Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/_Ljr8cgsWSpPK-MVoaswdfcR2pU.roa
File: _Ljr8cgsWSpPK-MVoaswdfcR2pU.roa (raw, json)
Hash identifier: qqyuXEeXbPiIsskvKl9EKWAD3wCLlfpraOsE4yL2d5A=
Subject key identifier: FC:B8:EB:F1:C8:2C:59:2A:4F:2B:E3:15:A1:AB:30:75:F7:11:DA:95
Certificate issuer: /CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Certificate serial: 0188B364BCDB67252EFED7EBE6C97C469FC0
Authority key identifier: 1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/_Ljr8cgsWSpPK-MVoaswdfcR2pU.roa
Signing time: Tue 13 Jun 2023 06:15:03 +0000
ROA not before: Tue 13 Jun 2023 06:15:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8895
IP address blocks: 164.215.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b3:64:bc:db:67:25:2e:fe:d7:eb:e6:c9:7c:46:9f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Validity
Not Before: Jun 13 06:15:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fcb8ebf1c82c592a4f2be315a1ab3075f711da95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:10:57:36:ce:70:3d:f0:d0:9a:5c:bb:1d:c6:
81:8d:d3:f7:ad:5e:63:15:b3:d6:53:dd:9f:10:0f:
77:1a:6e:db:64:aa:dd:b3:1e:2a:75:21:b3:68:4b:
8a:32:b7:5c:7b:ff:28:66:8d:80:7c:b3:4a:fd:66:
e9:76:f1:e9:cc:e2:98:eb:69:44:cb:4b:2e:a6:a7:
54:85:85:e3:84:56:8a:78:3c:19:fd:2f:87:b2:c4:
56:36:f7:c9:1e:95:c0:69:1b:cc:85:d4:ed:ae:b8:
bb:aa:24:86:60:1f:0a:8d:45:bb:5f:fb:a7:35:61:
27:82:7a:5d:55:6b:a7:a4:8e:ba:5e:0c:14:57:9c:
ef:5d:fe:8b:7e:7b:4c:2a:bb:3c:6d:4b:f2:61:ff:
77:0b:09:40:f8:39:4b:de:3d:a0:55:e8:ec:f2:7d:
ee:6b:25:a0:1a:c5:e7:64:0b:cd:18:9e:11:1b:23:
de:b1:a0:f2:ac:78:d9:ae:23:91:17:23:88:f3:e5:
6c:01:0b:ae:6d:84:3a:7d:c7:72:32:54:9e:ee:d4:
72:5a:7f:3e:20:03:58:57:23:6c:a4:02:57:1a:53:
7e:ad:5b:52:07:49:5a:70:eb:6e:b1:a8:5e:1b:e0:
0b:fe:a8:26:a1:e2:70:21:d3:57:34:ce:91:41:cf:
0b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B8:EB:F1:C8:2C:59:2A:4F:2B:E3:15:A1:AB:30:75:F7:11:DA:95
X509v3 Authority Key Identifier:
keyid:1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/_Ljr8cgsWSpPK-MVoaswdfcR2pU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.215.45.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:37:0a:44:f0:7a:2a:2d:c1:cf:fa:3d:ef:4d:a0:7a:7b:a9:
7c:ff:19:a3:40:f1:87:c7:ab:b7:75:69:7a:46:6b:bf:8e:b7:
60:72:a0:fb:e3:f9:19:9b:f2:b8:68:84:45:fb:d5:fc:81:94:
78:57:ab:da:77:5e:23:7e:53:e2:bc:45:87:3c:ff:c7:90:e3:
d2:59:f5:c4:1a:e6:e7:ba:58:62:aa:99:fd:98:ea:23:95:b3:
24:d9:32:b2:c4:9b:c0:ca:39:3b:9e:55:60:7d:d1:57:be:af:
04:0f:1a:83:33:52:60:45:3e:63:eb:22:41:fa:e8:73:5a:75:
39:24:ec:94:2a:1f:04:a7:9d:e7:e2:42:6e:22:57:a2:5d:33:
9b:de:47:c0:4e:fa:f6:76:6c:ca:26:38:7f:4f:05:e2:5e:07:
db:70:0a:70:fd:e8:9f:11:a1:8c:f4:e2:23:15:97:ed:6e:91:
72:c1:4f:41:7b:58:a2:89:1e:89:c4:73:91:78:cb:91:3e:e9:
5f:f2:f9:15:55:81:a8:89:fa:02:66:0f:19:f3:15:fa:d5:12:
76:3e:ff:03:30:cd:e3:cb:a3:16:f2:90:b8:a0:50:31:69:f4:
e3:2f:30:f4:f3:a7:ff:6c:ae:d1:9a:ed:65:25:c8:46:82:96:
31:49:b3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 1 09:13:55 2023 by rpki-client on console-fra.rpki-client.org