Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/dX2J0Aq0Ckc0MGfeTvidxY5FpCY.roa
File: dX2J0Aq0Ckc0MGfeTvidxY5FpCY.roa (raw, json)
Hash identifier: Uk0lG/aHpl2WkiQ9lulJT0yi3LqZsLWxlAAA4D9SgXM=
Subject key identifier: 75:7D:89:D0:0A:B4:0A:47:34:30:67:DE:4E:F8:9D:C5:8E:45:A4:26
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 0187349C0B18556CD85E482ABC0370F28D0D
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/dX2J0Aq0Ckc0MGfeTvidxY5FpCY.roa
Signing time: Thu 30 Mar 2023 22:20:54 +0000
ROA not before: Thu 30 Mar 2023 22:20:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209043
IP address blocks: 45.149.165.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:34:9c:0b:18:55:6c:d8:5e:48:2a:bc:03:70:f2:8d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Mar 30 22:20:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=757d89d00ab40a47343067de4ef89dc58e45a426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e2:56:a6:9f:17:1c:bf:39:59:39:0f:ec:52:
4f:2e:a3:8e:5a:45:29:50:2e:38:19:3c:1e:fa:b8:
be:9a:c8:4a:73:26:e4:02:1d:a8:17:83:fa:07:a8:
10:62:66:95:89:48:83:60:71:69:55:9e:7f:d3:43:
7a:83:2a:16:bd:76:bc:82:6d:67:d2:c4:dc:02:50:
1e:41:6f:55:3f:f3:57:77:a6:4d:3f:62:5f:4e:16:
0e:bb:19:96:e4:31:0c:3e:cb:28:ec:57:2a:06:17:
fe:59:08:c3:10:c8:ca:e8:1e:de:4d:5b:13:a3:61:
e6:94:7f:a2:b7:9b:44:f6:32:35:a3:a7:20:d7:d1:
13:89:eb:93:89:c8:f3:13:5a:a4:ef:ce:24:c5:3a:
22:2d:f5:6f:2b:38:3e:ea:83:b1:a9:5f:fc:f6:7f:
24:93:fc:8d:cf:66:66:10:fc:64:80:ea:d3:99:50:
38:ee:2c:5f:56:7d:22:52:52:21:cf:70:2b:36:0e:
5e:e4:ff:bb:3c:48:6f:67:c7:82:6e:c4:08:5d:9a:
92:a5:fe:d8:31:31:2c:18:9e:50:4e:fa:17:59:bc:
12:bf:f9:d1:d7:eb:9b:09:ec:c2:05:5c:a8:93:20:
b5:d7:f0:c5:0b:bf:f4:5f:b3:aa:24:f6:65:67:4a:
f3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:7D:89:D0:0A:B4:0A:47:34:30:67:DE:4E:F8:9D:C5:8E:45:A4:26
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/dX2J0Aq0Ckc0MGfeTvidxY5FpCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.165.0/24
Signature Algorithm: sha256WithRSAEncryption
65:21:e2:fb:35:45:2b:04:d4:62:b6:7d:bc:54:b3:60:9a:c4:
2d:66:f6:d2:9d:e5:ba:31:a9:3f:a2:fd:f0:9c:1a:f1:4b:53:
45:81:ad:2f:cd:19:c6:ab:6f:52:6e:7c:5f:1b:dd:f3:69:1a:
e0:48:11:d0:f5:36:8d:2a:b6:9e:3b:b5:37:3c:73:19:6a:30:
9f:53:01:61:1c:f4:bf:c4:40:c7:21:09:ab:32:29:0c:64:4a:
b5:10:15:0d:b6:f4:04:f0:aa:f5:2b:3f:55:ed:02:9c:c4:cf:
31:1e:23:b7:f5:78:37:37:6e:cc:a7:ef:a0:e3:10:f0:17:65:
6a:c0:ce:2c:e7:10:8f:6e:d7:74:73:5a:cc:2e:9e:7b:af:1c:
63:bf:51:e4:9b:a3:c2:cd:e7:0f:9a:48:44:23:2a:88:df:13:
69:3d:a8:a1:7a:40:74:86:cb:7f:43:f3:fb:2c:b9:aa:a8:37:
89:10:2d:80:c7:45:ff:2a:9c:9b:74:bb:99:9c:19:5c:37:2b:
29:19:f2:9c:28:00:25:00:de:0b:c2:fb:a7:50:56:c6:d9:92:
1e:b6:27:8b:7d:7f:62:ae:ba:7d:c2:77:3d:95:d7:52:98:a3:
a8:3d:4e:50:78:5a:c6:4c:ce:77:ed:07:e6:2e:68:40:ac:c5:
9b:d3:cd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:46 2023 by rpki-client on console-ams.rpki-client.org