Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/HA8bxMtjQTs7uwe3eVgOjXQKhQU.roa
File: HA8bxMtjQTs7uwe3eVgOjXQKhQU.roa (raw, json)
Hash identifier: FK/luDviT49/rIQA8pMna7Zgy98b2FpaCmhcRq9TG+4=
Subject key identifier: 1C:0F:1B:C4:CB:63:41:3B:3B:BB:07:B7:79:58:0E:8D:74:0A:85:05
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0186ABB4D6C164C1A46B8CA8CFBD55A39994
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/HA8bxMtjQTs7uwe3eVgOjXQKhQU.roa
Signing time: Sat 04 Mar 2023 08:20:00 +0000
ROA not before: Sat 04 Mar 2023 08:20:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 45.159.154.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ab:b4:d6:c1:64:c1:a4:6b:8c:a8:cf:bd:55:a3:99:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Mar 4 08:20:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c0f1bc4cb63413b3bbb07b779580e8d740a8505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:14:8b:ca:f8:65:97:be:1b:e5:5e:5f:be:13:
50:05:e6:ff:d3:78:19:c0:ce:84:a1:99:03:6d:0d:
e3:ac:ae:4b:98:0f:72:16:fc:5a:4d:3d:0e:18:f6:
46:dd:14:79:f3:0f:5e:fe:ef:d7:42:93:af:49:d1:
3a:bc:73:36:23:a8:b8:8e:c1:ee:48:6f:b7:27:7d:
a5:75:2f:f9:29:97:9b:1e:b4:8a:0b:9a:b2:be:0f:
1c:02:f3:fb:0e:d5:26:3e:cf:29:9b:0a:e9:8f:71:
69:2c:54:29:82:14:b4:06:32:21:d7:68:9d:87:dd:
57:57:16:b9:8f:17:30:9a:18:a4:ef:da:5f:d5:91:
a1:6e:fd:09:6c:33:bf:91:eb:59:fe:c0:f9:75:ec:
7f:e8:ec:02:6f:b3:81:01:b3:53:06:3e:62:51:ed:
40:1d:fe:c5:81:b3:c8:58:55:4e:00:35:f5:5e:d3:
43:b5:a4:ce:60:6d:c8:15:da:91:bf:c1:29:ae:e5:
bf:9a:ae:f4:db:fb:9e:d9:fc:9d:40:d8:88:93:c8:
ad:14:7a:e9:87:ca:2c:4f:b6:47:cf:36:da:3a:0c:
b8:92:1c:8d:98:9f:07:97:63:80:86:d3:db:5e:a3:
b3:95:48:62:bf:93:af:57:48:5c:44:8b:f1:9f:c2:
07:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0F:1B:C4:CB:63:41:3B:3B:BB:07:B7:79:58:0E:8D:74:0A:85:05
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/HA8bxMtjQTs7uwe3eVgOjXQKhQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.154.0/24
Signature Algorithm: sha256WithRSAEncryption
06:a9:df:d8:8f:74:94:cf:42:49:fe:92:19:44:66:5a:34:9a:
ef:09:81:6f:22:10:68:43:9e:3f:aa:06:27:cb:56:08:bb:0a:
18:ad:0f:3a:b1:b8:bb:5e:64:f6:74:db:44:7e:9c:f6:d4:e1:
3a:bd:1f:5e:d1:fb:92:dc:08:0c:e6:44:17:78:95:64:88:5f:
7e:91:5d:e4:e1:87:5d:71:da:6c:b7:a6:2e:9b:8b:ac:39:52:
48:a1:18:3b:82:91:1a:23:ab:3f:83:58:72:b3:d5:c0:a6:6e:
ec:ed:97:ac:c6:1e:80:11:2a:03:da:ef:e7:54:dd:f9:42:31:
2f:be:2c:44:2a:e7:a2:65:f4:7c:16:76:7d:7c:88:6d:ef:69:
48:fd:f8:6f:54:7b:1b:e4:33:4d:02:af:54:76:3f:9e:c7:2f:
85:06:08:80:54:f9:8c:77:58:8e:41:11:61:95:6c:75:1d:1f:
5d:ce:a1:48:bc:f0:3f:06:28:02:c2:1c:f2:9b:64:5b:10:08:
89:9b:28:01:4d:86:5a:9b:5b:58:f5:ba:c7:4a:16:61:22:5c:
da:c8:78:70:af:e8:cb:99:b2:c0:29:34:55:ed:1a:84:2e:bc:
42:94:08:26:b7:b1:36:e8:fb:d4:fb:f0:d6:88:60:f9:33:77:
be:3d:9b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:01 2023 by rpki-client on console-fra.rpki-client.org