Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Cu6ZO-AVdlpz-j0ubjV_7PmCpx8.roa
File: Cu6ZO-AVdlpz-j0ubjV_7PmCpx8.roa (raw, json)
Hash identifier: Z0ZFNZoPaerIJWTc9Ro/YGtznXOcPi3U19y6zD8j3kw=
Subject key identifier: 0A:EE:99:3B:E0:15:76:5A:73:FA:3D:2E:6E:35:7F:EC:F9:82:A7:1F
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0188BD7248B88C4601D26CA1AE49496B59C3
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Cu6ZO-AVdlpz-j0ubjV_7PmCpx8.roa
Signing time: Thu 15 Jun 2023 05:06:03 +0000
ROA not before: Thu 15 Jun 2023 05:06:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41327
IP address blocks: 45.156.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bd:72:48:b8:8c:46:01:d2:6c:a1:ae:49:49:6b:59:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jun 15 05:06:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0aee993be015765a73fa3d2e6e357fecf982a71f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d6:b0:1b:5f:dc:b5:73:6f:81:29:d5:76:01:
7e:60:23:14:f7:cf:1f:17:06:2c:95:53:fa:f4:51:
35:9c:92:92:bf:be:64:58:f4:ac:ff:55:e6:32:12:
ac:a2:7c:e9:2f:10:0a:40:ad:af:61:5c:04:1e:22:
60:62:9f:f7:34:ac:f7:9a:9f:f6:63:0a:cc:d1:cf:
bf:a7:8e:d0:00:66:9e:4d:56:f5:5c:b8:9b:0a:79:
22:d7:08:d0:13:9a:24:9e:d1:de:5f:e5:ec:4d:ab:
c6:cf:8a:32:8d:fe:32:d5:b6:71:ca:dd:8b:29:5a:
e4:7d:7e:53:38:2c:ce:ac:8f:53:dc:cf:4f:e9:75:
b4:86:99:63:a6:05:64:2f:2c:3e:2f:2f:87:b0:83:
f8:4c:e1:76:31:7c:2e:59:15:59:c9:91:d9:ae:bb:
6d:3e:bb:92:e5:c4:32:b7:b7:e4:ed:86:82:b9:a7:
d6:6f:d2:6c:3b:ce:d9:db:3e:0d:33:ec:6b:b3:01:
d2:44:bd:bb:6e:3f:37:27:cc:67:70:2a:35:5f:7b:
2f:c2:1c:17:5f:b0:9c:33:53:fe:2a:d5:16:9e:58:
9c:ac:df:82:f1:2e:36:30:f5:21:f0:15:a7:e0:2a:
a7:0d:20:7f:c8:16:16:6f:a0:7c:d1:83:4a:5f:5d:
9d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:EE:99:3B:E0:15:76:5A:73:FA:3D:2E:6E:35:7F:EC:F9:82:A7:1F
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Cu6ZO-AVdlpz-j0ubjV_7PmCpx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.157.0/24
Signature Algorithm: sha256WithRSAEncryption
61:c0:b2:cd:4e:03:f8:2c:f3:4f:87:57:0e:ef:7a:2d:46:87:
af:74:c3:54:9d:73:5f:59:a4:fb:8a:0e:9b:1c:c8:e9:eb:7b:
de:89:2b:bc:63:39:a4:66:2b:4f:61:95:81:bc:c5:8e:54:0a:
9e:be:06:3d:81:cc:1f:b0:7c:d9:49:0c:25:eb:15:72:c5:f6:
af:ab:19:6a:9d:68:a4:62:8c:c6:d8:8f:75:4f:31:57:04:d7:
83:50:fd:f4:81:56:d5:aa:1e:be:3c:17:25:1b:d2:73:4a:63:
99:20:54:b2:e0:5c:9e:9f:96:1b:39:64:a9:ae:c3:95:97:ac:
3d:d9:ce:2a:79:37:3a:ea:c4:4e:e8:a9:71:d8:1d:b0:42:e2:
07:0a:a1:3c:5a:4e:24:0d:60:7f:aa:a7:d3:39:96:8e:45:e8:
62:d7:39:e2:fe:1c:42:12:d0:e8:87:b0:2b:5d:fb:b1:82:63:
e4:1b:aa:29:3e:ca:b9:1b:7a:90:24:9d:db:08:7e:e2:f8:f9:
5c:06:17:5d:aa:b8:5c:40:b8:5c:3d:0e:a7:e6:f6:8e:50:fd:
1e:69:32:c9:9d:97:68:01:2d:00:b2:6a:b0:ec:1d:f5:96:7d:
6c:de:c2:4d:b1:6f:bb:1e:dd:85:0c:af:26:00:13:d0:eb:90:
65:b3:c1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:03:17 2024 by rpki-client on console-ams.rpki-client.org