Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/1-_r92e7qhhxOY-jVVflh1pefSYU.roa
File: 1-_r92e7qhhxOY-jVVflh1pefSYU.roa (raw, json)
Hash identifier: 6OslZXnQFdGZZVNBmD/GB6itIrqiua05HbJdENk68XI=
Subject key identifier: FB:FA:FD:D9:EE:EA:86:1C:4E:63:E8:D5:55:F9:61:D6:97:9F:49:85
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0185EDEC5A9B7E93CC385A5905708865E0FE
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/1-_r92e7qhhxOY-jVVflh1pefSYU.roa
Signing time: Thu 26 Jan 2023 11:52:47 +0000
ROA not before: Thu 26 Jan 2023 11:52:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200202
IP address blocks: 45.156.156.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ed:ec:5a:9b:7e:93:cc:38:5a:59:05:70:88:65:e0:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 26 11:52:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fbfafdd9eeea861c4e63e8d555f961d6979f4985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ce:5c:36:cb:ec:98:10:61:97:60:54:c5:54:
35:29:81:81:11:ea:86:26:8a:c4:24:f3:8e:22:1b:
10:42:3d:bf:41:d6:ca:79:93:09:cb:c5:19:1b:6b:
24:54:6e:c7:19:f5:7f:15:bc:58:ab:f4:40:5e:97:
45:80:3d:75:d4:1c:5b:3f:3e:56:c5:94:f2:cd:38:
25:82:2b:02:5a:12:45:e8:30:aa:82:44:7d:fe:35:
48:6c:75:15:d7:41:90:46:ac:d0:13:9e:ca:0e:ab:
0b:dd:71:8b:28:90:81:bf:d2:27:e6:b1:42:36:96:
fc:24:dc:ed:81:6b:ab:90:d2:e6:e0:32:b6:7a:c5:
f6:94:d8:ea:75:30:8f:93:08:e9:8a:4f:b0:c3:dc:
86:30:b9:14:fa:69:7a:29:69:77:77:fc:90:3f:78:
41:83:81:08:8e:46:9d:89:41:5a:44:50:d2:93:f6:
46:8b:f3:69:93:97:8a:3c:ea:a7:3d:c1:11:cb:07:
a2:26:25:8d:5a:0b:26:ed:f5:49:3a:bc:5d:8e:2d:
54:a5:1c:3c:02:6a:46:ca:75:4c:df:f8:a9:0d:99:
86:54:a0:76:d9:9e:d8:7b:4c:08:e5:fb:80:cf:31:
77:7d:16:5c:3c:09:2f:7b:b7:63:cb:f3:ee:96:52:
48:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FA:FD:D9:EE:EA:86:1C:4E:63:E8:D5:55:F9:61:D6:97:9F:49:85
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/1-_r92e7qhhxOY-jVVflh1pefSYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.156.0/24
Signature Algorithm: sha256WithRSAEncryption
20:d2:34:e9:b3:20:94:20:70:f1:5a:5f:91:d0:1a:09:18:67:
a4:38:3a:88:1a:ad:f4:59:09:b6:e7:7d:eb:ee:c9:6e:9e:4a:
12:d8:c4:96:6d:42:51:eb:fb:b3:81:f5:9e:64:b3:4d:61:26:
74:a5:0b:56:36:5c:f0:cf:fa:a7:30:e6:df:d9:b2:45:fd:22:
c5:c9:1f:31:04:e5:fa:4d:12:36:6e:7f:70:a8:6e:8c:36:92:
8d:23:2b:79:5c:ca:58:20:3d:93:91:f7:bc:bd:50:22:5a:eb:
dc:39:23:5e:e2:a8:04:17:2a:db:e5:0f:7e:9c:b7:7f:e8:5a:
85:66:b0:55:10:8d:3f:0c:27:fc:f2:fa:f3:d4:38:c9:1f:e9:
80:48:68:a4:bc:6f:8a:3e:99:b5:1b:4e:81:91:8c:42:9a:19:
64:4c:ed:ab:72:82:e8:f7:66:1a:97:5c:3d:43:bd:d6:d2:0e:
90:b0:68:62:d6:6f:53:f0:a3:f7:8a:ee:a2:5d:0e:b5:10:66:
a0:00:6a:ed:00:0b:33:1a:8b:45:1b:2e:f7:67:9f:fe:b5:0d:
ae:0f:36:f5:c3:65:3c:4e:ba:81:f3:cd:d9:b1:aa:ea:8d:b1:
79:bf:a5:9a:ee:1b:18:2e:12:3a:39:d0:fd:07:b6:02:9e:8e:
03:4b:03:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:27 2024 by rpki-client on console-fra.rpki-client.org