Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/CAooCcbmcYeBCXtc8g2Hae0O0Lw.roa
File: CAooCcbmcYeBCXtc8g2Hae0O0Lw.roa (raw, json)
Hash identifier: Yui7nXvjGznTx2j/8FD7dAwHQ8vyQjS3Klan0vk83rI=
Subject key identifier: 08:0A:28:09:C6:E6:71:87:81:09:7B:5C:F2:0D:87:69:ED:0E:D0:BC
Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Certificate serial: 01856C7814FD4F209539148456480C884186
Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/CAooCcbmcYeBCXtc8g2Hae0O0Lw.roa
Signing time: Sun 01 Jan 2023 08:34:47 +0000
ROA not before: Sun 01 Jan 2023 08:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212283
IP address blocks: 45.143.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:14:fd:4f:20:95:39:14:84:56:48:0c:88:41:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Validity
Not Before: Jan 1 08:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=080a2809c6e6718781097b5cf20d8769ed0ed0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:65:8c:8d:d2:0b:15:91:ac:b6:50:95:de:3a:
28:0e:d8:a6:aa:10:83:81:97:ff:a9:cc:84:8a:8d:
3e:90:e2:15:68:09:af:40:c6:b8:0b:8c:df:fc:f3:
9c:cf:d9:55:ce:22:45:4d:be:1e:f6:21:68:09:ed:
73:1f:7b:f6:ba:8d:99:b7:30:0c:e2:2f:67:cc:33:
a4:6c:d8:e6:9f:df:6a:95:60:58:63:ec:e3:5c:19:
e7:d3:36:68:84:b7:b6:88:41:43:82:6f:ce:19:c4:
28:cc:a8:b2:fe:99:c0:57:5a:bc:a2:23:65:8e:35:
c4:ac:3b:d9:3d:b9:e2:f3:27:b2:d8:77:d6:7c:c7:
a3:78:b6:8a:ed:5a:7b:a2:20:b4:b8:da:c0:6c:32:
fc:42:5d:71:20:6c:05:94:0a:47:35:43:2a:54:b3:
0c:f1:c0:57:1d:f8:f4:b8:b5:b0:e3:cf:fa:d0:df:
b5:3b:f1:0a:66:18:ee:4f:93:fe:a7:ff:73:a4:a7:
68:75:e3:29:63:31:62:ba:2b:ad:82:4a:12:27:49:
bb:14:08:e8:ec:1b:cc:22:26:ed:6e:d1:08:c9:5d:
cc:b3:3e:a1:8a:42:b6:be:c5:0a:11:e8:17:93:3d:
5b:83:3b:25:c3:55:d6:91:e3:58:9d:69:40:ab:f0:
4e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:0A:28:09:C6:E6:71:87:81:09:7B:5C:F2:0D:87:69:ED:0E:D0:BC
X509v3 Authority Key Identifier:
keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/CAooCcbmcYeBCXtc8g2Hae0O0Lw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.200.0/24
Signature Algorithm: sha256WithRSAEncryption
08:65:88:1a:84:c4:8d:35:ca:08:f6:b1:ac:8c:52:18:d1:5e:
a5:bf:98:cd:d2:b6:2c:21:38:db:61:32:4c:58:ea:cf:c3:63:
45:64:e3:ef:46:c7:84:9b:16:3c:bd:eb:0e:f7:f7:ab:e6:ae:
c8:94:31:15:3c:8b:40:76:5d:9b:b6:b4:2e:d6:23:6c:a9:42:
da:d0:81:0c:b1:53:47:2c:67:ed:72:93:8b:21:a4:62:66:80:
71:81:03:dd:b3:0d:07:56:0c:93:3e:47:44:8a:c6:4c:6d:96:
cc:e3:74:9e:14:08:35:ee:7b:ea:2c:08:8b:4d:25:90:5c:91:
5d:c3:cd:4a:cb:cd:de:ab:4e:69:70:13:52:09:e5:03:70:19:
25:59:17:86:19:6b:29:bf:8d:5d:63:91:f4:a0:74:81:bf:05:
77:cc:ae:28:09:55:c8:25:5a:e5:67:49:56:55:18:40:59:72:
60:01:75:8e:9f:6a:47:6f:c5:a3:b2:a8:f8:4f:57:8a:d1:1b:
a1:39:b3:2b:d3:f7:e7:28:c7:0e:d7:13:c4:d6:66:c0:73:5d:
58:e7:0f:f5:1f:27:8e:d3:97:25:f5:11:23:0e:f1:79:ef:c1:
53:11:67:d2:7f:18:d4:f6:34:90:0f:c6:21:75:3a:53:a4:26:
18:fc:e4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:37 2024 by rpki-client on console-fra.rpki-client.org