Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/6HzhryaTYeWlin0-eQ8PHSUz2ew.roa
File: 6HzhryaTYeWlin0-eQ8PHSUz2ew.roa (raw, json)
Hash identifier: facISmjdclIge+i9RfTAJNALccPj7qusBNmtMazD2J8=
Subject key identifier: E8:7C:E1:AF:26:93:61:E5:A5:8A:7D:3E:79:0F:0F:1D:25:33:D9:EC
Certificate issuer: /CN=1d5af3ae21f97ec4ec75d51a85a3e162ed7a9ed7
Certificate serial: 018A762A35D51C4DC673E02C3F29C63FB5F0
Authority key identifier: 1D:5A:F3:AE:21:F9:7E:C4:EC:75:D5:1A:85:A3:E1:62:ED:7A:9E:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVrzriH5fsTsddUahaPhYu16ntc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/6HzhryaTYeWlin0-eQ8PHSUz2ew.roa
Signing time: Fri 08 Sep 2023 18:59:52 +0000
ROA not before: Fri 08 Sep 2023 18:59:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.146.160.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:76:2a:35:d5:1c:4d:c6:73:e0:2c:3f:29:c6:3f:b5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d5af3ae21f97ec4ec75d51a85a3e162ed7a9ed7
Validity
Not Before: Sep 8 18:59:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e87ce1af269361e5a58a7d3e790f0f1d2533d9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ae:61:a4:d1:91:6d:eb:40:ff:e8:5c:c5:ed:
93:d2:d0:b2:0c:41:dc:08:ff:20:d8:27:13:40:6e:
eb:46:62:5b:20:d6:e1:b6:16:a6:2b:fc:7b:a5:c2:
70:89:fa:2b:85:4c:a8:27:b1:61:42:c6:1a:a2:b9:
98:ce:ba:67:8d:21:01:5f:39:6d:a3:73:4c:99:21:
e8:9a:f6:8e:ec:c0:0d:a8:66:ed:90:ac:fb:d2:be:
40:55:df:12:84:1a:de:82:e2:62:34:c6:59:79:9a:
a6:ae:ce:83:fc:b5:f4:0b:e9:ea:02:89:5b:c3:bb:
21:97:26:d2:76:f1:cc:e3:53:6b:9d:59:9a:b0:56:
75:5d:08:75:68:51:5f:19:45:b7:e7:fc:bb:cc:59:
12:f3:74:19:ea:8c:25:1e:46:fb:40:8d:37:ee:7f:
e3:b6:fd:7f:82:72:65:ce:7a:d0:28:8d:b8:9b:db:
4b:87:2a:81:28:20:f2:bb:83:51:92:d5:89:78:c0:
92:09:0e:f8:79:cc:87:03:03:c4:3a:1d:97:d2:8e:
ed:01:d8:12:db:fb:26:11:19:c6:e8:68:30:94:58:
af:4a:4d:b6:e3:b3:1e:0b:a2:78:5b:bd:4d:77:5d:
1e:64:6c:4f:bb:c3:05:17:7b:7e:b4:ab:78:9b:81:
46:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7C:E1:AF:26:93:61:E5:A5:8A:7D:3E:79:0F:0F:1D:25:33:D9:EC
X509v3 Authority Key Identifier:
keyid:1D:5A:F3:AE:21:F9:7E:C4:EC:75:D5:1A:85:A3:E1:62:ED:7A:9E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVrzriH5fsTsddUahaPhYu16ntc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/6HzhryaTYeWlin0-eQ8PHSUz2ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/HVrzriH5fsTsddUahaPhYu16ntc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.160.0/24
Signature Algorithm: sha256WithRSAEncryption
84:65:e9:bc:13:d5:de:72:0c:52:df:86:7d:61:51:2c:91:d7:
eb:da:4b:eb:f7:46:3c:62:12:24:d1:3f:a8:88:ec:1f:82:16:
56:69:6c:82:e5:b8:f9:bd:80:8b:73:1b:d2:f9:01:62:ba:47:
8b:57:ad:3c:b9:51:50:ab:b4:90:19:aa:3e:1c:3e:f0:29:e4:
29:42:af:96:3c:4e:9f:38:50:55:97:02:6b:63:ea:c3:b9:9a:
2e:e5:71:9d:a4:dc:4f:9f:2b:d9:b8:74:00:3a:3a:a7:58:a5:
e4:30:a8:bf:7c:bc:cf:8f:8f:f1:1a:a6:28:47:7a:a1:e5:84:
8d:d9:3e:61:08:5f:38:9d:da:1f:16:bb:aa:fe:4b:fe:06:41:
90:2f:27:32:fc:67:54:0a:e5:18:bb:ee:5d:31:3c:1c:05:53:
8e:2b:98:b0:ab:c5:a1:fe:b5:b8:69:40:31:42:03:b6:93:7c:
c2:da:d3:d1:a5:bd:46:c8:e0:09:8c:dc:1d:e4:80:74:ee:22:
b7:33:8d:00:ea:c8:f3:b2:23:7e:de:b0:b3:75:59:4b:9c:68:
a4:25:6e:29:40:ba:dc:fb:22:57:c4:2e:38:7a:ea:85:10:e4:
c7:c4:eb:da:fa:f8:9c:73:20:e2:7a:cb:59:c3:ad:f6:e6:83:
07:68:6a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 29 13:27:09 2023 by rpki-client on console-fra.rpki-client.org