Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/O7EYd2YAsYpa--jkABAl41jICtQ.roa
File: O7EYd2YAsYpa--jkABAl41jICtQ.roa (raw, json)
Hash identifier: LvTHlpUALxnNufxmAaaEwSP2FQsZ5Ds5/pfYHoCj0pU=
Subject key identifier: 3B:B1:18:77:66:00:B1:8A:5A:FB:E8:E4:00:10:25:E3:58:C8:0A:D4
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0189463A487DBA5EFAD8CF789CB154695B37
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/O7EYd2YAsYpa--jkABAl41jICtQ.roa
Signing time: Tue 11 Jul 2023 18:32:51 +0000
ROA not before: Tue 11 Jul 2023 18:32:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48108
IP address blocks: 45.142.213.0/24 maxlen: 24
45.142.215.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:46:3a:48:7d:ba:5e:fa:d8:cf:78:9c:b1:54:69:5b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jul 11 18:32:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3bb118776600b18a5afbe8e4001025e358c80ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:34:5d:17:8c:1b:fd:dd:5a:df:d9:72:5b:5d:
69:38:32:d5:40:b7:6c:df:b5:26:f1:37:4e:5e:80:
34:8b:6c:bd:37:f1:32:f9:8c:11:e9:c6:37:e7:d1:
dc:c6:74:d4:24:f5:1d:4b:3f:01:f5:06:7c:38:82:
21:db:18:07:2b:7d:c5:3e:1e:99:d0:40:9b:0b:68:
5b:ef:6d:e2:a3:9a:e5:4e:86:aa:60:04:8d:31:3f:
1d:4d:3c:ed:cd:86:e4:ff:3f:92:da:5f:78:6f:5f:
0e:02:9c:cd:08:28:55:62:48:c2:0f:a8:1a:2b:bf:
f8:6e:10:9b:b7:ad:99:de:53:1f:42:20:68:20:f9:
fa:16:8c:c6:97:c1:f8:13:12:9e:ee:f9:72:21:f6:
3c:48:6e:5c:1b:de:05:87:c5:2b:f2:7e:f5:34:35:
11:4d:a0:6b:2b:17:9c:3b:1d:27:bd:db:21:a1:a8:
e7:af:05:e7:3b:18:2e:f9:33:a9:6b:59:93:03:c6:
40:eb:80:c3:63:d4:50:c9:0b:4b:9b:4d:57:bc:97:
f6:3b:bd:82:5b:a1:f5:a4:8a:3f:8f:3d:04:95:0d:
cc:67:f7:e8:90:f5:06:a1:55:12:0b:78:2a:d2:04:
9c:f5:52:0c:db:b4:7c:fc:5a:28:89:fc:fd:f9:4b:
de:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B1:18:77:66:00:B1:8A:5A:FB:E8:E4:00:10:25:E3:58:C8:0A:D4
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/O7EYd2YAsYpa--jkABAl41jICtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.213.0/24
45.142.215.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:6b:a6:3f:27:d2:59:5f:b6:e2:53:ee:b0:b7:f3:df:ff:8b:
80:4b:08:2d:7b:b2:4b:5b:00:7b:fa:79:11:05:8e:02:5b:80:
d6:48:60:2c:01:89:1a:dc:1c:c3:15:d7:d0:d6:20:92:a6:19:
29:a8:67:44:42:c8:7b:85:43:67:92:fa:70:6e:5b:b3:f3:87:
6a:97:3b:4f:63:0c:60:35:b8:a1:f6:9b:8f:8b:46:e9:f8:d9:
9a:eb:f9:19:76:54:23:c2:2c:59:15:96:3c:9b:9e:d4:b9:7f:
fd:71:52:0f:76:1c:b5:25:6a:0c:78:23:0a:5f:c5:ae:64:b8:
2d:81:0d:93:d7:4b:54:ae:5f:33:dd:39:eb:49:8f:b5:13:81:
d7:c1:63:80:10:04:d9:23:c0:24:62:17:f2:27:17:d4:fc:6a:
6b:87:70:c6:a3:da:11:52:d1:0c:12:a3:cf:cd:3d:d5:56:18:
e4:11:38:c4:31:a2:7c:19:2a:50:ca:b1:9e:6a:5d:1f:0d:fc:
4f:31:30:3f:9c:76:45:4c:28:0b:30:8d:03:56:a9:bb:3e:5c:
76:e6:b7:41:6d:fe:e1:af:47:07:e9:48:ee:66:ef:cb:ea:09:
8b:2f:3c:1b:00:78:28:85:f3:10:51:a1:22:37:37:51:a6:1f:
68:2d:d5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:38 2024 by rpki-client on console-fra.rpki-client.org