Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/r0ImDQ6bff23wh4WeEzwkigpWms.roa
File: r0ImDQ6bff23wh4WeEzwkigpWms.roa (raw, json)
Hash identifier: Copm5I809avAZ3jaLZ+6mhyC+8ieIRyvwgaoRCxO5CY=
Subject key identifier: AF:42:26:0D:0E:9B:7D:FD:B7:C2:1E:16:78:4C:F0:92:28:29:5A:6B
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 01870D6E52EB56260F36EB5BA3042EE1352E
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/r0ImDQ6bff23wh4WeEzwkigpWms.roa
Signing time: Thu 23 Mar 2023 07:45:46 +0000
ROA not before: Thu 23 Mar 2023 07:45:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 45.146.202.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0d:6e:52:eb:56:26:0f:36:eb:5b:a3:04:2e:e1:35:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Mar 23 07:45:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af42260d0e9b7dfdb7c21e16784cf09228295a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:45:ca:a2:9d:e3:f9:ee:c1:db:14:2c:83:ae:
ca:7d:9f:51:0c:c9:c3:ab:fd:bd:81:c5:e0:58:33:
7b:4e:8b:52:90:55:d9:1b:6d:17:5a:d2:da:77:9e:
a9:04:38:b1:fe:32:09:fc:d4:0f:9d:8a:8f:12:20:
1e:c7:ef:f7:aa:6f:65:4e:22:22:5c:63:d4:af:b1:
d3:48:7f:d4:26:e7:94:bf:61:dc:32:0e:9b:e6:c0:
9d:7e:d1:48:fa:88:56:e0:eb:6b:7f:2f:0f:99:b1:
50:31:29:fc:a1:2c:08:67:e7:5a:84:85:cc:47:72:
af:c6:d0:35:69:aa:23:ce:97:95:cf:ca:f6:62:a9:
49:2f:f8:95:fe:55:eb:20:6b:6a:ac:08:ef:6d:b0:
40:64:1e:8d:01:b4:a9:3a:59:73:ee:10:ed:4b:21:
77:cf:d2:9b:5c:79:49:59:d1:b4:13:90:a9:c0:1c:
14:b4:2e:47:36:85:83:94:6c:d1:8b:8c:d0:ad:a7:
fa:eb:b5:84:db:ef:ae:94:82:74:33:06:d2:bf:d6:
4c:9f:85:e3:6d:e8:3b:59:97:19:8f:2d:dd:69:b9:
80:fc:ef:61:ce:b4:db:3a:cf:d1:5f:db:0a:57:91:
bc:d8:d6:6d:3c:97:6f:03:dc:29:53:b0:3f:27:79:
f9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:42:26:0D:0E:9B:7D:FD:B7:C2:1E:16:78:4C:F0:92:28:29:5A:6B
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/r0ImDQ6bff23wh4WeEzwkigpWms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.202.0/23
Signature Algorithm: sha256WithRSAEncryption
08:9d:8e:18:05:cf:68:ac:ac:10:f1:f3:0d:cb:51:8e:8e:13:
aa:a2:6c:a2:ef:d2:cc:98:52:05:5e:bc:48:47:aa:fb:79:39:
1c:74:ce:e7:b6:a0:11:9b:f9:fb:59:e0:a9:b6:eb:e9:8f:80:
0d:7a:83:c9:f6:56:68:b6:e1:2d:61:a6:6d:cb:03:67:ad:c9:
8e:dc:69:2c:cd:2d:72:3a:6f:22:b8:2d:77:67:11:f1:06:c1:
e1:33:40:c3:0f:e1:5f:2b:30:a7:0a:9f:e9:5d:88:3a:56:51:
a7:21:19:29:26:17:f1:e8:e5:3a:de:6e:f6:68:5f:6b:1e:af:
e8:44:fa:2e:3c:c4:11:d6:ee:2f:6d:0c:95:fb:6d:c3:37:0d:
f8:09:6d:c9:cc:2e:e2:0f:d8:92:e6:f9:53:04:e2:22:a7:8d:
30:15:d3:da:d7:bc:12:fe:37:74:c9:ce:ab:89:5e:31:8f:5e:
e4:6b:95:69:76:fc:53:78:45:d7:be:20:2d:88:3a:dc:0d:50:
52:4d:b5:d3:e0:44:1b:49:8a:4d:50:e9:e6:1e:87:45:06:b1:
60:60:91:fd:8d:94:87:12:39:52:9d:81:96:9f:3a:3a:c2:b8:
39:b7:bf:ba:63:c1:7a:96:3c:17:ef:a0:8a:28:d6:27:3b:cc:
46:60:f9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 20 07:16:59 2023 by rpki-client on console-ams.rpki-client.org