Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/i9bZEmtQPSDfP150sAcZG_Ebqs8.roa
File: i9bZEmtQPSDfP150sAcZG_Ebqs8.roa (raw, json)
Hash identifier: INtOsTgI5jOuY0lg54uVRzSC347lmrG/kMrt83Y/NiE=
Subject key identifier: 8B:D6:D9:12:6B:50:3D:20:DF:3F:5E:74:B0:07:19:1B:F1:1B:AA:CF
Certificate issuer: /CN=ec11b6d0ee6b9eccfe34ec506a275078c39eccb3
Certificate serial: 01863789AA9471707A12AAE6A0782491FA6F
Authority key identifier: EC:11:B6:D0:EE:6B:9E:CC:FE:34:EC:50:6A:27:50:78:C3:9E:CC:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7BG20O5rnsz-NOxQaidQeMOezLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/i9bZEmtQPSDfP150sAcZG_Ebqs8.roa
Signing time: Thu 09 Feb 2023 18:56:54 +0000
ROA not before: Thu 09 Feb 2023 18:56:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200034
IP address blocks: 45.156.63.0/24 maxlen: 24
45.156.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:37:89:aa:94:71:70:7a:12:aa:e6:a0:78:24:91:fa:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec11b6d0ee6b9eccfe34ec506a275078c39eccb3
Validity
Not Before: Feb 9 18:56:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8bd6d9126b503d20df3f5e74b007191bf11baacf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9b:f2:20:4d:d6:b1:2b:d2:ea:c9:ca:27:c9:
66:43:05:8d:ac:36:79:e7:3d:ea:2e:77:61:04:1c:
06:35:34:da:6f:df:a9:15:16:78:bf:dd:04:0b:d4:
01:ca:b3:a8:75:89:03:8d:20:d9:7a:e0:2e:6e:6c:
ec:d9:39:98:46:62:a5:24:b1:19:c2:c1:36:6c:45:
5b:39:14:21:08:73:d9:58:ff:08:ea:cd:6f:39:fc:
8a:ac:05:a6:d6:d0:59:ab:a0:7a:e0:b4:c0:99:2d:
c4:f9:b0:90:a6:5b:c3:e6:2c:fb:49:02:7a:d1:c3:
0c:68:83:c6:4e:7a:08:da:24:4d:2e:53:2a:fe:7d:
3f:82:8f:9a:a0:d5:47:1c:c9:9b:0c:23:73:cb:31:
61:47:24:76:59:c5:9e:c3:b5:6a:45:90:5f:74:aa:
e4:f6:59:24:cb:9e:44:c1:6b:7b:c7:a8:57:8d:5b:
c2:d5:e1:11:1b:28:44:78:69:02:3f:14:b3:c5:93:
ee:38:ca:41:a0:f9:86:11:c2:03:70:24:bb:f9:53:
f7:21:04:f8:5b:1a:a0:59:81:2a:8c:b2:83:ce:33:
33:69:76:cc:a9:d4:aa:f5:d3:58:13:5b:43:83:f0:
42:62:61:eb:a7:b4:3f:08:81:91:f9:40:ca:57:3a:
0b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D6:D9:12:6B:50:3D:20:DF:3F:5E:74:B0:07:19:1B:F1:1B:AA:CF
X509v3 Authority Key Identifier:
keyid:EC:11:B6:D0:EE:6B:9E:CC:FE:34:EC:50:6A:27:50:78:C3:9E:CC:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7BG20O5rnsz-NOxQaidQeMOezLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/i9bZEmtQPSDfP150sAcZG_Ebqs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/7BG20O5rnsz-NOxQaidQeMOezLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.60.0/24
45.156.63.0/24
Signature Algorithm: sha256WithRSAEncryption
31:5d:70:d1:3e:8a:1e:eb:e0:84:58:f7:73:fc:39:a1:5a:35:
b3:81:a4:6d:fd:a9:e4:0b:92:1d:06:5f:64:68:71:1c:bc:a6:
75:ee:16:9c:85:63:75:d5:9a:be:53:e4:2b:8d:12:a7:5a:aa:
61:55:b9:d3:01:c8:a9:24:f9:4a:0d:2a:68:a3:6a:a7:e4:14:
04:be:68:22:bf:54:8b:f7:53:b2:3a:00:58:52:af:a8:eb:6c:
34:03:ef:3e:cc:68:fa:75:ef:89:90:69:2f:d5:cb:f8:ee:13:
d7:d7:43:c7:ab:83:da:a1:72:10:d6:d8:3b:48:5c:5b:3d:07:
60:3f:b0:21:9f:f8:55:19:ee:0a:e4:61:ae:da:64:5a:dd:13:
33:7c:6b:18:a0:bc:ab:c8:8b:e1:cd:d1:c7:75:b5:33:11:e7:
38:61:57:fc:07:34:e0:e1:8d:7a:9e:fd:11:92:65:d3:37:a9:
ee:ec:a7:dc:f5:2c:69:a8:2a:a0:f4:f6:af:b1:b2:41:bd:a5:
76:50:34:c1:5f:f0:0a:d6:9f:ca:6f:6d:fe:85:55:59:61:71:
7b:b6:99:be:67:2a:62:d6:bf:28:b4:7d:e7:8d:f5:2e:8f:11:
2d:aa:13:c2:59:53:ba:80:38:48:ca:fd:aa:06:9a:16:c6:04:
cd:f9:53:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:04 2023 by rpki-client on console-fra.rpki-client.org