Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/NKZzqelykS4ILUvTF2MCkUx5BzE.roa
File: NKZzqelykS4ILUvTF2MCkUx5BzE.roa (raw, json)
Hash identifier: 2tZcBTric2NzeS/2sAdHqGwiGK9mwRoWZ0WDloku648=
Subject key identifier: 34:A6:73:A9:E9:72:91:2E:08:2D:4B:D3:17:63:02:91:4C:79:07:31
Certificate issuer: /CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f
Certificate serial: 0186D16EEDEF87FF04F462A7D1477EA4E777
Authority key identifier: 5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/NKZzqelykS4ILUvTF2MCkUx5BzE.roa
Signing time: Sat 11 Mar 2023 16:09:13 +0000
ROA not before: Sat 11 Mar 2023 16:09:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200017
IP address blocks: 45.152.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d1:6e:ed:ef:87:ff:04:f4:62:a7:d1:47:7e:a4:e7:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f
Validity
Not Before: Mar 11 16:09:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34a673a9e972912e082d4bd3176302914c790731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:db:b0:5d:8e:ef:4e:ba:75:d5:db:d9:82:64:
2c:db:52:5f:4d:11:13:de:d4:a5:26:d3:27:ba:1f:
40:e9:8c:bd:16:23:de:9d:09:5a:8b:ed:e4:b6:50:
b6:bd:46:85:00:45:41:51:ab:81:8a:bc:b5:f1:33:
2f:70:84:15:9e:23:98:0a:a1:54:6e:04:0c:6f:5d:
54:e1:b5:cc:2f:bc:fb:55:08:59:45:82:33:8f:bc:
ca:20:ea:66:aa:11:42:6d:e0:e3:82:31:74:42:d8:
81:fa:ca:59:c1:c1:3f:23:6d:11:16:ff:21:af:84:
a0:dc:a8:e5:37:0e:3c:73:ab:91:02:a0:8b:49:3e:
f7:53:ea:79:07:ca:59:a1:27:1f:40:f8:4f:73:fa:
4e:a4:80:b2:64:5e:5f:4d:af:24:a8:5b:50:55:1c:
d4:c4:bf:00:9f:4f:3a:4c:60:3f:0b:3d:5e:ff:83:
bf:45:0f:b6:12:6a:69:76:33:a7:cf:a8:68:fe:55:
33:b0:1a:b1:0c:d6:d4:18:dd:71:32:b8:8a:5b:a6:
c0:1b:f0:9e:41:35:a9:ba:2d:a3:2b:d3:72:c1:92:
92:77:4a:31:26:1c:b2:1f:06:18:11:f9:7a:af:c9:
45:ca:d1:72:2c:0c:75:cf:bf:c7:00:87:66:11:2a:
ee:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A6:73:A9:E9:72:91:2E:08:2D:4B:D3:17:63:02:91:4C:79:07:31
X509v3 Authority Key Identifier:
keyid:5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/NKZzqelykS4ILUvTF2MCkUx5BzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.176.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:a7:a0:5e:bc:04:22:0d:6a:8d:26:8d:c8:7a:d6:72:73:1f:
1c:a2:58:37:a1:56:24:fd:cd:50:94:03:c8:41:af:ae:05:88:
17:8b:22:72:f6:30:5c:62:f2:8b:a0:d6:b7:a0:03:59:fd:7b:
36:b9:20:c9:fc:03:9e:14:23:90:84:e8:77:ee:69:d0:6d:53:
74:51:e5:cb:09:c8:92:a0:41:c6:6f:1e:06:50:27:df:79:91:
4f:5d:67:e8:c5:96:7e:ea:5d:2c:9f:03:3c:07:ae:1a:5e:28:
0c:5c:7f:94:d4:3e:d0:71:66:60:76:69:92:79:0c:12:13:52:
1c:f9:fd:fa:86:06:36:55:2c:61:fe:b1:73:79:94:84:83:e0:
59:ca:cc:d7:9d:78:dc:03:74:87:6b:52:1b:d8:dc:5e:db:8c:
6e:97:7d:37:af:d2:51:b5:19:af:99:40:e1:f6:10:66:62:23:
04:a5:23:35:3f:c8:2b:c5:00:df:51:65:0d:c0:10:f5:9b:be:
5c:c9:5e:b5:bd:5c:b2:3f:79:f4:3a:02:fd:d6:e5:8c:8c:68:
ba:d3:80:24:df:0c:7b:83:49:84:f2:8e:5e:60:b6:dd:da:ee:
39:c2:7c:f8:6d:ed:ba:08:1f:28:90:06:f1:07:85:1f:ee:a5:
f6:a6:38:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:58 2024 by rpki-client on console-fra.rpki-client.org