Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/jZLekCqleLbgLuuLBoKpLeazg8Q.roa
File: jZLekCqleLbgLuuLBoKpLeazg8Q.roa (raw, json)
Hash identifier: Cwf9gdS60Gz8E7JS8JDZ1vf3jFzyHxWw2NK98arON50=
Subject key identifier: 8D:92:DE:90:2A:A5:78:B6:E0:2E:EB:8B:06:82:A9:2D:E6:B3:83:C4
Certificate issuer: /CN=ac91f230a0e2eeda3810522e74a698200713e620
Certificate serial: 0185711E7434D3F1618DA47347F74900787D
Authority key identifier: AC:91:F2:30:A0:E2:EE:DA:38:10:52:2E:74:A6:98:20:07:13:E6:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJHyMKDi7to4EFIudKaYIAcT5iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/jZLekCqleLbgLuuLBoKpLeazg8Q.roa
Signing time: Mon 02 Jan 2023 06:14:59 +0000
ROA not before: Mon 02 Jan 2023 06:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208403
IP address blocks: 45.131.23.0/24 maxlen: 24
45.131.20.0/24 maxlen: 24
45.131.21.0/24 maxlen: 24
45.131.22.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:74:34:d3:f1:61:8d:a4:73:47:f7:49:00:78:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac91f230a0e2eeda3810522e74a698200713e620
Validity
Not Before: Jan 2 06:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d92de902aa578b6e02eeb8b0682a92de6b383c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b4:0e:7f:73:d4:8a:f7:a6:70:14:8d:0d:77:
4e:15:3e:ca:d0:cc:e9:b4:7b:5d:d4:dc:9c:3a:88:
4d:9c:d1:e4:54:d3:0a:c3:9f:0f:26:e8:c9:3d:62:
ca:31:2c:19:d0:da:9c:29:b8:43:d8:6e:2c:95:a6:
bb:d0:0b:5b:c9:1f:79:52:a7:f5:a4:60:99:26:71:
48:f5:df:83:d1:97:a1:bd:7e:cb:7b:78:2a:7d:2b:
30:5d:a3:d6:7c:70:e7:c9:96:12:43:bf:f4:db:5d:
91:eb:5f:fa:7e:44:f4:e5:b3:ad:a4:92:8b:c3:f7:
37:33:59:67:57:78:e8:f0:90:d0:3d:0a:0a:84:a4:
3b:66:9f:50:35:39:3f:30:70:58:b0:cf:48:ef:c6:
5f:64:e5:64:ef:83:3a:c9:02:93:1e:79:05:4b:8f:
c4:31:40:5e:70:b3:c5:44:94:24:3e:96:af:3d:73:
7b:c8:3b:56:58:e9:5a:00:9e:6c:d2:53:74:53:e2:
d1:b1:42:5a:d6:b2:17:fa:a9:b9:df:2c:28:79:ef:
ca:d8:1d:80:cb:75:45:95:40:fc:83:89:90:cf:a1:
fb:1a:ff:4e:71:3e:93:7f:52:53:65:ed:ea:f4:26:
76:22:6f:43:e9:cf:c0:4a:78:65:d7:2e:b2:f5:d0:
00:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:92:DE:90:2A:A5:78:B6:E0:2E:EB:8B:06:82:A9:2D:E6:B3:83:C4
X509v3 Authority Key Identifier:
keyid:AC:91:F2:30:A0:E2:EE:DA:38:10:52:2E:74:A6:98:20:07:13:E6:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJHyMKDi7to4EFIudKaYIAcT5iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/jZLekCqleLbgLuuLBoKpLeazg8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.20.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:fa:10:35:bf:18:96:14:3c:f3:76:42:9f:90:33:ca:07:79:
a6:7e:3c:68:07:4e:53:91:4d:ce:e5:a6:f9:f8:31:af:bb:95:
0f:0b:51:28:4c:43:d0:21:45:64:41:fc:cb:bd:a7:7b:f1:ac:
03:d1:0e:80:19:c1:80:67:16:58:9f:db:a9:90:54:7e:a9:c6:
43:47:4a:54:a7:70:b9:3f:9a:bc:bd:9d:cf:92:02:e9:db:e2:
66:09:4f:dc:ee:23:06:fb:4d:05:6e:7d:8a:cf:f9:2b:17:bd:
9b:6f:10:bd:14:b0:8c:96:43:1b:bb:bb:4c:c3:d4:af:1a:b0:
93:e3:e7:63:da:38:9b:d2:0b:ff:54:cf:d0:bd:3e:f0:2f:c8:
31:4e:77:75:8f:15:7c:c6:9e:98:b3:f0:db:18:9f:58:0f:e2:
9e:77:59:53:3f:60:75:13:f7:2c:57:c2:89:66:2f:10:09:4c:
c3:b9:94:76:85:01:2f:47:ef:b3:19:bf:95:bd:53:5a:b8:5d:
fe:53:bb:6f:1e:11:4f:e7:4d:bc:02:51:36:35:77:14:73:bb:
17:54:55:89:8d:9a:f4:66:2e:80:1a:c1:f3:13:07:a3:3b:f6:
2e:c1:a9:4d:d4:3c:02:02:6a:f7:64:d0:f9:4f:76:b8:2e:d4:
87:da:be:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:19:57 2024 by rpki-client on console-fra.rpki-client.org