Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/K3NcevQdESqawdN5WUi44b1MSDM.roa
File: K3NcevQdESqawdN5WUi44b1MSDM.roa (raw, json)
Hash identifier: 2jDe014CH1bERGreYCmpDlftgZkr0gn1mn5bVDpzcCU=
Subject key identifier: 2B:73:5C:7A:F4:1D:11:2A:9A:C1:D3:79:59:48:B8:E1:BD:4C:48:33
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 0189F56731FEF9DD5DD4771D1249CEDC6E00
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/K3NcevQdESqawdN5WUi44b1MSDM.roa
Signing time: Mon 14 Aug 2023 18:55:28 +0000
ROA not before: Mon 14 Aug 2023 18:55:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59692
IP address blocks: 45.148.164.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f5:67:31:fe:f9:dd:5d:d4:77:1d:12:49:ce:dc:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Aug 14 18:55:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b735c7af41d112a9ac1d3795948b8e1bd4c4833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:60:be:6c:b8:e5:d3:f9:d6:18:33:5c:1e:b8:
6b:d3:09:2f:4f:98:6f:6a:b1:9d:dd:a9:b6:2d:15:
32:f2:d6:f6:35:4b:c2:f0:f0:f2:67:f0:a3:94:1f:
ff:44:52:b8:8c:cc:d9:5e:b4:1f:b0:9f:0d:93:8d:
8f:72:e3:53:93:45:55:1a:1d:32:f6:f5:99:1d:5c:
63:76:1c:5d:a7:c3:11:a1:ad:02:e2:97:e0:6d:e0:
f9:62:d8:77:1c:4d:48:f2:a7:c7:47:33:33:b5:8f:
67:44:eb:27:42:d5:f2:d3:ac:47:a9:ed:1e:98:5f:
73:ac:29:64:94:fe:b4:e4:11:99:06:d2:87:2b:26:
70:f7:07:5c:fd:64:69:a5:35:75:29:d2:a3:42:41:
ad:34:72:dd:57:56:49:ad:5f:4f:a3:30:89:24:ac:
bb:0c:22:e8:42:fe:84:09:79:4f:b3:60:ba:9c:ab:
aa:e8:ce:85:2f:ef:bf:5b:dd:b3:02:0c:24:f4:85:
dd:ed:e0:d3:59:cc:da:5f:41:14:9d:61:64:5c:ce:
be:c4:96:35:d4:c9:53:67:67:25:ca:9f:7f:5c:08:
5d:86:6d:74:33:37:43:ba:51:1e:52:5b:67:b4:48:
01:2a:e1:4d:bd:8f:8c:cf:5a:8b:96:9f:2b:98:09:
f0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:73:5C:7A:F4:1D:11:2A:9A:C1:D3:79:59:48:B8:E1:BD:4C:48:33
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/K3NcevQdESqawdN5WUi44b1MSDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.164.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:08:99:b7:ad:aa:d0:07:a5:3c:1f:0b:03:82:f2:db:c4:d3:
fe:77:cc:33:4c:66:06:12:f1:d6:f3:17:3b:eb:22:e4:1e:b2:
f7:66:31:62:b5:0b:42:c2:09:03:b5:81:24:6a:72:a0:32:77:
46:f4:6b:95:18:89:1a:31:f0:4b:27:0c:7e:2c:1f:19:a8:da:
ed:89:72:df:1b:c7:7a:ef:1c:7f:76:b1:f2:e6:15:41:af:8d:
21:2e:03:8e:81:91:d1:3f:4a:a6:ad:48:21:16:e2:11:37:c8:
d2:84:7b:a1:be:df:98:0f:d0:80:ca:b4:3d:1a:9a:16:da:64:
ba:f7:d1:18:61:c7:89:52:a7:74:30:0b:69:da:50:0c:a0:00:
74:af:66:87:96:21:86:b3:84:75:24:8f:3e:ff:00:1a:09:dc:
18:79:b4:00:f1:af:8d:86:d6:87:1a:4b:76:b7:a4:c6:1e:78:
37:8c:2c:da:df:db:00:e1:56:3d:f9:e9:e2:e9:39:2e:ae:01:
ff:b5:f0:72:52:fb:bc:e1:85:0c:6e:12:32:c9:f6:5c:85:fb:
e9:b9:e7:f0:9c:89:fc:05:96:7f:bb:71:c6:71:c2:b9:74:a5:
7c:79:8c:7c:c3:32:31:d6:13:fa:04:b8:92:67:c5:cf:59:b5:
23:04:c9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:58 2024 by rpki-client on console-fra.rpki-client.org