Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/SCSVaQ2nSSxgRjAeoxLFJ8ssWQQ.roa
File: SCSVaQ2nSSxgRjAeoxLFJ8ssWQQ.roa (raw, json)
Hash identifier: ZS9Ew4dZAUPW5E7Ung3MPLpvd0iBmCFJlXTh44ZOUvI=
Subject key identifier: 48:24:95:69:0D:A7:49:2C:60:46:30:1E:A3:12:C5:27:CB:2C:59:04
Certificate issuer: /CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Certificate serial: 0188541E7E9C99B558F5FBA07A643AF7F042
Authority key identifier: 7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/SCSVaQ2nSSxgRjAeoxLFJ8ssWQQ.roa
Signing time: Thu 25 May 2023 18:14:24 +0000
ROA not before: Thu 25 May 2023 18:14:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 45.158.127.0/24 maxlen: 24
45.158.126.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:54:1e:7e:9c:99:b5:58:f5:fb:a0:7a:64:3a:f7:f0:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Validity
Not Before: May 25 18:14:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=482495690da7492c6046301ea312c527cb2c5904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:47:4f:b3:5e:ac:3b:e2:6a:05:8b:70:af:52:
59:c9:52:9c:c5:00:eb:da:af:71:52:b5:a2:26:f4:
16:4c:47:f7:15:15:28:2a:3b:94:d5:a1:c4:b7:9c:
0a:70:51:0c:25:d1:e6:b4:9b:f4:66:ed:80:b7:86:
1e:41:71:0f:a6:27:ae:40:1c:58:f9:38:15:5c:eb:
62:bf:0f:29:5c:f2:73:15:a3:34:f9:00:0d:27:7f:
c6:cf:4c:a0:f9:e7:c5:8b:1d:5e:1a:a1:39:00:bf:
46:26:0b:50:81:44:5a:90:9d:13:14:6f:2e:23:1b:
22:ca:86:33:fe:72:e8:69:e5:90:c7:d5:bc:15:ec:
60:ac:88:16:ed:26:d0:65:84:7f:f8:45:00:ce:46:
91:fb:89:13:dd:92:99:9b:e2:34:a5:91:11:f4:7d:
d9:47:b1:1f:66:d1:e2:3e:71:8e:d3:af:bb:e6:a8:
db:9f:3f:92:d2:1c:86:55:76:d0:80:b4:11:6e:b1:
a0:f7:fc:45:41:75:f6:9f:a3:49:d3:f2:73:b4:31:
6d:f6:ee:1c:ca:c2:44:05:b3:54:e5:7e:7a:33:05:
66:ea:9d:52:6f:8f:55:ed:db:17:3f:e0:c4:89:2c:
b3:e9:e6:60:43:cc:43:5f:0b:e5:8b:26:26:9b:29:
e9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:24:95:69:0D:A7:49:2C:60:46:30:1E:A3:12:C5:27:CB:2C:59:04
X509v3 Authority Key Identifier:
keyid:7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/SCSVaQ2nSSxgRjAeoxLFJ8ssWQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.126.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:3e:44:86:65:f5:c9:19:a1:1b:6c:fe:ed:99:9e:d7:68:7c:
5c:99:cd:28:e0:c3:62:85:98:b5:f1:22:3a:bb:1f:19:fb:a5:
77:8d:60:5c:f0:b0:bf:24:8a:93:a1:f9:c7:1c:0b:67:b6:d0:
3d:3a:65:db:60:e5:70:46:07:f0:b4:4c:4e:1a:28:7e:ff:e4:
fe:52:b9:56:32:c8:bf:50:2f:d7:f6:6c:86:8b:d4:51:46:c4:
89:36:c3:f6:0f:9b:15:2f:9b:f7:e1:a9:98:05:ac:9f:99:21:
70:e3:09:09:5b:35:9e:9b:2e:f3:bb:61:cb:b9:a8:e6:c2:45:
93:4b:87:98:60:7c:01:3b:98:2d:46:08:b6:45:93:71:b6:a9:
25:47:16:f9:82:a3:a6:bb:80:75:b5:72:38:dd:97:4f:1d:d2:
c1:b7:0f:30:5d:07:03:36:35:a2:31:3f:e1:d4:7a:fa:c6:c6:
e0:48:94:45:7a:56:04:e9:eb:ef:af:b8:a1:5c:aa:c4:21:c3:
ed:af:5b:d5:a3:29:fe:36:81:0b:f1:e4:8f:99:81:13:ed:db:
6d:ee:a9:3d:74:46:b9:4b:65:15:ce:e9:53:82:e6:43:c8:1f:
8f:f8:f3:15:81:d0:d9:1f:24:29:f3:a4:1e:32:98:4b:a6:54:
fd:00:67:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 19 19:54:58 2023 by rpki-client on console-ams.rpki-client.org