Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/tDbO5IUPl3x5Pi3ZT2SJ6-q79CQ.roa
File: tDbO5IUPl3x5Pi3ZT2SJ6-q79CQ.roa (raw, json)
Hash identifier: mR2GeQeCnVuKTHQ0X558Hmt3BU5/p3WFOFYGJ+uTf2k=
Subject key identifier: B4:36:CE:E4:85:0F:97:7C:79:3E:2D:D9:4F:64:89:EB:EA:BB:F4:24
Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial: 0185822D42FEB72EED7EBCF236C56432692A
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/tDbO5IUPl3x5Pi3ZT2SJ6-q79CQ.roa
Signing time: Thu 05 Jan 2023 13:44:42 +0000
ROA not before: Thu 05 Jan 2023 13:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20712
IP address blocks: 45.141.51.0/24 maxlen: 24
45.141.49.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:82:2d:42:fe:b7:2e:ed:7e:bc:f2:36:c5:64:32:69:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Validity
Not Before: Jan 5 13:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b436cee4850f977c793e2dd94f6489ebeabbf424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2f:7d:aa:cc:3e:12:4f:8c:94:6f:73:be:88:
ad:2f:15:87:1c:d3:85:84:8d:55:db:ad:bb:a7:a6:
03:6f:8f:72:3b:4b:c8:e3:86:23:b8:08:fa:94:db:
83:55:c2:86:d3:f8:86:37:d2:9c:61:e9:56:1c:e1:
0c:ce:8c:30:48:dd:a6:e9:66:23:86:8f:f4:1d:87:
e6:76:96:49:96:37:be:2b:b1:6a:c9:c5:d1:3f:c0:
06:12:a5:d2:85:2f:b7:7d:74:f7:94:f0:07:87:03:
35:7f:b3:e5:13:31:14:55:8b:e1:b5:e7:a0:41:37:
2d:3b:06:52:30:98:2a:30:51:24:2f:66:e0:19:e7:
7e:16:65:b5:e5:26:cf:4a:27:3b:93:ab:f3:78:7b:
9e:46:84:92:f1:45:a4:2c:99:83:a4:67:08:29:ec:
d7:eb:16:d0:57:06:9e:94:e8:b8:38:42:45:31:44:
04:ff:14:d1:47:0b:f8:6a:0f:a9:d4:d3:e1:e3:a9:
32:a9:82:5f:c1:54:5c:85:d8:1a:cb:da:bd:6f:cb:
b7:a6:c7:e4:ce:93:4c:bc:6f:e6:a6:ea:d0:d0:be:
4b:86:56:61:9e:ff:9c:ed:2f:b2:f8:8d:6b:f1:3a:
0e:db:41:1e:44:09:5c:cf:40:1f:c3:dc:ce:58:83:
5a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:36:CE:E4:85:0F:97:7C:79:3E:2D:D9:4F:64:89:EB:EA:BB:F4:24
X509v3 Authority Key Identifier:
keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/tDbO5IUPl3x5Pi3ZT2SJ6-q79CQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.49.0/24
45.141.51.0/24
Signature Algorithm: sha256WithRSAEncryption
99:1b:ca:84:87:52:5e:4c:59:b8:47:91:14:37:ae:b7:ff:f4:
81:06:bb:1b:af:e6:cb:60:07:9a:01:47:4c:46:77:31:83:f2:
5a:0f:c0:e8:cd:73:01:60:47:eb:dc:84:40:66:fd:48:a0:a5:
e0:4b:db:d6:3b:6b:87:d2:4f:59:74:12:2c:ba:ce:42:dc:bf:
03:82:c8:24:47:3c:ac:b5:dd:a7:70:50:b7:30:0e:d7:b1:82:
6e:3c:73:ea:72:94:3f:67:32:10:6a:16:1d:ad:7e:45:3f:48:
64:0c:e3:90:fc:bc:47:a0:11:8c:a8:31:60:18:9f:6a:7c:78:
58:8e:e3:c2:0f:e0:34:af:57:c4:af:12:6a:83:fc:9d:ea:73:
b7:5e:bf:40:ab:5f:9a:f2:bf:10:f6:a7:b1:98:37:20:99:34:
d2:ef:e0:02:ed:18:66:f6:ac:14:4e:c9:b4:6c:38:57:a1:da:
0a:11:42:14:e0:56:66:be:91:59:1c:98:47:85:7b:ae:89:19:
8f:9c:02:99:86:26:36:8c:39:31:01:4d:7e:a9:13:da:62:a3:
20:86:7e:2b:17:93:2d:f7:de:96:b7:66:13:0e:d6:75:32:15:
34:aa:91:32:a0:55:c9:87:02:10:c8:97:b5:4f:af:96:56:32:
c2:1c:1b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:40 2024 by rpki-client on console-fra.rpki-client.org