Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/V-5t-8Rxe7k-hbeWP8Kg0WMQr0Q.roa
File: V-5t-8Rxe7k-hbeWP8Kg0WMQr0Q.roa (raw, json)
Hash identifier: Olu6Ef2eAF55qG89wHzsmme1kf/Qi69ExBiLljm1A0Y=
Subject key identifier: 57:EE:6D:FB:C4:71:7B:B9:3E:85:B7:96:3F:C2:A0:D1:63:10:AF:44
Certificate issuer: /CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Certificate serial: 018A647D9B1175CA8767A481A966055D2957
Authority key identifier: 0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/V-5t-8Rxe7k-hbeWP8Kg0WMQr0Q.roa
Signing time: Tue 05 Sep 2023 08:37:47 +0000
ROA not before: Tue 05 Sep 2023 08:37:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58075
IP address blocks: 45.150.244.0/22 maxlen: 24
185.248.236.0/22 maxlen: 24
176.56.44.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:64:7d:9b:11:75:ca:87:67:a4:81:a9:66:05:5d:29:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Validity
Not Before: Sep 5 08:37:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57ee6dfbc4717bb93e85b7963fc2a0d16310af44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d0:8d:ee:60:4a:3f:cf:ea:0c:58:ce:ab:9c:
23:47:80:a5:79:32:cb:92:50:e6:13:30:64:8c:79:
9c:a8:8b:88:db:ee:5e:2c:f5:f0:42:59:95:4b:9f:
17:92:7d:d4:7b:5e:00:20:1c:48:68:88:39:98:e0:
f0:b3:15:2a:b9:b9:6c:74:ea:fa:65:da:7f:2f:45:
04:6b:3c:6d:ec:3d:db:46:05:26:ca:dd:8c:72:de:
56:3e:36:32:94:aa:7b:3c:2d:00:8c:21:a1:de:0e:
f5:8a:0d:42:19:87:d6:31:3a:45:7e:94:44:a0:88:
c0:8d:a5:25:33:63:b9:dc:6e:f5:aa:1b:00:e1:7c:
7b:15:3a:4a:fc:a5:e9:f5:12:2e:14:5d:ae:e3:2e:
5f:8e:cc:ba:58:a5:5c:54:d4:8a:f4:ee:0d:f7:2c:
42:88:0e:31:90:ff:ad:af:e8:78:da:4a:2f:79:2d:
14:12:92:d4:a1:d7:e6:3c:5e:92:67:8e:5a:a7:86:
51:5f:99:e1:b3:f8:b4:71:97:de:98:17:79:7f:59:
d1:fd:92:09:ee:91:e8:cc:74:7c:38:35:cb:b1:08:
3b:47:76:5a:a1:e0:e1:29:fa:6e:a3:2f:d4:72:7a:
50:99:9b:1e:fb:e0:c6:c0:78:23:3d:1f:07:4e:ef:
f6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:EE:6D:FB:C4:71:7B:B9:3E:85:B7:96:3F:C2:A0:D1:63:10:AF:44
X509v3 Authority Key Identifier:
keyid:0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/V-5t-8Rxe7k-hbeWP8Kg0WMQr0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.244.0/22
176.56.44.0/22
185.248.236.0/22
Signature Algorithm: sha256WithRSAEncryption
68:d7:58:dc:a7:c1:da:86:61:d3:7b:8d:35:8b:0e:82:ba:5a:
cc:6b:db:39:e8:19:84:1f:29:2a:a2:f0:65:e4:7e:e0:7a:8c:
f2:6b:91:4c:2d:ff:11:9f:37:da:a3:af:fc:94:25:74:d7:d0:
b7:1b:e2:b8:e3:3c:72:ef:3a:37:3d:b7:2c:06:25:ae:03:98:
8d:fb:0f:ee:03:3e:34:d7:71:26:1d:8c:33:9f:e6:72:40:46:
8e:60:05:1e:d1:6f:47:f1:c6:ef:4d:7e:8c:77:68:6e:29:a5:
fc:44:f8:89:46:71:64:80:8a:db:ed:92:49:5c:14:8a:28:bc:
43:bc:66:54:60:d6:d0:75:b8:4a:a7:e5:a8:f1:c5:c3:31:84:
9a:2c:2c:61:d3:75:23:16:d1:87:37:40:c3:f1:21:18:e7:e4:
4a:4b:69:b7:5d:69:70:c8:3f:e7:a9:17:91:9e:71:7b:fa:09:
81:7d:7f:1f:31:68:dc:5d:55:da:a0:63:bc:7f:50:9b:65:de:
ad:dc:49:da:98:63:fc:72:ef:4a:0a:d0:eb:c5:b7:4e:c7:0c:
b7:bf:45:f7:66:80:17:53:20:c3:62:0e:72:8d:25:c8:b4:6f:
f2:b2:b5:16:a1:62:48:ae:fb:a9:f1:54:8b:7a:2d:cf:df:c7:
c9:79:fa:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:16 2024 by rpki-client on console-fra.rpki-client.org