Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/eMcqPRkcUwxHWsnqZdDMslpzjqM.roa
File: eMcqPRkcUwxHWsnqZdDMslpzjqM.roa (raw, json)
Hash identifier: tHrTDCJzQExShYnoQjGmeZZEH18FuqidOqBirqRA5Pg=
Subject key identifier: 78:C7:2A:3D:19:1C:53:0C:47:5A:C9:EA:65:D0:CC:B2:5A:73:8E:A3
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 01862ACAF5153ACD684E41BC83617D15B5E3
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/eMcqPRkcUwxHWsnqZdDMslpzjqM.roa
Signing time: Tue 07 Feb 2023 07:33:09 +0000
ROA not before: Tue 07 Feb 2023 07:33:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211237
IP address blocks: 45.146.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Mar 2023 08:23:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2a:ca:f5:15:3a:cd:68:4e:41:bc:83:61:7d:15:b5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Feb 7 07:33:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78c72a3d191c530c475ac9ea65d0ccb25a738ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:aa:15:14:8e:75:4d:91:85:c9:3d:df:b6:bf:
56:29:e3:7f:85:2a:e5:64:a8:40:1c:cc:58:0f:fb:
1e:6b:a6:dc:a7:f0:88:c3:d2:2c:eb:6e:44:ff:f4:
4e:3a:15:a3:ef:bd:57:7d:70:a5:0e:96:ac:45:6c:
1b:98:e9:3f:c3:a3:73:7e:86:16:fa:da:aa:2a:28:
dc:b9:b8:37:91:b8:af:4a:68:e3:fc:26:5e:d0:17:
36:b1:4f:f0:d8:99:36:a4:1a:e0:6e:b0:36:b8:4e:
73:26:71:56:9c:82:2d:f6:8e:17:ed:54:7e:1b:08:
8c:44:3e:b6:46:94:c8:f0:b0:05:53:42:44:99:40:
dc:82:4c:3c:21:34:18:9b:20:66:3f:b6:67:8c:e6:
8b:b6:0f:0b:1e:63:99:e2:08:c4:03:93:5e:4a:dd:
19:a5:cb:e9:af:d5:ce:41:49:b8:7e:62:54:64:e3:
ec:fd:34:e6:c8:89:2d:15:b7:aa:a4:5f:50:e3:0f:
73:94:89:a8:01:d4:cd:5c:53:b9:46:a9:81:2a:10:
5a:56:f4:da:a1:90:b2:c3:1e:b2:68:d8:72:39:1a:
5b:7a:04:f4:9f:b0:c1:a6:7a:8f:26:63:0e:d5:79:
93:0f:b5:75:d9:76:55:91:e3:13:80:2f:77:17:26:
5e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C7:2A:3D:19:1C:53:0C:47:5A:C9:EA:65:D0:CC:B2:5A:73:8E:A3
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/eMcqPRkcUwxHWsnqZdDMslpzjqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.202.0/24
Signature Algorithm: sha256WithRSAEncryption
23:19:39:8c:9b:d4:4c:64:53:d8:e0:c1:b6:a7:a0:f8:70:fa:
27:61:94:11:7c:de:bd:a4:85:32:ef:84:aa:cc:9d:0b:3c:81:
94:e9:97:ba:78:1e:12:b7:41:c1:e9:47:6a:ab:d6:9a:20:d1:
a9:91:29:3c:60:29:02:30:e5:36:a1:49:8c:24:21:4d:91:bc:
1b:d4:f2:18:56:83:f6:f5:71:37:6e:6a:5a:72:18:67:d8:8f:
9d:03:7d:17:d6:94:9a:f4:ba:ef:09:9b:46:79:08:4f:83:de:
d6:3e:a6:dd:d0:41:9f:d0:fb:94:cb:1c:b0:29:e1:3e:8d:37:
a9:dc:a4:50:2f:6f:e4:67:87:b8:79:d6:9e:e5:ac:8a:a4:c5:
85:ce:b2:c7:b3:61:d0:19:55:34:d8:38:a3:c1:77:da:1b:c5:
c7:e2:ad:f0:04:07:6d:59:34:fa:0e:80:f8:54:03:bd:03:5e:
4a:a7:5f:fe:3a:5b:11:af:31:0a:b6:b8:d7:85:7f:ff:b4:b4:
91:d8:13:53:ff:f6:dc:d5:f0:1d:e3:bc:30:2b:70:06:0c:3c:
6f:25:20:f9:2c:bf:a5:a0:9c:fa:db:5d:cd:b2:72:13:69:56:
77:21:fc:db:6d:10:19:15:83:ae:25:4f:bc:af:79:95:f7:67:
08:33:af:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:49 2024 by rpki-client on console-ams.rpki-client.org