Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/WOttseJMlO2ZASYRz3VHaWhoOcw.roa
File: WOttseJMlO2ZASYRz3VHaWhoOcw.roa (raw, json)
Hash identifier: ORu/XW8i22sAcb2ERuVvgOLNyHvaozBHpaV8pXnfdVU=
Subject key identifier: 58:EB:6D:B1:E2:4C:94:ED:99:01:26:11:CF:75:47:69:68:68:39:CC
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018C116725801B3BCAA78EDDA0FF9600CFB1
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/WOttseJMlO2ZASYRz3VHaWhoOcw.roa
Signing time: Mon 27 Nov 2023 15:30:21 +0000
ROA not before: Mon 27 Nov 2023 15:30:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44648
IP address blocks: 45.151.147.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:11:67:25:80:1b:3b:ca:a7:8e:dd:a0:ff:96:00:cf:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Nov 27 15:30:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58eb6db1e24c94ed99012611cf754769686839cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e0:26:b5:a6:fe:03:49:19:1e:8a:48:19:ce:
72:2a:ac:76:f1:f5:13:df:a2:ad:a3:84:a2:e3:a6:
b5:48:2b:f6:04:14:7f:c3:54:4c:9a:47:81:d7:b2:
6e:e8:86:44:f4:e4:34:47:80:4f:94:38:8a:23:12:
bc:26:63:48:9e:6c:be:67:c2:ec:36:5b:c7:b8:17:
98:26:cc:60:6a:ab:36:72:7f:37:48:79:41:b7:6f:
70:f2:d3:e2:3d:3f:17:01:ac:f4:15:76:5a:1d:f9:
ff:f1:b5:2e:15:45:3c:d1:9f:72:39:27:a7:c8:c4:
ce:32:23:0f:38:ef:c6:25:7d:58:fc:1c:bb:44:3e:
4d:30:c0:b1:02:46:5a:d0:71:ff:85:88:eb:fc:17:
06:76:d6:64:4e:d4:2e:08:8a:5d:68:7e:06:d3:e5:
64:ed:70:06:a7:27:78:8e:10:bd:23:74:25:39:1b:
7e:4a:fb:16:95:8f:95:7c:bd:eb:5a:61:f0:c1:c4:
13:8e:4c:15:59:f2:19:62:bc:6b:53:1c:2e:5e:21:
b6:fe:d4:e6:46:3e:32:da:3e:59:6d:3b:5b:3e:13:
b9:29:9a:74:2a:58:66:c5:1b:f6:95:8b:0d:cb:73:
3e:1d:49:75:51:c4:7b:60:a5:92:69:0f:b6:be:b7:
5b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:EB:6D:B1:E2:4C:94:ED:99:01:26:11:CF:75:47:69:68:68:39:CC
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/WOttseJMlO2ZASYRz3VHaWhoOcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.147.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:34:76:4c:31:55:68:71:60:e9:f7:06:24:41:c2:46:83:2d:
9b:d7:a4:64:78:0d:f9:64:d0:9a:93:3d:0d:6a:bd:f2:ad:2a:
65:ec:06:a0:f0:f0:62:0d:bd:eb:0c:5d:9f:e6:eb:e2:79:95:
a4:46:bd:05:d9:5a:51:69:e3:0b:6d:4b:f5:06:87:36:5a:64:
9f:db:eb:d1:8f:0d:88:19:51:43:ee:b6:59:e0:3c:56:d1:22:
ce:0b:ca:4c:3e:aa:cb:fb:3c:d2:c4:13:52:78:63:d9:db:df:
5d:e6:e2:3b:70:89:84:9f:85:e1:95:b8:2f:56:59:68:ec:47:
93:31:d2:f3:cc:2a:dd:c8:c2:62:72:f0:b8:eb:24:34:4b:33:
61:99:a7:5f:5e:d0:a3:ea:58:f5:b2:d6:53:41:e8:15:e8:ee:
16:2c:82:b9:aa:ba:79:3b:c5:b6:2e:b2:05:5b:03:ed:df:02:
0e:a6:c9:c3:49:43:29:3a:3a:ee:b6:eb:30:ca:46:ee:93:a9:
6d:cc:72:8c:c2:5e:cb:34:69:5b:2f:c2:81:17:a7:35:a2:35:
c5:b5:8e:56:ae:79:34:20:90:04:b3:0d:0f:f9:21:65:90:21:
f8:f5:f7:09:9d:cd:0b:4b:e1:6b:b3:b8:70:28:6a:9c:53:ee:
a5:74:c0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:58 2024 by rpki-client on console-fra.rpki-client.org