Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/7fYmtuP0WEaL8WrBFQ73mMR6hgo.roa
File: 7fYmtuP0WEaL8WrBFQ73mMR6hgo.roa (raw, json)
Hash identifier: N/yY8WN3muPDqKTkDSK/LdMYkNR3m3Oujr7KpVIAMGM=
Subject key identifier: ED:F6:26:B6:E3:F4:58:46:8B:F1:6A:C1:15:0E:F7:98:C4:7A:86:0A
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0185710312150E14FE53785FAE70D800EE52
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/7fYmtuP0WEaL8WrBFQ73mMR6hgo.roa
Signing time: Mon 02 Jan 2023 05:45:04 +0000
ROA not before: Mon 02 Jan 2023 05:45:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142299
IP address blocks: 45.141.26.0/23 maxlen: 23
185.241.210.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:03:12:15:0e:14:fe:53:78:5f:ae:70:d8:00:ee:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 2 05:45:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=edf626b6e3f458468bf16ac1150ef798c47a860a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e2:26:7a:60:45:9a:c2:28:c7:5b:d6:88:4a:
68:d3:0d:ed:3a:af:68:7f:c0:e4:e8:f8:bf:41:49:
58:32:41:52:0f:50:b3:e0:ca:a8:22:a1:7b:01:24:
dc:ee:67:95:aa:63:94:3d:51:ae:1b:76:02:1e:43:
c2:9b:ef:a2:50:11:43:45:96:5e:b5:0b:74:81:6f:
72:c8:13:3f:49:4f:a7:c3:87:43:f8:d0:d3:2b:5c:
7a:0f:31:aa:15:4c:59:d1:dc:b0:99:dd:48:44:f4:
fe:8b:1e:8c:9f:e3:5a:b0:ac:b9:79:6a:16:c0:a0:
34:ba:81:af:47:69:8a:ca:6e:fb:8a:c9:ee:67:cb:
8c:c6:a5:36:c3:79:f3:be:68:d8:68:e1:49:0a:b1:
19:7e:c1:c4:c3:bd:db:23:24:93:12:e1:f1:23:d4:
96:33:e5:21:69:1f:03:90:32:b7:dc:8c:a5:bb:c2:
9d:97:db:6d:a7:ee:d5:48:7e:8b:d6:c7:7c:3d:f9:
b9:1d:b2:df:c2:68:d4:77:4f:78:21:18:db:b9:8a:
9c:f9:60:75:44:10:9c:b4:b6:86:cb:b2:16:06:e0:
05:f5:ec:13:e5:f5:a9:49:c7:30:dc:cf:02:f8:e5:
bc:f4:dc:dd:1e:37:a4:22:fd:da:3b:3b:d2:77:9e:
1f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F6:26:B6:E3:F4:58:46:8B:F1:6A:C1:15:0E:F7:98:C4:7A:86:0A
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/7fYmtuP0WEaL8WrBFQ73mMR6hgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.26.0/23
185.241.210.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:21:88:83:0f:38:b1:f1:77:53:72:05:b0:98:54:9c:2b:59:
e4:44:3c:56:54:c2:9f:b0:31:62:6a:db:42:b7:2c:15:28:61:
bf:bb:ce:eb:13:f1:b8:6e:8d:db:59:26:7d:ef:3f:2a:d3:9e:
d0:ab:10:e0:6e:f4:7f:85:05:9f:22:4c:ee:c2:15:47:42:28:
30:c3:62:1f:4d:88:47:d2:42:82:e8:3a:7b:65:4b:16:91:6a:
bc:b8:e5:cd:dc:7d:a1:32:47:06:e4:d4:0e:df:39:b5:39:07:
8d:2f:09:7f:c7:06:f2:96:05:82:be:bf:ec:7d:89:83:12:ba:
c5:51:d7:d9:b9:93:8f:25:b3:32:29:92:9f:a5:a2:fb:3d:55:
b1:8d:f3:fa:1f:00:9d:a9:65:15:c2:81:e4:83:83:b9:07:00:
ed:1a:03:06:74:53:2a:8a:5b:20:75:1a:d8:9d:83:b0:cc:ed:
3a:be:68:95:74:96:47:c0:24:45:88:4c:9a:28:f4:f5:54:e0:
29:88:42:79:0b:b1:5a:8c:15:bc:d0:1a:7b:af:6b:b6:d0:76:
6a:8e:7f:30:90:30:9b:81:df:24:5d:d8:be:70:02:91:60:fc:
7a:8e:30:e4:de:95:a6:42:79:80:ef:6b:b6:9d:e9:41:1b:8b:
1f:c9:ee:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 23 07:41:29 2023 by rpki-client on console-fra.rpki-client.org