Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/9lP01WlUYcjgerAZBqkfWvNmllo.roa
File: 9lP01WlUYcjgerAZBqkfWvNmllo.roa (raw, json)
Hash identifier: XbodRGHRbeNfg/z7cbgA9osPyXN56aG2RYtt/X1dMys=
Subject key identifier: F6:53:F4:D5:69:54:61:C8:E0:7A:B0:19:06:A9:1F:5A:F3:66:96:5A
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 0186CFB4BABF28D359E5EEA2C0C13D74C40E
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/9lP01WlUYcjgerAZBqkfWvNmllo.roa
Signing time: Sat 11 Mar 2023 08:06:13 +0000
ROA not before: Sat 11 Mar 2023 08:06:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 45.149.166.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cf:b4:ba:bf:28:d3:59:e5:ee:a2:c0:c1:3d:74:c4:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Mar 11 08:06:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f653f4d5695461c8e07ab01906a91f5af366965a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b3:45:fd:09:3a:7e:83:bf:15:0e:e4:b2:33:
35:f2:61:e5:ff:68:f2:3d:fe:f8:e6:9b:37:71:a7:
47:35:ef:4c:65:78:55:52:82:65:c5:71:f9:5a:93:
73:18:1b:d1:62:0c:1a:9c:6c:5a:6c:bb:95:5b:be:
2c:ba:c5:cb:1d:c5:84:29:ae:d2:b4:9a:f9:93:33:
a7:e9:d7:b8:f5:c0:29:f8:be:ac:3d:96:a0:36:34:
0e:4a:b4:29:85:84:61:1d:44:c4:f3:eb:2d:2f:54:
bd:db:b3:c6:ab:a9:5d:cd:b1:f1:11:2d:a9:56:de:
39:51:3c:63:2f:72:dd:c7:2a:a8:7f:23:61:9b:c1:
b5:66:dd:e0:b2:20:04:7f:a7:01:ca:50:c3:43:0c:
3c:ed:a8:20:1d:c7:b0:72:67:1a:a5:71:93:ac:42:
90:13:fc:25:57:b0:16:97:73:21:9d:ab:55:a9:fe:
82:c9:b7:39:f0:df:7b:82:10:e7:65:9e:65:91:c8:
24:40:a5:46:f8:7a:f0:ec:83:2d:b1:6e:47:33:3b:
5f:b3:34:f9:db:29:6a:97:10:81:a3:fc:4d:6e:a3:
2e:c3:89:83:e8:f9:9c:7d:f8:df:fa:7d:42:b4:9e:
95:0a:10:e1:a7:d3:26:a5:36:5d:87:a9:8d:41:d7:
3f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:53:F4:D5:69:54:61:C8:E0:7A:B0:19:06:A9:1F:5A:F3:66:96:5A
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/9lP01WlUYcjgerAZBqkfWvNmllo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.166.0/24
Signature Algorithm: sha256WithRSAEncryption
30:b1:fe:0a:91:a6:d6:57:63:a4:21:04:cb:53:fb:4d:9a:46:
f5:fe:df:35:74:c4:05:73:3a:de:a0:48:eb:31:6d:7a:aa:67:
b6:4e:f4:a2:8c:db:91:e9:ef:1a:45:bb:b7:f5:d9:44:ad:8e:
b0:f5:c3:d4:45:fe:57:6b:e4:0d:b9:5f:e9:a5:57:a1:9a:32:
1b:02:21:7b:ed:3a:6e:dc:5e:2e:20:4d:7e:ae:e4:b5:c9:59:
0e:42:3f:05:82:1c:48:f1:03:da:b4:a6:a5:7c:d8:5e:21:75:
7d:72:23:1f:54:e3:d1:1c:42:bc:92:5f:ed:49:b2:4e:b8:1d:
c2:33:8b:f6:a9:b8:2d:c2:d4:7a:96:6a:d2:b5:4d:29:df:bc:
18:a9:01:85:96:d4:e9:ad:0f:35:ba:43:e4:20:9b:28:9f:b1:
19:d0:c6:01:55:fe:3f:8c:3e:31:04:19:9f:68:2b:20:0f:8a:
c0:0e:8d:d4:6f:0d:c9:c0:80:c6:26:ce:b6:f5:f4:f8:af:62:
3f:54:7e:0d:6a:8e:77:c9:48:09:b5:cb:ed:81:c6:90:12:e4:
5d:24:6f:b6:4b:27:02:15:2d:2c:9e:30:65:8b:40:38:5e:f0:
32:ed:d8:4f:b7:ef:3a:16:77:d1:56:7f:e1:1d:d4:24:07:20:
28:db:f9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:53 2023 by rpki-client on console-fra.rpki-client.org