Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/e4QgbiCBS4XVySKvoSctjLo1UMM.roa
File: e4QgbiCBS4XVySKvoSctjLo1UMM.roa (raw, json)
Hash identifier: fFzvzGuzw/cGi9F+YaSNUOQdM1hqVfvadCXM154UDRE=
Subject key identifier: 7B:84:20:6E:20:81:4B:85:D5:C9:22:AF:A1:27:2D:8C:BA:35:50:C3
Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Certificate serial: 0186D6803B2C670867E688D10FD2BDB2D0CF
Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/e4QgbiCBS4XVySKvoSctjLo1UMM.roa
Signing time: Sun 12 Mar 2023 15:46:13 +0000
ROA not before: Sun 12 Mar 2023 15:46:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397373
IP address blocks: 45.150.23.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d6:80:3b:2c:67:08:67:e6:88:d1:0f:d2:bd:b2:d0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Validity
Not Before: Mar 12 15:46:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b84206e20814b85d5c922afa1272d8cba3550c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:86:f4:61:9b:27:61:1c:ec:5a:88:b2:d3:5a:
0f:c8:0e:f3:db:7e:b7:9e:91:bb:ac:eb:02:58:8f:
e5:34:95:68:f6:fc:e6:69:91:71:e1:90:4c:64:da:
e7:ab:c6:6a:42:ce:6d:82:02:86:d3:3c:49:9c:12:
ad:e1:9f:39:51:5c:a9:51:8c:fb:b2:55:4d:b2:3c:
63:ca:27:f2:39:b7:7f:d3:7a:32:f4:d6:50:c3:3a:
53:f9:50:9f:d6:2b:80:7c:24:61:4d:8c:75:80:71:
4e:81:60:d5:51:af:f8:23:04:5c:e3:25:3b:ae:70:
7f:c8:ee:52:13:ac:47:71:0a:9b:d3:cf:0c:9d:64:
91:44:23:37:05:a8:32:d0:86:87:58:d4:c8:42:e9:
47:ef:ec:03:3d:5d:a7:bf:2e:81:8d:cb:da:65:c6:
a7:ab:38:93:cc:54:60:e2:91:97:41:fc:ef:fe:ed:
8e:08:ac:c7:85:b7:ae:ac:e1:12:96:30:75:8a:54:
5f:d5:1f:09:86:1b:46:7b:b8:30:d4:10:1b:dd:df:
5c:f0:60:73:29:00:82:f5:14:cc:ad:72:ea:61:b3:
51:03:94:ed:8c:64:12:9f:13:07:16:a6:88:d3:ed:
2a:25:5f:42:dc:b3:8f:1d:a5:a7:cb:7d:1d:53:c5:
51:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:84:20:6E:20:81:4B:85:D5:C9:22:AF:A1:27:2D:8C:BA:35:50:C3
X509v3 Authority Key Identifier:
keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/e4QgbiCBS4XVySKvoSctjLo1UMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.23.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:99:85:2d:ba:83:5c:87:64:f3:a6:60:c4:15:a5:62:18:fc:
d1:3d:c6:52:ff:85:07:66:70:37:c9:fc:9a:51:b4:f4:a6:03:
0c:8b:62:62:b8:80:e4:77:43:be:29:90:20:2e:87:40:87:33:
dc:c8:5a:fe:a2:2d:87:a1:70:4a:0a:af:08:ed:69:db:54:b0:
21:1c:56:2c:3b:fa:43:df:ce:e0:e6:dd:1d:3e:c7:d7:cc:eb:
0b:86:f2:e6:5c:38:d5:5b:ce:85:83:6b:0b:7c:d7:d4:f3:3b:
f8:94:02:a6:4a:07:16:fc:18:98:8c:43:0c:23:d6:f2:9e:a8:
1d:85:cc:2d:9a:48:81:80:e7:1e:34:f3:07:5d:b2:83:2a:d3:
ab:1d:1c:24:30:6f:63:c2:85:cf:c8:18:01:5f:89:b8:18:99:
70:28:82:b1:ec:98:5b:07:fb:93:33:9b:12:8b:22:53:72:41:
ed:4f:7b:45:05:5b:71:51:38:86:e8:ca:ed:31:3d:a4:7b:f8:
71:09:03:2c:42:d4:66:ce:ff:97:0e:d9:6f:69:5b:9d:9a:b3:
42:29:2f:28:d6:5e:10:6a:e6:ef:c0:8a:18:85:a5:20:8b:9b:
51:dc:b3:25:80:75:39:9c:a0:38:06:86:9b:42:c1:06:74:bf:
01:74:4b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:35 2024 by rpki-client on console-fra.rpki-client.org