
3a:b9:85:7f:60:e1:26:4a:d1:18:30:14:e7:85:71:
84:8b:e6:37:15:88:b1:f7:66:24:33:97:e0:2f:39:
b5:c6:98:be:f3:04:b6:25:ff:d4:09:b6:0f:6b:f9:
88:bb:99:7d:e4:b9:b8:4d:cd:df:9e:43:17:51:18:
7f:9f:9d:75:8a:0e:26:86:a1:40:06:14:ca:ca:7f:
f7:8f:e6:1d:0e:c3:4e:c3:41:20:fd:c0:6b:6a:14:
1c:3f:b4:ea:e3:f4:e0:e8:fe:35:6e:96:46:13:92:
73:64:a1:01:9f:e7:01:67:94:61:ff:ad:ec:93:ef:
04:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:90:76:9E:8E:54:D0:4F:91:6E:9D:51:36:0E:73:1A:F3:59:1B:3C
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/ipB2no5U0E-Rbp1RNg5zGvNZGzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.152.0/23
Signature Algorithm: sha256WithRSAEncryption
95:ef:61:1d:6a:98:56:a9:2c:5f:e0:27:4a:97:a7:22:d0:8d:
d1:2c:ce:f7:62:45:70:9a:7d:63:0b:3f:ce:c6:b1:f7:19:69:
2f:49:6e:24:97:67:75:7f:62:2d:9e:eb:56:f3:11:f5:7e:47:
aa:31:04:ae:fa:4b:a5:7e:2a:6f:b6:35:2e:4a:7e:30:00:82:
7a:91:43:c8:f2:a1:1c:ad:4c:2d:22:e4:7c:95:e1:b2:a8:81:
2f:18:76:99:e3:e8:23:48:94:f3:73:64:f4:73:c9:49:f7:b1:
6e:cc:f8:61:6c:e0:54:c9:87:21:d7:61:a4:de:9a:0f:6d:62:
89:4e:b8:26:4b:09:41:1c:2a:51:51:14:ce:33:e1:13:78:a2:
a6:a1:6b:d6:8b:c8:df:e2:23:df:c8:d1:c4:44:c2:42:0d:25:
54:56:6a:9b:e6:9c:72:7b:c7:d0:69:fb:0b:b6:b3:63:81:23:
73:6a:b2:47:a8:50:ce:53:29:f6:13:10:eb:4d:8e:13:cd:d4:
03:2c:fe:82:3c:1c:9e:c6:4c:07:03:89:c2:32:4f:e7:d2:5d:
c4:05:17:7d:59:c2:56:19:86:8c:2c:72:80:5f:01:26:79:e2:
21:c8:22:33:e9:3a:28:5e:a2:da:7a:d2:79:c7:bd:79:f0:22:
35:cc:2b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 5 17:37:23 2023 by rpki-client on console-ams.rpki-client.org