Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/x31ozp34IeOdjVE_7ihbzFdXlEs.roa
File: x31ozp34IeOdjVE_7ihbzFdXlEs.roa (raw, json)
Hash identifier: Ft4CXl3DKcjp579wj4Tu3ScJClUFMMAhi23U6n9RFl0=
Subject key identifier: C7:7D:68:CE:9D:F8:21:E3:9D:8D:51:3F:EE:28:5B:CC:57:57:94:4B
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 01887BFD8446D19AE7CE02D758969F903A4A
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/x31ozp34IeOdjVE_7ihbzFdXlEs.roa
Signing time: Fri 02 Jun 2023 12:03:12 +0000
ROA not before: Fri 02 Jun 2023 12:03:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 45.145.152.0/23 maxlen: 23
45.145.154.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7b:fd:84:46:d1:9a:e7:ce:02:d7:58:96:9f:90:3a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Jun 2 12:03:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c77d68ce9df821e39d8d513fee285bcc5757944b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ab:b1:6e:b4:a9:61:bb:be:c9:12:34:b4:7f:
2c:d1:d7:c3:0c:79:ba:4d:c3:11:21:92:80:4c:b9:
ac:67:bf:14:45:01:1b:88:23:01:da:9b:67:90:c2:
b3:a1:e7:b4:29:86:65:bc:84:32:7a:69:45:1b:f3:
dc:4e:0f:34:19:4d:59:cb:a1:bd:0a:2c:9c:c6:25:
af:f7:a6:dc:07:c4:64:be:bd:b7:2d:4e:4e:0e:6d:
28:ba:2c:eb:83:5a:ef:0a:2e:b0:47:ed:2b:0d:d2:
49:33:ca:9b:a3:b2:62:f7:60:2e:ba:b7:be:34:48:
b3:c8:b7:9e:0f:22:29:4d:f9:00:95:72:e9:3b:ee:
99:83:ad:6d:29:70:30:ee:e6:83:9b:64:3e:15:1d:
4e:16:1e:34:f1:fb:0f:f8:5f:4c:80:ff:a9:39:be:
89:53:be:8f:59:56:a5:af:a1:ae:c4:9b:41:04:20:
86:95:ae:83:93:00:81:45:97:1d:ad:e1:ca:6f:52:
65:11:87:0d:4c:4a:64:02:83:ba:55:8d:13:8d:31:
41:51:c2:9c:1e:85:97:c7:d2:8f:e7:91:6e:48:e4:
3f:c0:68:50:72:b8:7d:e6:e2:62:a0:e1:33:20:a8:
d5:9c:0a:b9:8a:f4:b0:6f:25:e9:86:04:1f:86:37:
d0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:7D:68:CE:9D:F8:21:E3:9D:8D:51:3F:EE:28:5B:CC:57:57:94:4B
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/x31ozp34IeOdjVE_7ihbzFdXlEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.152.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:6a:9a:56:c1:60:ea:29:ea:ec:33:5d:85:56:b9:cb:77:e1:
70:62:58:70:9a:43:37:20:e0:d5:d1:41:bc:3e:2e:e3:1c:4a:
e7:ee:3c:20:8d:1c:cb:81:56:d1:70:a3:e7:c3:3b:b0:8a:d3:
6d:37:5f:f3:09:60:55:5e:ac:95:72:10:1c:1e:cb:68:3c:00:
32:0d:e7:07:eb:1e:92:9c:d7:8d:10:e3:4c:00:d9:11:c1:30:
54:1b:82:a0:4c:f7:1a:0d:f4:63:03:9b:83:01:be:da:d9:c1:
eb:7c:d0:28:c2:6f:5c:ad:34:c1:ae:e3:90:94:dd:97:ea:37:
e9:4b:5f:ae:f0:03:0e:16:44:a8:74:c6:25:eb:b2:10:f2:00:
2c:ca:99:74:c4:9c:22:54:97:d2:94:4d:6b:6c:b5:a4:c1:b1:
4f:e8:e9:d3:69:4d:ad:b2:5c:f6:e4:82:5b:dd:02:a2:59:fc:
de:9d:d5:70:f4:40:f5:4a:0d:d9:98:a9:56:31:80:64:ed:fe:
f2:76:8f:e0:3e:46:5c:c4:e1:d6:a1:bc:45:66:6e:d9:40:54:
c8:53:57:31:a3:39:ee:c4:ec:58:bd:9a:7a:92:55:e0:46:c1:
5e:39:ab:11:3e:dc:3d:69:02:1b:6d:2c:7a:ce:7e:ec:3b:79:
c9:9e:e8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:53 2023 by rpki-client on console-ams.rpki-client.org