Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/74EDSYMDaNTF-AkgkRMWv7os2xY.roa
File: 74EDSYMDaNTF-AkgkRMWv7os2xY.roa (raw, json)
Hash identifier: Oekuh1cAFSzPeSVHNrKk1Z6TxlXXJ0FOjDXYG3gPHj0=
Subject key identifier: EF:81:03:49:83:03:68:D4:C5:F8:09:20:91:13:16:BF:BA:2C:DB:16
Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial: 0185F2FA54006914EB01C913F603FEB14C2C
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/74EDSYMDaNTF-AkgkRMWv7os2xY.roa
Signing time: Fri 27 Jan 2023 11:26:09 +0000
ROA not before: Fri 27 Jan 2023 11:26:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5511
IP address blocks: 45.141.50.0/24 maxlen: 24
45.141.48.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f2:fa:54:00:69:14:eb:01:c9:13:f6:03:fe:b1:4c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Validity
Not Before: Jan 27 11:26:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef810349830368d4c5f80920911316bfba2cdb16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a3:0b:50:43:50:0d:d1:82:92:1a:9b:b3:1d:
02:65:f7:7e:62:4f:6a:72:9f:be:4b:57:60:4a:4d:
51:25:84:a5:16:b4:98:be:45:0d:1f:5d:b6:70:e3:
72:dc:e5:ec:05:4f:d0:c7:40:21:2f:cf:e1:e6:8c:
cd:07:5c:be:67:03:4d:c5:28:e0:bf:36:42:5a:fe:
a4:b9:af:dc:14:b2:0d:ba:c1:51:4e:f7:95:80:3e:
44:c6:5e:5f:57:6d:a9:aa:ad:40:57:2c:3b:ef:eb:
19:d0:07:c4:20:f2:7f:9e:e1:f0:e1:4c:e5:75:54:
d6:3a:13:53:f9:3c:14:5b:5c:43:31:f1:12:ec:96:
88:dc:60:a3:db:da:be:60:87:89:c7:c6:53:52:24:
4d:c4:75:02:6a:6b:28:8b:5f:7d:a3:02:1c:d7:b1:
72:37:e5:3d:f6:bc:63:49:a7:83:f1:06:dd:74:33:
68:0f:91:e6:7c:14:e9:1a:a6:0a:59:51:df:26:5b:
7e:55:7b:a4:45:04:be:02:27:e7:1c:0f:8a:e0:2e:
a4:f9:91:bc:ec:31:4f:5a:a6:69:8b:cc:4f:4f:7d:
45:f3:73:b7:a4:6b:20:75:9c:46:c1:9b:30:1a:5a:
48:aa:54:c3:10:1e:e0:c0:80:3c:34:58:7d:84:1e:
89:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:81:03:49:83:03:68:D4:C5:F8:09:20:91:13:16:BF:BA:2C:DB:16
X509v3 Authority Key Identifier:
keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/74EDSYMDaNTF-AkgkRMWv7os2xY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.48.0/24
45.141.50.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:fd:f3:8f:07:9b:27:e9:35:1b:53:74:46:66:20:35:cd:77:
61:e8:b7:6b:b4:56:25:1e:3e:d3:0c:96:61:5d:58:e8:36:21:
4e:e0:07:1c:52:12:92:dc:4b:ab:87:3e:aa:77:ce:b1:fe:b6:
bb:11:9f:f7:68:5c:d9:78:72:95:e7:6f:3c:76:68:d4:b9:0c:
b8:7a:2f:98:57:7e:37:cc:0e:25:1b:a3:91:fa:ea:e0:25:dc:
37:bf:95:1d:a4:d5:02:8f:a6:28:63:ce:02:55:42:93:61:20:
c7:8c:32:09:f2:7b:d8:ae:5a:6d:c5:95:e5:05:f8:35:ae:31:
a1:83:1e:62:46:cf:07:ef:7a:6f:f4:5c:09:13:38:35:1c:74:
6d:fb:27:75:72:5d:42:87:8e:ab:9e:f6:28:b0:de:9c:2e:81:
c4:67:b6:11:72:2b:b8:e6:17:49:20:e5:a4:e9:08:b8:22:b3:
8d:a3:35:69:3c:2f:e0:c8:dd:70:4a:96:c1:7a:08:b0:0b:dc:
c2:ff:3f:9a:10:cc:97:bd:6a:81:67:d7:92:a8:4a:93:fa:59:
ee:d2:b8:7c:5c:e6:d9:40:8f:44:ae:33:97:83:62:af:d9:e8:
ac:58:6d:b3:cf:d2:b9:fa:ed:5e:f1:d0:55:90:cf:ca:4d:43:
c2:5e:79:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:40 2024 by rpki-client on console-fra.rpki-client.org