Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/7O7Nprm9OtQOQzQNn3LkczlGsr0.roa
File: 7O7Nprm9OtQOQzQNn3LkczlGsr0.roa (raw, json)
Hash identifier: D6+d5vZOBrJnUEoJt/PBvFNJmLgFXIbLJF689WxUAj0=
Subject key identifier: EC:EE:CD:A6:B9:BD:3A:D4:0E:43:34:0D:9F:72:E4:73:39:46:B2:BD
Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Certificate serial: 01856BDC6A484A6505154BEF7DAA4E8622D8
Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/7O7Nprm9OtQOQzQNn3LkczlGsr0.roa
Signing time: Sun 01 Jan 2023 05:44:45 +0000
ROA not before: Sun 01 Jan 2023 05:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51044
IP address blocks: 45.148.172.0/22 maxlen: 32
2a0f:600::/32 maxlen: 64
2a0f:600::/29 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:6a:48:4a:65:05:15:4b:ef:7d:aa:4e:86:22:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Validity
Not Before: Jan 1 05:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eceecda6b9bd3ad40e43340d9f72e4733946b2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b5:e4:c0:f2:2e:9c:65:8f:74:d2:75:e3:4b:
14:4d:66:e1:af:54:08:f4:2a:4a:39:21:2f:d2:24:
af:50:23:45:30:5e:93:e5:ab:c3:77:ad:85:21:dc:
9a:1f:9a:3e:91:26:40:0a:78:7b:0d:45:11:c2:2d:
f3:d6:ca:8e:f9:13:6f:fd:e5:92:5e:22:a2:07:cd:
10:9b:99:5d:2c:56:d8:ca:d9:ed:85:b6:0f:fe:c1:
42:45:53:2a:6a:ec:51:76:23:5e:35:64:77:01:5c:
78:97:fd:54:0b:62:cb:60:76:e6:0c:d1:8a:95:04:
c5:7b:63:4b:23:f6:fa:59:ef:43:df:10:25:ab:cc:
96:c5:0e:04:ea:df:ef:b8:e5:ec:1a:f3:18:5a:9c:
ec:f4:06:88:70:44:1c:16:9b:3a:87:55:ec:fc:13:
54:fb:95:07:80:ce:f9:cf:2a:3c:e0:29:87:dd:41:
8a:08:1b:93:bc:21:dd:2b:83:4c:40:af:c0:52:34:
a9:fc:53:58:ff:1d:c6:54:01:5e:2f:09:02:91:65:
b1:ca:7d:0e:51:fb:67:e1:27:c1:2e:6f:26:ac:8d:
57:56:7a:2c:7c:c6:5f:7d:8e:2b:18:fa:46:46:94:
b5:7a:4e:82:b3:12:65:3e:bd:a8:04:98:e7:ef:b7:
6b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:EE:CD:A6:B9:BD:3A:D4:0E:43:34:0D:9F:72:E4:73:39:46:B2:BD
X509v3 Authority Key Identifier:
keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/7O7Nprm9OtQOQzQNn3LkczlGsr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.172.0/22
IPv6:
2a0f:600::/29
Signature Algorithm: sha256WithRSAEncryption
a4:9d:8b:11:fd:a1:cf:f7:a1:f7:dc:35:cd:b0:a4:0c:9d:71:
3b:f4:9b:4a:3d:8f:73:73:9c:c5:60:2c:2f:36:1b:79:03:71:
9b:07:fd:3d:7f:fe:67:2d:0a:e0:70:17:b4:68:87:39:4e:1d:
e7:e3:d1:80:6b:57:e7:13:e6:07:9f:ec:e3:f6:2f:b5:d7:ab:
70:d8:af:e7:88:aa:4c:7f:f5:3c:14:d9:dc:44:cd:12:88:7f:
f0:c7:57:9e:01:d3:f7:17:fe:58:68:d7:07:89:75:4e:2b:49:
3f:54:4f:fb:5c:c5:0a:ca:f6:94:db:41:30:d4:4f:9f:78:89:
53:da:ba:4b:8a:2d:27:59:0d:e7:66:77:cb:2c:8b:0a:2b:9a:
76:59:18:2b:35:fc:62:d4:1a:dc:d3:d6:29:a7:27:68:ca:90:
18:9f:80:1b:17:76:c0:41:f1:c5:7e:e1:fe:e4:95:20:97:1e:
0b:87:ae:09:e9:35:9c:81:3a:6b:fe:d0:88:bf:b5:21:d7:b7:
37:ba:b7:32:8c:41:03:2d:ff:94:ca:05:6c:6d:8e:2a:0a:d4:
6b:e9:e3:a4:2f:2c:4a:55:40:54:53:6a:a0:77:28:7a:b2:ba:
6a:67:5a:5b:e8:7d:2e:c1:d0:8f:dc:08:84:2c:d6:09:d2:cb:
3a:12:c0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:12 2024 by rpki-client on console-ams.rpki-client.org