Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/RID_uwFVWXSH7BMKcLLwUFrEAxg.roa
File: RID_uwFVWXSH7BMKcLLwUFrEAxg.roa (raw, json)
Hash identifier: 6yx3Imy65hpTGc+5xVM2Z8h90/l5ilN6deKwOZTJNGw=
Subject key identifier: 44:80:FF:BB:01:55:59:74:87:EC:13:0A:70:B2:F0:50:5A:C4:03:18
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 0189F56732CBA5A795E4F50210BEF68AAA86
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/RID_uwFVWXSH7BMKcLLwUFrEAxg.roa
Signing time: Mon 14 Aug 2023 18:55:28 +0000
ROA not before: Mon 14 Aug 2023 18:55:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 262254
IP address blocks: 45.148.164.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f5:67:32:cb:a5:a7:95:e4:f5:02:10:be:f6:8a:aa:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Aug 14 18:55:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4480ffbb0155597487ec130a70b2f0505ac40318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:24:fa:6f:44:6d:c6:b7:00:de:cf:b5:0a:fd:
df:8d:82:4f:6e:12:67:4e:08:bd:2e:c7:01:d9:26:
6a:9d:ff:61:da:70:5c:79:ef:dc:d9:e8:6d:5b:cd:
57:b3:ac:3b:c0:ec:92:c9:e6:6f:7d:bd:2c:77:74:
dd:2f:a5:14:59:58:f2:1c:d5:b9:8f:e0:1e:e4:07:
71:77:cf:6b:bf:62:f2:7d:4f:20:bc:46:59:85:2c:
4e:44:cf:2a:d6:9f:9e:1e:59:ac:9d:5c:73:db:03:
30:0c:82:17:36:b6:17:bc:67:b5:1e:ed:56:31:36:
e1:99:3a:9a:45:7e:2c:0a:ba:dd:b9:3a:00:d2:48:
41:19:81:10:10:32:40:39:6c:a8:14:6d:67:78:3e:
a8:5f:fd:1c:af:7c:6e:25:38:b8:41:64:bc:74:3b:
a0:58:9e:bf:1a:e6:c0:50:d8:72:b8:af:f5:bd:bf:
a1:e5:1e:cc:27:9d:2b:77:4e:03:59:0a:09:08:31:
1f:4f:06:8b:35:b7:d9:12:b7:5c:a4:8c:ef:fd:fc:
69:a7:83:c0:1b:6d:f0:90:66:85:60:bf:45:f1:f4:
49:cb:d0:d7:eb:c2:d7:52:4e:4b:96:65:81:be:99:
0c:bf:f3:33:f0:b7:e8:9d:74:f0:a0:52:be:6e:70:
45:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:80:FF:BB:01:55:59:74:87:EC:13:0A:70:B2:F0:50:5A:C4:03:18
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/RID_uwFVWXSH7BMKcLLwUFrEAxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.164.0/24
Signature Algorithm: sha256WithRSAEncryption
46:a0:ae:11:05:14:45:57:74:6c:92:91:72:05:35:c8:b0:c9:
1b:e2:4c:b8:b9:f4:58:a5:ec:e6:06:2f:66:32:47:71:d7:05:
b4:4d:1f:97:3b:f9:b4:90:35:3a:ad:15:f8:22:98:c3:56:d0:
ee:25:d2:4e:13:8d:24:77:a5:d5:b9:22:05:8b:c4:58:cf:d5:
c4:c3:17:8f:c3:34:8a:56:4e:ab:6c:1a:4f:6d:8b:3d:41:0a:
85:06:de:4c:31:c2:38:2c:f5:bb:ba:76:bd:f2:c0:01:83:2e:
fe:d6:d9:59:e6:f5:19:8a:fe:ea:15:f6:5d:ee:e1:03:82:5d:
8c:bb:50:9c:c5:9c:89:e5:df:65:12:b7:5e:ba:28:79:f8:01:
44:7a:3f:aa:1f:60:f2:e8:22:14:65:b8:db:a7:ed:31:70:58:
cb:23:e7:8c:16:0e:aa:fb:a0:af:68:fe:7c:d6:ed:6c:fa:39:
e0:3c:e3:43:0e:42:ee:25:2d:d1:4e:16:dd:0f:f3:00:32:f4:
6f:27:58:c3:1c:39:de:8c:c6:ec:a9:aa:b3:4f:ed:5e:bb:bd:
4d:ca:53:42:31:68:6a:28:50:4d:3f:cb:f2:4b:77:8c:40:dd:
99:2d:fd:3d:33:63:66:d6:91:ce:35:07:95:37:36:7d:78:a5:
b2:96:97:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:58 2024 by rpki-client on console-fra.rpki-client.org