Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/le5IhxJmsUxaJ-A7eiosTCF1TSw.roa
File: le5IhxJmsUxaJ-A7eiosTCF1TSw.roa (raw, json)
Hash identifier: nDA9DQck6lZYuO60z+z8TiiFgNuvAj4ZDhpKVhqz/9I=
Subject key identifier: 95:EE:48:87:12:66:B1:4C:5A:27:E0:3B:7A:2A:2C:4C:21:75:4D:2C
Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial: 01856EC22790FA6911D54FFAE0EEF0D0F7A9
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/le5IhxJmsUxaJ-A7eiosTCF1TSw.roa
Signing time: Sun 01 Jan 2023 19:14:55 +0000
ROA not before: Sun 01 Jan 2023 19:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31122
IP address blocks: 45.141.49.0/24 maxlen: 24
45.141.51.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:27:90:fa:69:11:d5:4f:fa:e0:ee:f0:d0:f7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Validity
Not Before: Jan 1 19:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95ee48871266b14c5a27e03b7a2a2c4c21754d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2f:9e:9a:d2:2b:9f:cc:f5:8d:a8:b4:44:06:
4f:fc:ce:e5:8b:7f:a8:c2:fc:a7:24:0f:5a:6e:64:
5f:d3:cc:6d:38:bb:d1:d6:b1:4b:3c:5e:f7:38:7a:
44:2c:36:34:37:bc:41:1e:d8:8c:e8:a5:49:ee:d4:
9f:26:0d:a7:32:41:54:a7:bb:21:f0:f2:06:ad:08:
2b:a1:cc:ed:5e:88:8c:5a:11:e9:58:a7:dc:d1:80:
99:da:64:d2:14:40:02:60:0c:56:8b:70:89:98:7b:
bf:c3:59:db:cd:69:a3:85:dd:8e:5f:46:6e:a3:22:
43:e7:e3:a6:2c:39:3b:be:e7:f6:c3:e7:d7:ae:b3:
01:33:cc:6f:8e:0c:93:a5:d0:f2:2f:03:b0:86:9d:
17:ee:5b:d1:6f:8f:e3:b1:98:7a:99:ac:88:d3:7e:
07:af:fe:9e:8a:b8:da:9a:5f:58:47:b3:4b:30:ce:
ba:77:55:a7:06:00:92:ab:22:27:9e:16:77:f7:79:
e2:2e:68:67:42:d7:26:ae:5e:17:34:d0:a3:b6:4d:
f4:3c:7a:e5:51:22:b3:14:c5:82:08:ff:f4:0d:92:
95:a6:0c:76:87:c2:c1:b3:1f:2b:9e:45:9f:76:28:
26:56:cd:8f:62:4c:e1:49:7b:df:61:33:b7:15:e0:
86:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:EE:48:87:12:66:B1:4C:5A:27:E0:3B:7A:2A:2C:4C:21:75:4D:2C
X509v3 Authority Key Identifier:
keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/le5IhxJmsUxaJ-A7eiosTCF1TSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.49.0/24
45.141.51.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:79:16:91:6e:06:5e:e4:bb:e7:f5:5e:e7:89:b9:a2:00:83:
f5:0c:92:6e:15:a6:4c:bd:a1:99:30:2c:b8:a9:b2:03:16:95:
25:7b:1d:38:44:18:fd:34:27:24:95:52:35:d2:3a:a4:22:8a:
ee:b6:b2:41:8f:2f:7e:39:28:85:a1:79:0f:78:6e:24:8b:5b:
a3:e5:1e:db:01:ad:8b:8a:2f:2d:fc:24:30:a8:50:87:45:eb:
31:bb:68:29:a9:d1:f9:22:9e:65:94:9e:f1:7e:f1:1d:ad:84:
7b:90:74:77:50:11:e1:11:a5:12:4a:ca:4c:ae:41:ce:50:79:
33:14:1c:93:cd:d0:aa:37:e6:87:3c:72:22:71:dd:df:94:57:
dc:23:36:c7:1d:f3:26:16:5f:78:7c:e4:54:f5:d2:4b:95:50:
dc:e0:ab:37:44:41:db:d7:eb:d8:e5:ec:a7:fd:2b:c2:ef:5a:
71:f9:50:ef:b7:3d:75:80:35:b0:d7:f2:5c:d6:0b:ea:dd:bb:
e1:0b:2b:d8:82:5b:31:60:9e:58:4c:0d:15:1a:e0:22:23:bb:
b8:fc:94:17:26:d7:9f:f2:7e:b5:89:30:18:02:8e:8d:f0:7c:
81:6e:12:3f:9d:6f:69:09:0a:32:2e:4c:49:d1:be:af:e5:ce:
43:0f:28:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:01 2023 by rpki-client on console-ams.rpki-client.org