Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/O5dgyLqpvJGRCm6Vg7WxY4gM1J4.roa
File: O5dgyLqpvJGRCm6Vg7WxY4gM1J4.roa (raw, json)
Hash identifier: kHHa0D6uPmZ6Y5uCtMy44XlvzihlwacRS+Vqddw/8cQ=
Subject key identifier: 3B:97:60:C8:BA:A9:BC:91:91:0A:6E:95:83:B5:B1:63:88:0C:D4:9E
Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Certificate serial: 01857079703936DCFCE8EBFDBE90D7906159
Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/O5dgyLqpvJGRCm6Vg7WxY4gM1J4.roa
Signing time: Mon 02 Jan 2023 03:14:44 +0000
ROA not before: Mon 02 Jan 2023 03:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49581
IP address blocks: 45.155.76.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:70:39:36:dc:fc:e8:eb:fd:be:90:d7:90:61:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Validity
Not Before: Jan 2 03:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b9760c8baa9bc91910a6e9583b5b163880cd49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e6:77:37:cd:b7:36:41:fd:44:65:b2:7b:e7:
eb:6d:72:98:4d:c2:82:a5:9e:ed:e0:ec:e7:b0:7b:
2b:74:a3:c4:fd:2d:ab:aa:63:1e:4f:86:43:b2:f9:
6d:8d:e0:bd:5a:51:74:81:91:37:e6:07:58:d1:52:
7a:ba:55:52:76:31:c2:9e:6a:ea:b8:11:0a:59:c5:
f3:5e:60:b2:a1:b8:95:84:d7:ff:b4:e6:26:89:29:
dd:ea:8f:5b:69:9c:5d:3c:e4:23:6e:0c:13:3f:20:
45:5d:ba:c4:3c:08:c9:b7:4a:35:41:6f:04:88:f6:
da:c2:58:7d:a7:3b:02:58:92:eb:08:fa:7f:90:36:
c4:d8:99:bc:d4:f3:70:94:d8:e6:66:a2:3e:a4:8e:
89:64:34:bd:60:a4:b5:f3:00:98:6b:1d:46:ef:a3:
4e:05:a9:b5:52:3e:b8:28:30:1a:70:b5:80:06:ef:
be:15:60:e7:71:83:22:39:1a:5a:f2:86:55:02:39:
aa:6c:4b:58:8b:1c:c1:3f:ad:fc:e1:df:a6:dc:5c:
e4:e5:75:ae:79:95:03:89:de:b5:ac:e5:3a:97:a5:
ab:31:fb:ff:98:d4:b7:b7:a0:a0:39:95:d8:c2:89:
59:e5:22:09:bd:a1:ee:62:09:4e:b5:cc:92:3c:db:
3f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:97:60:C8:BA:A9:BC:91:91:0A:6E:95:83:B5:B1:63:88:0C:D4:9E
X509v3 Authority Key Identifier:
keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/O5dgyLqpvJGRCm6Vg7WxY4gM1J4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.76.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:b3:6b:12:8d:5c:ca:a9:61:a7:d7:da:e9:e4:4c:f1:89:e8:
5d:20:23:4e:0a:d2:e4:07:fb:14:77:54:54:76:a8:1d:cd:db:
89:71:fa:d4:d3:89:36:29:d5:b2:a9:cf:22:21:b4:a8:bc:37:
29:14:af:5c:d0:32:cd:d8:14:4c:48:9f:bf:df:b8:51:39:86:
9d:4c:b2:dc:93:ad:e1:49:07:4d:64:76:e9:17:fe:54:af:e2:
2d:56:90:66:5b:c4:b4:c1:37:c5:99:66:ca:55:12:f1:4f:bb:
74:55:a0:31:32:b2:81:4f:c4:5a:92:04:3b:c3:6d:8c:ed:b8:
b1:b9:3d:64:bc:98:36:60:44:7a:dc:b4:d5:ab:0d:14:0f:a7:
fc:22:88:45:bb:fd:f1:c8:78:5f:25:30:12:5c:12:da:5a:b8:
22:35:dd:2e:70:03:5e:21:bd:83:9d:77:19:0e:3e:7c:17:58:
62:8c:c9:a4:db:b9:95:ae:c2:b9:00:e0:34:d8:d1:93:38:7c:
e3:dd:d7:f7:18:ef:b0:a9:36:c3:6e:df:ae:78:af:fd:fb:d9:
15:8e:b0:30:0a:b3:62:af:e9:58:c4:91:7b:8c:e3:4a:5c:8a:
9f:8d:af:f0:7c:50:ef:2b:49:21:c1:0e:79:64:ce:1a:fc:f5:
71:1a:e0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 30 18:21:18 2023 by rpki-client on console-ams.rpki-client.org