Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/C3MeRh_aUqrAeqfAAAXSQj7gX0M.roa
File: C3MeRh_aUqrAeqfAAAXSQj7gX0M.roa (raw, json)
Hash identifier: 21p4KwK582NMEb0/gjQMYIAD2RYo736MtMroHnaFtP0=
Subject key identifier: 0B:73:1E:46:1F:DA:52:AA:C0:7A:A7:C0:00:05:D2:42:3E:E0:5F:43
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 01867EC57E087A6BFDA64F0C6558BE26CF38
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/C3MeRh_aUqrAeqfAAAXSQj7gX0M.roa
Signing time: Thu 23 Feb 2023 14:55:17 +0000
ROA not before: Thu 23 Feb 2023 14:55:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59731
IP address blocks: 45.132.206.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7e:c5:7e:08:7a:6b:fd:a6:4f:0c:65:58:be:26:cf:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Feb 23 14:55:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b731e461fda52aac07aa7c00005d2423ee05f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d3:b0:b3:df:75:45:78:87:d4:60:06:4e:17:
c6:77:d4:5c:e2:a5:c1:61:f6:28:29:d4:e2:40:e3:
8c:0b:5a:8a:41:e9:57:2e:da:6c:f9:ac:22:6a:17:
f9:6f:49:e2:63:e0:86:a3:00:70:79:07:bb:a4:3e:
1e:da:0d:b9:9b:87:9a:c4:15:2e:ca:c5:ff:6f:8a:
8a:ea:4f:dd:52:9f:ad:ba:b9:07:39:42:3a:4e:c0:
65:6b:e0:e4:16:94:1b:ed:25:09:7e:a8:59:4e:da:
92:37:97:81:ea:7e:72:7c:e4:7b:80:93:71:cf:aa:
6e:a2:f2:5e:2c:69:35:ee:d0:5b:38:56:58:28:05:
bb:d8:79:e4:e4:48:94:0c:2f:1f:19:f0:8e:28:d8:
94:aa:11:b2:49:c2:28:84:75:59:c0:58:5e:f2:dc:
4d:4c:0d:00:e4:55:5f:b4:6e:e8:62:c9:04:75:00:
db:96:d7:c3:b5:ee:05:54:89:a9:57:dd:0e:65:c4:
7b:80:e0:e9:c8:7f:21:66:60:7b:6d:82:fe:c7:5d:
27:6d:69:3c:ab:c6:12:e8:11:d5:d8:97:ea:da:57:
4b:5f:04:10:bb:58:95:7f:c2:77:ca:63:50:2a:fc:
da:e2:56:d8:c2:4b:df:59:6d:c7:4c:ba:ac:9e:d2:
57:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:73:1E:46:1F:DA:52:AA:C0:7A:A7:C0:00:05:D2:42:3E:E0:5F:43
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/C3MeRh_aUqrAeqfAAAXSQj7gX0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.206.0/24
Signature Algorithm: sha256WithRSAEncryption
46:36:63:a0:9e:cf:c2:6e:e0:21:29:c9:e1:31:49:01:21:4a:
48:a9:33:87:73:f3:68:c0:32:e8:9f:5d:96:0e:c2:5d:a8:ef:
56:d7:84:7f:e2:a5:7a:a7:67:18:cf:a9:8a:87:2d:4c:49:cf:
97:ed:f3:b0:f9:ec:eb:89:d5:88:e1:75:ad:31:ae:20:e0:ef:
8c:11:81:98:45:a5:14:13:d4:96:dc:59:fa:82:7c:58:fb:37:
3b:e5:8a:b9:70:ee:8c:9b:ed:1d:12:a4:a7:19:0d:06:73:b3:
52:55:00:af:e6:c9:ad:a9:e1:07:3c:1a:d8:91:3a:81:e3:82:
52:6b:da:56:88:53:d1:c4:51:6e:a8:e6:bd:84:1c:71:17:f7:
e6:2e:7e:1c:3e:a8:e2:f4:d6:30:97:76:55:20:e8:6a:3f:6e:
1f:ad:d8:d1:f7:fa:65:e4:ba:42:e4:3f:91:da:3f:0a:4a:67:
cf:c6:92:ff:e7:e0:22:67:de:cc:e3:29:ce:8f:d8:c0:9f:6c:
47:99:4b:6d:6d:21:e5:2e:c4:bc:fc:f8:62:5a:97:db:35:f8:
7e:19:70:57:65:9a:4c:36:e4:a2:cb:ae:b1:bc:51:aa:73:8f:
93:7e:1b:cf:ba:e9:f2:e9:bd:ac:20:4d:80:fb:05:ee:dc:40:
cd:46:cd:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:48 2024 by rpki-client on console-ams.rpki-client.org