Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/nREu_1E8PtdwjKXX5cL_SKZvTc8.roa
File: nREu_1E8PtdwjKXX5cL_SKZvTc8.roa (raw, json)
Hash identifier: vGOLY1LTYf2/fFCVj/h46zUKg8UFHUJLmgj0mAmsvxk=
Subject key identifier: 9D:11:2E:FF:51:3C:3E:D7:70:8C:A5:D7:E5:C2:FF:48:A6:6F:4D:CF
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018743CD3581931C894EA35587DD896EFCC2
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/nREu_1E8PtdwjKXX5cL_SKZvTc8.roa
Signing time: Sun 02 Apr 2023 21:08:54 +0000
ROA not before: Sun 02 Apr 2023 21:08:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42375
IP address blocks: 45.147.254.0/23 maxlen: 23
45.147.202.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:43:cd:35:81:93:1c:89:4e:a3:55:87:dd:89:6e:fc:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Apr 2 21:08:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d112eff513c3ed7708ca5d7e5c2ff48a66f4dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c2:e7:c4:72:ca:5a:40:2f:9a:02:9b:8f:f9:
f5:bb:e5:c5:d3:56:02:88:ce:42:49:68:68:51:dc:
83:c5:03:87:3d:80:40:8d:6f:cf:28:9c:aa:40:87:
18:b6:f5:8b:8a:e3:3e:31:70:a3:bb:b2:e4:b7:3a:
5e:a8:80:f7:87:85:66:00:dc:eb:83:28:fe:bc:cb:
a7:5e:c6:27:2a:58:c8:81:c2:b2:0e:f7:d5:0e:25:
10:69:3a:e4:39:0e:c3:39:c1:5a:fe:fb:d2:b6:bc:
96:64:5f:0d:e1:af:14:38:44:ba:bf:a8:4d:69:e4:
07:20:b7:31:9d:9e:c9:4f:ad:ee:61:f0:43:53:74:
d0:97:d0:e2:4d:08:03:2a:f2:8b:78:6a:73:19:e5:
c0:a0:e1:8d:04:33:27:f1:b5:d9:dc:ba:d3:ec:d8:
39:2f:a1:d0:76:90:28:07:14:20:4f:48:74:ac:a8:
d7:d9:b4:a3:be:f2:90:a9:eb:b8:61:56:82:11:10:
7f:07:d5:18:a0:bf:a8:75:e3:81:a7:21:3a:43:3b:
75:01:1e:a1:fb:4e:1d:a2:08:e9:bf:95:70:49:a6:
2b:d7:0b:92:0d:59:a9:ab:49:9c:65:0a:f0:e3:0c:
76:6a:3a:6e:e7:a4:ba:01:29:2c:ce:e8:8b:61:27:
c7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:11:2E:FF:51:3C:3E:D7:70:8C:A5:D7:E5:C2:FF:48:A6:6F:4D:CF
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/nREu_1E8PtdwjKXX5cL_SKZvTc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.202.0/23
45.147.254.0/23
Signature Algorithm: sha256WithRSAEncryption
49:8c:81:11:88:6b:6f:59:89:04:40:f3:4b:e7:d2:3a:ef:54:
47:fc:e2:a2:1d:d9:2c:6d:05:84:81:ad:a1:7a:36:78:ea:73:
a8:44:e0:d0:3c:21:de:2b:85:a2:e5:d0:a5:28:88:d3:6b:6e:
2c:e1:c3:3e:8e:ea:f4:e4:93:97:e6:71:59:59:c8:b8:71:f2:
2d:6f:f0:32:6a:7d:f9:64:ed:e1:44:ff:22:7a:88:c9:56:49:
c2:8e:4b:7c:a1:0d:2a:4f:f6:89:69:26:b6:1f:02:84:02:88:
49:4f:a5:d5:95:17:a5:b0:10:0e:54:c2:65:4a:4c:2a:bf:35:
ef:0d:c3:78:e7:ea:c3:a9:14:2e:d7:36:54:5e:83:c6:78:92:
d9:1d:e0:b9:6f:32:08:0c:7e:95:d1:33:a0:90:7a:d6:6c:e6:
12:17:7d:46:d3:26:d2:24:8d:6c:b3:70:3a:bc:0c:76:3a:ca:
e6:f6:91:5a:9e:2d:04:78:8e:28:7b:19:1b:83:9e:91:4a:64:
3c:92:95:b9:e5:fc:8e:72:05:96:34:62:09:26:67:b7:06:a1:
db:96:af:9c:f5:ff:1c:23:f8:d3:97:26:c2:33:6e:88:1a:76:
e6:04:b7:b7:1d:37:8f:52:fc:54:b9:1a:9b:a8:fe:ce:18:68:
42:b2:aa:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:01 2023 by rpki-client on console-ams.rpki-client.org