Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Rj6GPv0MBxIsw-4Y7qwHTcFm4jA.roa
File: Rj6GPv0MBxIsw-4Y7qwHTcFm4jA.roa (raw, json)
Hash identifier: xjNHk29x0o5XjT8vpDBf4Jz6EkSCXl90Q0K0W2C6s7k=
Subject key identifier: 46:3E:86:3E:FD:0C:07:12:2C:C3:EE:18:EE:AC:07:4D:C1:66:E2:30
Certificate issuer: /CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Certificate serial: 01856F94A0D7A1374C7DC03059BDCFA99759
Authority key identifier: 51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Rj6GPv0MBxIsw-4Y7qwHTcFm4jA.roa
Signing time: Sun 01 Jan 2023 23:04:49 +0000
ROA not before: Sun 01 Jan 2023 23:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 45.158.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:a0:d7:a1:37:4c:7d:c0:30:59:bd:cf:a9:97:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Validity
Not Before: Jan 1 23:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=463e863efd0c07122cc3ee18eeac074dc166e230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:82:48:ed:a6:11:7a:bb:5d:60:74:c2:1b:59:
dd:5f:a0:d0:55:57:96:ae:83:5b:55:f1:d2:91:b6:
a2:e5:4c:44:61:e0:b9:43:96:ed:f9:3c:42:da:96:
a6:11:3b:3e:7e:db:c1:07:64:2b:13:75:da:85:a8:
48:db:ae:57:5b:49:19:b4:62:7b:fc:f5:b9:fa:89:
a2:c0:6a:ab:5b:83:ea:da:55:f9:89:8c:ba:00:c4:
06:6e:eb:42:6e:59:25:08:0b:24:e3:e1:5c:77:02:
9c:e6:b9:09:4d:30:81:81:1a:5b:af:1f:c7:1e:03:
41:f1:bf:43:0d:7f:75:9c:d1:04:c8:43:88:12:a8:
e6:23:99:82:d3:3e:9c:68:81:ca:12:d1:54:56:e6:
ed:9c:e6:a8:49:2d:c4:42:23:1d:ee:93:45:40:09:
91:bc:ce:b7:47:e2:68:de:f8:b1:42:9b:6c:00:72:
1a:8f:72:7f:c4:6a:f1:1e:8c:71:67:30:3f:ea:9f:
b0:a8:15:c2:06:55:73:94:3c:60:9f:5e:3f:5a:9d:
70:16:11:0d:84:7f:d8:7b:19:5a:f7:d8:38:52:88:
9d:cd:74:16:e4:94:75:b0:0c:15:51:87:df:7f:4b:
56:08:41:3e:49:df:14:bc:9d:08:d6:ac:2f:35:60:
be:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:3E:86:3E:FD:0C:07:12:2C:C3:EE:18:EE:AC:07:4D:C1:66:E2:30
X509v3 Authority Key Identifier:
keyid:51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Rj6GPv0MBxIsw-4Y7qwHTcFm4jA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.61.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:85:4a:97:3f:d6:8f:8e:a3:42:c9:d6:67:2c:ee:c8:36:03:
29:f1:ce:46:97:65:17:7c:4a:a0:18:b7:d3:a3:77:6b:b4:80:
b1:a9:90:e2:68:7f:56:44:3c:9a:23:d8:b2:44:26:51:0a:16:
2b:99:65:80:b4:fe:ab:60:34:c8:6b:48:2e:9c:bb:31:d9:4c:
f9:10:49:fb:a0:39:73:b1:7c:ef:de:08:0d:ee:5c:f3:ff:66:
5d:22:c6:11:f2:35:30:a4:37:0f:2d:ac:31:b9:b6:03:97:44:
15:cd:98:f0:75:89:f9:d5:46:85:92:13:7c:67:e9:7c:e8:71:
e0:f7:ae:16:ea:2c:92:80:a2:b9:a2:77:ba:b5:64:8f:10:d1:
d6:89:88:41:53:13:eb:a2:15:a9:7d:67:ae:0c:43:25:cb:a5:
b5:c5:38:41:59:bb:bb:f0:8b:bf:55:60:f3:be:a0:ce:59:88:
f1:2b:d4:48:1e:9f:a4:a0:11:a4:12:4c:e8:64:ca:73:9d:18:
88:fc:26:88:16:ae:f4:3e:a0:5f:97:fa:7d:18:e9:66:b6:1f:
7d:31:10:22:67:e9:21:ad:4e:f8:6c:09:67:67:4e:19:16:a7:
b0:90:8a:7b:fb:b0:bd:d4:c2:5f:6e:7b:4a:71:c5:fc:7b:92:
f3:55:dc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:08 2023 by rpki-client on console-ams.rpki-client.org