Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e4a7ac-1b5b-4bac-8557-63f6202e4bf4/1/wdpzWh0dN1tkoNgLgZzcQK0UpNY.roa
File: wdpzWh0dN1tkoNgLgZzcQK0UpNY.roa (raw, json)
Hash identifier: IpiSO6TLN7Lo4r58XPZ0CHgDPP0tje+wPiH8LN+fHiI=
Subject key identifier: C1:DA:73:5A:1D:1D:37:5B:64:A0:D8:0B:81:9C:DC:40:AD:14:A4:D6
Certificate issuer: /CN=210f7948f5e7dccbb62ba8f53c35ba5525631b70
Certificate serial: 01856B4A0148F532448AFB9E0F0C798DE808
Authority key identifier: 21:0F:79:48:F5:E7:DC:CB:B6:2B:A8:F5:3C:35:BA:55:25:63:1B:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ95SPXn3Mu2K6j1PDW6VSVjG3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e4a7ac-1b5b-4bac-8557-63f6202e4bf4/1/wdpzWh0dN1tkoNgLgZzcQK0UpNY.roa
Signing time: Sun 01 Jan 2023 03:04:50 +0000
ROA not before: Sun 01 Jan 2023 03:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208248
IP address blocks: 45.151.48.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:4a:01:48:f5:32:44:8a:fb:9e:0f:0c:79:8d:e8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=210f7948f5e7dccbb62ba8f53c35ba5525631b70
Validity
Not Before: Jan 1 03:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1da735a1d1d375b64a0d80b819cdc40ad14a4d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:db:c2:e3:b3:30:83:ef:b9:54:71:ef:65:4d:
21:b9:f6:ae:46:f9:af:c1:73:d6:35:4c:00:8e:3a:
a9:c1:76:fd:26:4e:74:ae:4f:39:e4:c9:fd:b0:8d:
8a:97:99:a0:0c:59:4a:a7:88:c4:02:d3:51:68:55:
ec:e0:af:48:c4:1a:13:55:9b:64:9c:d0:14:e0:9f:
bd:dd:e3:af:3a:16:cb:a8:b7:55:3d:18:38:53:4e:
d3:fb:5c:d5:77:30:19:80:e1:a9:12:7e:62:a8:df:
bc:50:d2:1e:29:bc:6e:c8:e3:95:7b:ec:97:f1:ad:
6c:31:56:f3:f5:c8:b3:f1:59:10:e2:1f:f0:ef:f0:
cb:60:c9:0f:c9:30:ca:11:65:98:9c:bd:a9:a6:ea:
08:1c:a6:05:82:55:15:5f:48:fb:6b:dd:87:9d:73:
46:ca:33:09:85:5d:b4:e0:ad:2a:cf:3d:fe:bb:97:
53:3c:ac:9b:a1:74:28:97:08:08:1d:c9:4b:56:a9:
e1:30:bd:02:4c:bd:cb:5e:f1:14:d4:d3:93:f9:6e:
61:91:8e:70:12:2c:ea:49:64:27:4b:df:dd:80:f2:
f8:b9:d6:dd:09:d8:ab:a9:e7:99:95:76:fb:bf:e1:
f7:8e:1c:10:5e:ba:a8:7d:6e:68:42:af:9c:03:55:
d1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DA:73:5A:1D:1D:37:5B:64:A0:D8:0B:81:9C:DC:40:AD:14:A4:D6
X509v3 Authority Key Identifier:
keyid:21:0F:79:48:F5:E7:DC:CB:B6:2B:A8:F5:3C:35:BA:55:25:63:1B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ95SPXn3Mu2K6j1PDW6VSVjG3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4a7ac-1b5b-4bac-8557-63f6202e4bf4/1/wdpzWh0dN1tkoNgLgZzcQK0UpNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4a7ac-1b5b-4bac-8557-63f6202e4bf4/1/IQ95SPXn3Mu2K6j1PDW6VSVjG3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.48.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:48:94:11:b9:ee:78:c3:38:0c:ab:0d:42:59:5e:c8:ef:37:
7f:24:c4:e1:5e:f1:dd:b6:40:fb:ff:6a:f9:8c:7b:14:d5:e4:
d5:e5:f0:a8:ec:77:f2:e4:3b:cf:fd:82:8d:c0:39:4e:87:d5:
3f:23:a9:fd:1b:94:bf:fd:0b:4f:d7:d9:18:ae:21:5c:db:ab:
d4:ae:33:00:82:8e:7a:ff:9d:59:d9:fe:67:38:2c:43:ee:72:
b6:59:5a:2f:d4:fc:56:1b:c5:0e:94:38:e1:4a:3b:2d:b0:d6:
b7:01:63:8d:68:f6:26:d9:37:25:fe:fc:ae:ae:dc:cb:ae:55:
b6:48:a4:07:06:9e:ad:10:77:53:7e:5f:19:b8:78:92:46:ce:
1b:59:3e:99:f7:e8:83:64:de:05:ba:42:65:58:ef:1c:49:e9:
ed:02:ae:45:e3:a6:4c:4d:32:b3:c4:b0:4a:07:7b:fa:ba:ca:
50:77:29:e0:08:03:3b:2c:a2:6d:02:3f:ac:40:c6:2b:de:1f:
a9:35:54:e2:80:f4:0d:90:4f:15:bd:34:93:bc:19:1d:d8:38:
62:d7:8b:da:4c:b0:2a:da:58:b6:a4:ee:4e:8c:cc:ce:3a:81:
cd:4d:45:e0:c8:d3:d9:37:59:f3:dd:8d:35:29:74:ae:d8:dc:
77:98:4f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:28:18 2024 by rpki-client on console-fra.rpki-client.org