Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/4pnxxFCm6WNsMV08KEvu9ADEDP4.roa
File: 4pnxxFCm6WNsMV08KEvu9ADEDP4.roa (raw, json)
Hash identifier: ofP1mbfRpDgPce6PRaDF36p82ZVfS6G/DzKpUYe8w+s=
Subject key identifier: E2:99:F1:C4:50:A6:E9:63:6C:31:5D:3C:28:4B:EE:F4:00:C4:0C:FE
Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial: 01856EC22B8155F6E4185184BE517BF22AAB
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/4pnxxFCm6WNsMV08KEvu9ADEDP4.roa
Signing time: Sun 01 Jan 2023 19:14:56 +0000
ROA not before: Sun 01 Jan 2023 19:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213167
IP address blocks: 45.132.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:2b:81:55:f6:e4:18:51:84:be:51:7b:f2:2a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Validity
Not Before: Jan 1 19:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e299f1c450a6e9636c315d3c284beef400c40cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a5:e1:dc:23:21:b5:1e:4f:b1:43:f5:20:33:
87:1a:89:ea:30:2c:30:e3:d3:53:70:61:64:a9:7f:
04:97:41:f5:7c:90:17:09:50:a3:bf:bb:d3:24:03:
92:da:56:15:bf:a0:08:fe:8b:fe:6b:e7:a1:9f:34:
81:78:e3:11:bd:f2:f6:45:a1:38:fe:8f:2a:34:43:
fc:dd:32:35:a8:f7:34:6b:ad:28:d9:d5:9e:38:3a:
8f:5a:f1:cb:a2:89:a0:4f:18:8d:62:40:4a:99:65:
6c:17:29:95:26:cd:d4:c1:89:44:3a:d7:7a:7f:e1:
5c:86:d3:1b:7b:3b:46:10:ed:a3:15:5a:fc:e8:ce:
ae:f7:71:59:09:3c:b0:2f:6c:1c:c0:b3:3e:f8:4d:
08:34:fd:2e:48:4e:0f:d3:b3:54:6a:31:38:92:c8:
4c:e5:9b:83:18:d2:1a:14:7c:65:13:73:4c:2d:0d:
46:6b:b3:22:0d:7e:1c:11:69:a8:9b:f0:a5:c8:b4:
b9:9e:8d:50:db:40:81:27:ee:9b:b5:b2:70:73:4e:
3c:01:5b:8b:f7:2c:b6:fb:95:e5:ce:02:41:2e:0a:
81:a5:65:3c:d1:7e:1b:1f:1b:c1:82:e4:a5:e7:db:
e8:71:fc:85:14:33:53:e7:f7:5c:1a:c8:57:79:26:
42:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:99:F1:C4:50:A6:E9:63:6C:31:5D:3C:28:4B:EE:F4:00:C4:0C:FE
X509v3 Authority Key Identifier:
keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/4pnxxFCm6WNsMV08KEvu9ADEDP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.114.0/24
Signature Algorithm: sha256WithRSAEncryption
73:a0:52:7a:51:86:49:66:e8:51:33:36:74:ec:8b:16:af:bf:
b2:93:65:02:fa:47:63:fd:30:1d:06:10:7c:95:00:02:5f:e8:
8a:da:7a:17:f4:9c:b0:f8:f7:b1:13:bd:b1:35:40:6e:f3:97:
06:4f:02:b7:ba:54:f0:fe:9b:52:99:ef:3d:98:5a:bd:cc:a6:
60:d7:3b:56:63:f9:4f:04:45:c4:7f:91:c3:d2:39:33:1e:e4:
bd:e6:ed:c7:88:a2:42:8b:69:f1:1d:1e:69:90:b3:d6:fa:40:
f5:05:15:35:46:8e:7f:c4:e6:c5:41:47:e2:90:e5:4e:45:ac:
c9:18:1d:9e:8b:79:00:49:f0:06:7b:45:47:bd:71:8d:51:ae:
9d:05:7e:d6:55:5a:56:6b:c2:81:9b:33:e1:01:42:ea:b8:e6:
92:b9:4e:0f:e3:c5:23:a0:81:71:3d:b8:1f:59:1d:61:cc:39:
73:00:07:16:9d:24:2c:ca:c7:98:92:65:fb:1c:97:df:9f:14:
31:d6:bd:04:f3:14:c9:ae:32:c7:5c:c7:2f:b2:18:6a:d9:2f:
94:fb:b2:c9:ff:37:83:64:3a:c2:cc:1f:7e:2f:a0:34:9c:85:
5c:ed:a6:0b:73:c6:ba:db:3f:16:b3:7b:5e:8c:b7:33:ed:ef:
83:ce:d0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:24 2024 by rpki-client on console-ams.rpki-client.org