Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/I-B3z652RoZgvhqRrF1FdD_KW_w.roa
File: I-B3z652RoZgvhqRrF1FdD_KW_w.roa (raw, json)
Hash identifier: CxXksxMqyL7tlO+TSHkMvU+pG19UQGW3YpEvR5Qr5Q8=
Subject key identifier: 23:E0:77:CF:AE:76:46:86:60:BE:1A:91:AC:5D:45:74:3F:CA:5B:FC
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 018BBBBFE45C0970FACA60D14CB8F0658FA4
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/I-B3z652RoZgvhqRrF1FdD_KW_w.roa
Signing time: Sat 11 Nov 2023 00:19:57 +0000
ROA not before: Sat 11 Nov 2023 00:19:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.81.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Nov 2023 08:46:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:bb:bf:e4:5c:09:70:fa:ca:60:d1:4c:b8:f0:65:8f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: Nov 11 00:19:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23e077cfae76468660be1a91ac5d45743fca5bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c1:20:71:d2:ce:66:14:cb:12:7b:8a:2b:dc:
84:7f:c6:7a:af:17:0c:94:a3:68:e0:7b:69:cd:d9:
35:65:12:80:af:90:a7:02:27:fb:4a:fb:ab:7c:e1:
19:55:22:03:dc:fd:ee:97:1b:5c:76:e0:9f:e5:c6:
f0:55:97:fb:41:3b:71:59:ee:de:59:c7:58:6d:a8:
32:b5:a0:46:4b:cd:60:ac:e1:87:69:b2:1e:56:9c:
aa:ac:5f:ed:b8:6a:65:3e:83:f0:b9:e9:cb:c6:a3:
a5:cf:06:0b:aa:66:82:d8:21:70:a4:0e:3f:d4:99:
73:d6:3a:ae:db:ba:c2:32:37:49:81:42:04:90:3c:
17:55:89:ef:ce:c2:57:d9:cb:b6:ec:ef:3a:4f:05:
93:0a:70:19:1e:5e:4e:a1:1e:9c:30:af:8d:cf:75:
08:74:41:60:4a:38:42:30:78:15:f8:ec:1a:1b:fb:
fc:44:cf:60:04:46:dd:4a:79:2a:0d:66:a5:94:f6:
28:3c:84:ff:f4:3e:27:8f:68:bb:e7:d0:15:dc:3c:
06:d5:b6:b4:23:cc:1e:84:07:47:54:33:8e:c8:dc:
03:fd:fb:83:c7:00:3a:fd:c1:58:e9:42:ac:41:3c:
6d:56:fb:86:c7:c9:5a:c1:2f:2d:f3:e3:51:18:1a:
b9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E0:77:CF:AE:76:46:86:60:BE:1A:91:AC:5D:45:74:3F:CA:5B:FC
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/I-B3z652RoZgvhqRrF1FdD_KW_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.149.0/24
Signature Algorithm: sha256WithRSAEncryption
39:d3:56:01:32:4f:37:48:b3:b4:95:56:1c:23:ea:39:05:d2:
ee:3d:4e:cc:e7:5e:dc:e7:48:1b:3e:e6:df:a5:4b:ff:56:ee:
5a:78:24:99:58:e3:2e:61:99:c6:92:17:b6:5e:47:d8:9c:10:
21:cc:cf:a8:8e:5c:9c:38:a3:17:8b:ec:1c:95:50:fc:37:89:
bb:ed:f1:94:3c:6c:92:81:ff:35:87:d6:a4:0d:01:cb:d7:9a:
69:3c:a3:05:54:f3:37:16:68:97:51:43:ef:44:1e:56:c8:8d:
60:12:70:af:b3:b8:fc:b8:fc:b3:e6:ba:8a:9e:39:f3:75:7d:
f8:fb:36:1e:43:5c:b5:64:4b:75:93:22:b2:b2:3e:e9:0c:e1:
2b:c7:d0:92:ca:dd:13:70:3f:ed:ae:7e:89:b3:b4:71:d4:fc:
ee:2e:39:78:84:ff:96:74:0c:41:d7:3b:75:80:e3:84:72:8c:
e4:1a:5b:a3:e1:2a:bc:f4:7d:33:60:1d:94:77:81:e7:a4:db:
8b:e7:f0:ff:22:b5:74:bb:23:3e:0a:0f:28:0e:7a:d5:85:e1:
23:c2:5b:c1:76:0e:4a:1e:72:90:b0:89:7d:ac:b1:d3:79:57:
7d:4f:33:07:d5:2f:f9:63:f5:33:cd:85:1c:e2:26:72:34:d6:
8c:41:c1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-fra.rpki-client.org