Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/3WegwjayJkLxzEgR838uYLdw-NA.roa
File: 3WegwjayJkLxzEgR838uYLdw-NA.roa (raw, json)
Hash identifier: AIUQx7Lsl1jtzD7cZ8/FusK0b84y+44XuBaswrL46OE=
Subject key identifier: DD:67:A0:C2:36:B2:26:42:F1:CC:48:11:F3:7F:2E:60:B7:70:F8:D0
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01896507E3F3EC9707FE46BF18B7C4CF94D3
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/3WegwjayJkLxzEgR838uYLdw-NA.roa
Signing time: Mon 17 Jul 2023 18:06:03 +0000
ROA not before: Mon 17 Jul 2023 18:06:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210773
IP address blocks: 45.156.158.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:07:e3:f3:ec:97:07:fe:46:bf:18:b7:c4:cf:94:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jul 17 18:06:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd67a0c236b22642f1cc4811f37f2e60b770f8d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a3:9e:7c:d6:24:9c:02:de:00:3e:e2:59:ad:
f6:5c:ea:f1:64:a9:18:3f:75:11:ed:39:d9:81:b6:
17:47:1d:44:68:84:81:4b:a2:65:c1:c0:24:5e:bb:
1e:3a:88:e9:20:78:6b:96:05:27:45:06:1d:08:18:
9b:a7:cc:a7:b4:43:9a:10:3c:da:4d:32:6f:5a:a2:
14:24:d4:f9:a8:ca:00:94:0d:5e:bf:15:9e:3d:6f:
97:0a:c5:a4:eb:c1:6c:2b:6b:6d:1a:10:94:6b:42:
1f:cb:36:d1:fd:6e:f9:c8:34:d2:a9:cc:02:aa:74:
fe:a9:f3:bd:59:39:e9:f2:77:73:38:c8:08:3b:00:
04:c8:de:ec:8d:36:0a:53:fa:93:3b:36:0b:eb:31:
43:a5:d1:2e:e8:e1:1c:d4:05:ae:07:3a:4d:40:2f:
07:8a:6b:7b:62:32:79:c8:13:dc:a8:b3:f6:67:db:
57:6b:19:51:48:44:ea:58:dd:65:1c:81:17:80:07:
d1:dc:1f:9d:07:bc:8d:bc:b7:5b:ae:14:32:c3:0a:
bb:68:35:c5:fd:8e:7a:53:d8:a1:d0:ad:3f:d3:f4:
07:e1:d5:4a:47:04:b2:b1:b7:17:e0:69:89:ee:a2:
7b:24:90:51:ef:76:5b:f9:8b:57:cc:6c:71:b9:9c:
f2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:67:A0:C2:36:B2:26:42:F1:CC:48:11:F3:7F:2E:60:B7:70:F8:D0
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/3WegwjayJkLxzEgR838uYLdw-NA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.158.0/24
Signature Algorithm: sha256WithRSAEncryption
73:5c:7b:ca:2b:9a:f2:e5:30:c2:c7:8f:11:13:08:56:89:96:
94:fb:cd:28:9e:35:ab:43:07:c8:9e:96:5d:88:98:c9:ae:58:
10:a2:f0:b9:f2:07:ce:44:8a:31:b8:86:a1:fe:c8:3f:f1:71:
e0:69:d6:c4:15:97:79:9f:8a:84:de:d0:6c:9f:81:a9:c6:c3:
bc:8c:fd:ee:ca:76:c0:9d:c2:c7:c7:ec:29:27:d1:70:29:b6:
43:53:5b:4a:a4:0f:8d:90:9d:a7:f3:ab:09:54:82:19:06:0d:
9f:01:e5:1a:17:e3:3a:d2:77:6b:1a:b5:f3:57:26:94:a0:47:
dc:90:73:85:c4:e1:e9:60:b7:b9:f1:7d:79:57:56:45:fa:76:
66:9a:d0:61:2b:b8:df:5c:a9:1a:d8:4f:f0:09:f6:df:08:1e:
e8:04:eb:43:d1:c4:05:ae:f4:8c:20:0b:d1:b8:9c:e8:c2:7d:
10:d9:fe:1f:d3:cb:2f:1d:15:af:30:2e:72:42:56:ac:98:6a:
58:ac:a3:b0:06:8e:b9:5e:24:15:56:5c:c1:3d:90:85:69:d1:
2f:2d:8d:d7:e9:7a:1d:91:b6:58:82:9c:fc:86:4c:7d:2a:6f:
20:ac:e5:cf:50:9d:be:56:06:1f:8e:13:16:83:2b:5c:eb:59:
20:b9:c4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:28 2024 by rpki-client on console-fra.rpki-client.org