Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/8VH2hmZe_9y-NFpPdRPxBs7Mxcw.roa
File: 8VH2hmZe_9y-NFpPdRPxBs7Mxcw.roa (raw, json)
Hash identifier: fZS2UegTlsMB4+JpXKGso1Csvq8GlXA3QkmWBK2J9Uw=
Subject key identifier: F1:51:F6:86:66:5E:FF:DC:BE:34:5A:4F:75:13:F1:06:CE:CC:C5:CC
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01857103146451771191909C6ED22D198314
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/8VH2hmZe_9y-NFpPdRPxBs7Mxcw.roa
Signing time: Mon 02 Jan 2023 05:45:05 +0000
ROA not before: Mon 02 Jan 2023 05:45:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202559
IP address blocks: 45.141.202.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:03:14:64:51:77:11:91:90:9c:6e:d2:2d:19:83:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 2 05:45:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f151f686665effdcbe345a4f7513f106ceccc5cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:82:52:f4:00:0e:9f:73:ed:b5:35:08:43:3c:
5b:c9:99:12:e4:11:f0:87:be:76:8b:81:0e:6b:2c:
90:ce:0d:6f:81:de:28:e2:9c:ef:4f:36:4e:15:b5:
a1:ed:5c:89:d7:91:d9:e2:30:ba:3f:30:33:8e:fc:
79:33:40:51:8c:48:94:62:9d:04:00:db:69:09:67:
84:47:41:05:b0:04:77:7e:e6:4f:f6:60:9f:ea:4b:
68:91:6e:eb:09:3b:ec:1a:ba:32:4f:db:26:aa:82:
51:db:0f:68:c0:b3:25:49:34:5b:5e:1c:f1:df:fc:
c1:66:61:ec:78:f6:54:e4:58:02:27:1d:b8:b1:ee:
69:33:40:5e:46:7a:e8:1e:9b:f5:a1:f8:36:5b:b3:
a2:f1:50:3e:f0:74:d1:f3:13:ff:c6:ef:be:6f:40:
8e:db:63:da:90:9a:55:19:7b:19:d2:e3:15:d9:b0:
9f:86:b8:83:6f:21:75:dd:7f:cc:66:c0:7f:73:7a:
a5:8d:89:fc:6c:56:57:f4:15:a0:25:c5:a5:67:3e:
b7:a9:8b:13:3c:e7:ce:d9:cf:13:26:67:d5:02:5a:
bf:46:f1:de:30:86:35:73:e1:01:12:e8:fa:84:f3:
7a:ea:e6:67:18:1b:bb:45:61:c0:a3:8f:71:30:d6:
97:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:51:F6:86:66:5E:FF:DC:BE:34:5A:4F:75:13:F1:06:CE:CC:C5:CC
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/8VH2hmZe_9y-NFpPdRPxBs7Mxcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.202.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:a5:7d:27:37:d2:35:4a:59:7f:00:97:7b:8b:e8:7d:09:80:
6e:e9:1a:a6:13:8b:d3:c5:c6:78:fb:d6:c4:3b:9c:f9:89:a9:
2f:8b:40:a6:4a:53:8a:8e:19:e9:54:5b:c5:14:b0:c5:4f:3a:
8f:9d:6f:ed:1e:00:9c:02:e6:2e:8c:f2:9d:a6:77:de:2b:f2:
22:be:3f:cc:ec:ce:5d:d2:3c:1e:0d:ea:f3:18:3d:0b:fc:55:
a4:c2:08:30:27:0c:46:a0:2d:a4:e6:93:43:ef:a8:0b:6d:61:
24:fe:ac:dc:9e:52:11:56:a5:66:6a:ea:de:51:5b:23:61:4c:
99:95:1c:cf:ad:10:7b:8e:18:99:f4:a2:23:f1:98:7e:45:a2:
3b:b5:dd:b0:94:98:ff:de:ef:68:13:f1:91:c6:52:aa:36:ad:
fd:df:4c:42:ef:8d:21:db:a7:26:87:aa:67:f5:f6:f7:df:52:
0d:cb:24:33:ed:be:32:f2:cf:ca:12:e2:ed:59:c8:92:df:18:
39:61:22:7d:9c:ee:b6:e9:f5:a1:78:73:94:7b:a2:18:8f:dd:
60:85:b0:40:40:36:70:16:65:0a:47:30:11:95:45:90:3d:3c:
b5:3b:73:3a:0c:09:6b:a2:ca:d3:fa:03:d3:ec:a4:81:f0:3a:
60:11:b8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:57 2023 by rpki-client on console-fra.rpki-client.org