Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/KhwhaDaxf0OgUTlepceIDVKmkSk.roa
File: KhwhaDaxf0OgUTlepceIDVKmkSk.roa (raw, json)
Hash identifier: bUAaAW9W9/ZdigE7DjEm73itmV74mN/O/5bQ5grwkSE=
Subject key identifier: 2A:1C:21:68:36:B1:7F:43:A0:51:39:5E:A5:C7:88:0D:52:A6:91:29
Certificate issuer: /CN=ecd6bdacc521edca4c076048da86fed5dcd61220
Certificate serial: 0185707971380C256C6A137543D95C08EBE1
Authority key identifier: EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/KhwhaDaxf0OgUTlepceIDVKmkSk.roa
Signing time: Mon 02 Jan 2023 03:14:45 +0000
ROA not before: Mon 02 Jan 2023 03:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56851
IP address blocks: 45.83.192.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:71:38:0c:25:6c:6a:13:75:43:d9:5c:08:eb:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecd6bdacc521edca4c076048da86fed5dcd61220
Validity
Not Before: Jan 2 03:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a1c216836b17f43a051395ea5c7880d52a69129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:25:88:08:64:14:11:4d:fa:5f:3f:ab:e0:e0:
97:1b:fa:23:e3:4a:62:de:75:a0:d5:0c:85:f1:f2:
32:22:42:57:02:72:cc:91:d6:0a:ec:f3:23:83:7a:
93:66:81:23:8a:90:3d:07:f8:a7:97:83:2b:24:8f:
46:9f:55:61:b5:4a:6d:e1:3f:c8:a0:bb:d5:6b:df:
aa:59:84:97:89:2d:76:52:d8:ae:28:ab:f1:88:e5:
df:8d:db:bd:1d:b7:3d:39:1a:84:fb:3d:93:ad:50:
90:70:f5:12:4a:5b:34:97:40:9c:2b:fc:47:2d:ae:
34:39:43:f1:54:99:63:fe:9c:e0:5d:91:a6:4e:a9:
02:c5:5e:4a:98:64:b7:70:08:e8:b5:a2:9c:36:32:
cc:f9:68:32:94:47:95:74:93:ad:45:ee:bc:30:e3:
2e:fb:3c:fd:ea:3f:2b:f5:ad:81:ef:70:f7:78:e5:
8e:0f:ef:ef:e5:c0:60:cc:b4:56:60:2c:d0:ea:79:
a9:51:04:5b:8d:a5:ac:55:b7:0a:06:37:42:a8:4f:
63:71:36:af:2e:19:cb:d7:b6:59:02:4b:5f:3e:f9:
9f:e3:bb:92:57:7e:ec:ad:ff:b9:92:99:f8:3c:d9:
f0:40:61:7c:6d:b2:27:50:23:e5:cd:92:1e:6f:e5:
d0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1C:21:68:36:B1:7F:43:A0:51:39:5E:A5:C7:88:0D:52:A6:91:29
X509v3 Authority Key Identifier:
keyid:EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/KhwhaDaxf0OgUTlepceIDVKmkSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.192.0/22
Signature Algorithm: sha256WithRSAEncryption
27:47:e4:51:95:3c:cb:c5:bb:00:97:88:c9:b4:b1:16:c2:6e:
70:0a:e6:c6:6a:f7:0f:41:58:73:a5:43:9d:c5:bb:4c:a6:8c:
2d:35:aa:df:ed:65:2d:9b:70:16:d2:b7:d2:bf:5c:7d:73:99:
ce:1b:cc:05:a8:c4:c2:d4:4d:02:9e:a0:c7:05:65:65:70:53:
f4:a1:0c:0e:d5:d9:6b:1e:60:5b:43:5c:d8:85:a0:89:d7:a0:
c0:f8:8c:fe:fb:a7:04:cf:2f:04:7d:e6:6e:42:54:c2:a2:47:
89:c2:c8:1e:dd:db:50:1a:4a:49:2a:58:93:d4:9a:3b:80:61:
8c:9a:1b:6b:ec:51:b6:eb:a6:3e:29:c5:a8:97:7f:66:dd:bd:
49:29:4c:bd:9e:1a:41:c3:91:b5:d4:c1:b4:ac:63:a4:4a:96:
61:8e:4d:8c:5b:cc:0b:a6:fb:9c:2b:da:f8:0b:88:f5:4c:52:
4e:2c:30:01:0f:65:b8:7c:e6:85:69:b6:44:f2:ea:eb:d7:6d:
34:c5:7b:1a:6f:f5:9d:09:77:40:1d:12:79:e5:36:c9:49:c1:
2e:22:9c:70:e2:6e:9a:12:5e:ef:16:f6:7f:82:82:62:79:76:
14:e1:aa:50:2d:3c:b0:7c:5d:7c:f1:b3:9f:e3:c9:72:b5:6b:
6b:37:4f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:40:14 2024 by rpki-client on console-fra.rpki-client.org