Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/SlRC4Oyf0HPt6dEGu8wf3FiBSmU.roa
File: SlRC4Oyf0HPt6dEGu8wf3FiBSmU.roa (raw, json)
Hash identifier: v3FIRJYxu4a3z6t7lsJUfAyPTE8Pm7Aave3vPVc9VQA=
Subject key identifier: 4A:54:42:E0:EC:9F:D0:73:ED:E9:D1:06:BB:CC:1F:DC:58:81:4A:65
Certificate issuer: /CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e
Certificate serial: 0185707966F9EDB66E121B8538F396F896FD
Authority key identifier: E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/SlRC4Oyf0HPt6dEGu8wf3FiBSmU.roa
Signing time: Mon 02 Jan 2023 03:14:42 +0000
ROA not before: Mon 02 Jan 2023 03:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208259
IP address blocks: 45.129.104.0/24 maxlen: 24
45.129.107.0/24 maxlen: 24
2a0e:47c7:1000::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:66:f9:ed:b6:6e:12:1b:85:38:f3:96:f8:96:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e
Validity
Not Before: Jan 2 03:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a5442e0ec9fd073ede9d106bbcc1fdc58814a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0d:2a:8d:10:24:16:03:6c:54:1d:b2:b4:bd:
72:a4:70:81:ac:3c:48:e0:c0:84:52:1a:9b:14:36:
5c:15:45:0c:af:32:27:6b:c0:10:03:df:5a:08:ee:
45:da:20:8f:55:8a:08:a2:c9:df:69:a7:3c:18:c0:
e1:f6:8b:0b:de:ce:4e:14:64:7e:fb:b0:1e:3e:07:
ae:2b:fe:5a:db:44:cd:a5:a2:63:70:de:6f:c6:88:
7d:02:76:da:ea:f0:a9:ed:e2:72:db:70:16:b8:ad:
a6:14:d1:e5:a6:5f:44:51:67:5c:b9:ff:12:e7:bf:
8c:2a:9e:9b:48:d6:b0:2c:db:23:2c:44:55:88:d2:
9a:bb:43:7a:3b:c5:73:4d:1b:84:eb:d6:58:6c:b1:
4c:7b:66:2e:b3:9a:bb:bb:42:50:d9:a2:a7:31:b5:
96:6f:73:b6:41:19:d0:ab:e6:c7:d2:b3:dd:06:16:
23:28:55:ad:f1:c4:ce:d3:64:2a:43:3d:aa:8c:d5:
4f:09:fc:fd:a4:38:19:31:48:36:a9:4f:d2:57:00:
0a:5d:30:3e:8d:3b:ef:09:bb:8a:44:69:ee:7f:3a:
31:d5:63:cd:ba:4e:fc:cd:ed:b9:e4:35:34:21:12:
12:86:3f:b5:4c:a8:f4:45:95:c5:ca:bc:e3:8f:81:
f5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:54:42:E0:EC:9F:D0:73:ED:E9:D1:06:BB:CC:1F:DC:58:81:4A:65
X509v3 Authority Key Identifier:
keyid:E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/SlRC4Oyf0HPt6dEGu8wf3FiBSmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.104.0/24
45.129.107.0/24
IPv6:
2a0e:47c7:1000::/48
Signature Algorithm: sha256WithRSAEncryption
21:6a:92:63:8d:51:1c:6c:de:d1:8d:fb:cc:a0:bb:da:82:a3:
0f:c5:3a:d7:48:5e:89:ab:7d:79:e4:20:a4:c3:c0:16:90:a3:
f2:17:d6:7b:c7:68:99:50:fb:9a:12:2f:1a:ab:6b:2f:9d:08:
ce:be:e3:df:ec:73:2e:f4:57:2e:15:bd:29:41:e2:5d:58:cb:
6f:68:06:b2:a4:60:b4:5d:26:fd:ef:91:92:16:47:1b:d2:0e:
d6:cf:98:73:a9:22:b1:11:f0:82:e0:9d:8a:3b:10:03:a0:29:
0d:a7:9b:4e:98:2e:94:f0:11:09:10:87:7e:7b:86:16:d8:a0:
ad:9f:21:69:eb:ef:ab:e6:da:34:b7:08:7b:26:98:9d:19:3c:
87:a4:36:b5:c3:15:c0:11:29:e1:32:cd:10:cb:7f:a7:98:ff:
6d:77:23:5b:3a:7d:99:ea:33:f4:6e:18:5f:e6:b9:7b:d6:6c:
2e:a0:cd:97:e4:a6:42:26:1b:9c:cf:f9:54:48:8c:f1:da:a7:
4d:f2:e7:55:a4:6f:aa:fe:85:d3:e1:d6:2d:ea:cd:91:c9:32:
6a:43:24:cf:78:c8:cc:3b:25:06:7e:de:fc:fa:6d:37:1e:91:
04:e6:e5:0f:95:21:ec:2f:98:bf:65:32:55:e9:c9:e4:60:22:
51:54:e8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:51 2023 by rpki-client on console-ams.rpki-client.org