Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/jusuhjbODKX7hf3h-VYVQULTn6U.roa
File: jusuhjbODKX7hf3h-VYVQULTn6U.roa (raw, json)
Hash identifier: 1L16joXKIpRXDUsXu8n+Q0OgBkBKIRJ4xJJ1i/Nsh6w=
Subject key identifier: 8E:EB:2E:86:36:CE:0C:A5:FB:85:FD:E1:F9:56:15:41:42:D3:9F:A5
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 018ACE137A7904809B12F74BBDC682DBD9DF
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/jusuhjbODKX7hf3h-VYVQULTn6U.roa
Signing time: Mon 25 Sep 2023 20:41:37 +0000
ROA not before: Mon 25 Sep 2023 20:41:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 45.145.153.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ce:13:7a:79:04:80:9b:12:f7:4b:bd:c6:82:db:d9:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Sep 25 20:41:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8eeb2e8636ce0ca5fb85fde1f956154142d39fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:17:88:6a:97:d0:ba:9e:a3:ca:8f:ca:3c:70:
05:dd:c0:61:d8:7d:03:52:3c:61:b5:68:38:90:a6:
08:01:8f:1b:8c:23:fc:77:20:fc:4e:89:7f:ef:3b:
67:75:26:29:00:c5:95:0e:2c:44:5a:b2:4b:02:3c:
0d:21:cc:86:d3:d0:90:8a:b2:13:18:75:03:81:2d:
ee:75:26:f3:63:06:e4:3a:8f:37:87:72:99:9c:fa:
30:8a:d0:f7:47:64:17:02:96:96:31:00:cf:b4:8a:
cc:0d:16:19:dd:10:35:b5:4c:ed:60:1c:36:a3:87:
7f:bb:0b:e4:a3:8e:8c:85:92:0d:6c:52:94:b5:e6:
77:e0:c5:69:5f:ab:80:3f:bd:5a:7f:f3:ef:ac:a5:
42:a5:be:c2:8f:2b:1a:92:9d:d0:a5:59:8e:57:20:
6e:c8:d2:54:3b:a3:9c:a1:85:4a:ed:32:55:c6:da:
24:88:e8:70:2c:d1:9e:05:e9:ea:59:68:a8:7f:a2:
72:65:3e:db:dc:70:be:03:64:66:d9:a6:7a:5c:c2:
ef:a8:70:f6:31:7d:32:1f:b6:ee:32:f6:3e:21:49:
9b:e4:6d:44:7e:98:66:5a:7f:8c:1a:ea:bc:0c:7c:
3f:e7:11:e4:18:f4:12:6d:c7:a2:2d:50:d5:c1:d7:
b3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EB:2E:86:36:CE:0C:A5:FB:85:FD:E1:F9:56:15:41:42:D3:9F:A5
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/jusuhjbODKX7hf3h-VYVQULTn6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.153.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:d5:24:92:17:67:71:a4:ae:35:3b:c5:4c:97:bb:5b:bc:eb:
72:fc:03:59:5b:c6:ce:76:4f:c4:cf:5d:8f:7e:b1:85:01:be:
51:5d:2d:ee:85:58:56:75:32:fb:fd:f7:18:24:80:dd:08:e2:
64:10:48:48:36:d9:f1:91:2d:2f:28:dc:e2:cf:3a:ba:86:24:
0b:61:85:37:2e:01:9a:ca:01:fd:dc:0a:fa:a6:a8:28:96:34:
2d:96:b2:b4:2d:d7:08:8c:06:1b:8a:39:00:02:e5:ca:42:9f:
4c:94:be:71:d5:ef:5c:63:eb:95:59:91:98:0f:e2:3c:13:fe:
51:a7:1f:94:af:26:c4:99:ca:26:33:34:8f:b8:76:28:27:e4:
2f:52:6e:e9:98:47:f9:8f:cb:fa:71:36:e0:15:95:b3:1f:21:
5a:05:e0:c3:c4:d4:6d:de:80:91:8c:dd:8b:1d:14:8e:9b:31:
b6:80:1a:c9:7c:66:63:d0:2a:94:3c:45:b5:ac:71:6e:4e:98:
98:b8:43:09:53:a7:b4:82:9d:95:8f:04:a1:9d:a0:fe:91:c7:
84:a1:ca:d3:fc:7a:7c:d8:66:84:15:e3:9b:06:e4:97:b8:28:
58:43:6f:7f:89:72:e8:db:78:4c:fe:d3:67:28:8f:55:0a:c1:
80:9a:39:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 4 21:36:19 2023 by rpki-client on console-fra.rpki-client.org