Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b1e1c5-621b-458a-8e53-de37a01c6c39/1/61gUJw0cr5sHUJ9acP8o2vWIMqY.roa
File: 61gUJw0cr5sHUJ9acP8o2vWIMqY.roa (raw, json)
Hash identifier: zG6D8VfDgiE6Q2gMKUYJ0F1InORJdq9SYy+MPbD9U+U=
Subject key identifier: EB:58:14:27:0D:1C:AF:9B:07:50:9F:5A:70:FF:28:DA:F5:88:32:A6
Certificate issuer: /CN=07ff23644ee765f1731dbd559e608bdc0053c34b
Certificate serial: 01856CCADA29EDE497A6CFFDD38208378FC3
Authority key identifier: 07:FF:23:64:4E:E7:65:F1:73:1D:BD:55:9E:60:8B:DC:00:53:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_8jZE7nZfFzHb1VnmCL3ABTw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b1e1c5-621b-458a-8e53-de37a01c6c39/1/61gUJw0cr5sHUJ9acP8o2vWIMqY.roa
Signing time: Sun 01 Jan 2023 10:05:11 +0000
ROA not before: Sun 01 Jan 2023 10:05:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210546
IP address blocks: 45.132.1.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:da:29:ed:e4:97:a6:cf:fd:d3:82:08:37:8f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ff23644ee765f1731dbd559e608bdc0053c34b
Validity
Not Before: Jan 1 10:05:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb5814270d1caf9b07509f5a70ff28daf58832a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:28:5a:9d:8f:91:f3:cf:ce:13:9e:e2:b7:1e:
ba:16:bb:df:09:48:11:0f:4e:ce:33:cd:ae:f4:01:
10:a0:85:bd:d4:ea:89:d4:b1:5b:98:21:fa:03:25:
5f:ca:dd:07:d4:89:24:4f:f9:ae:05:12:23:36:b9:
8c:e3:d6:61:7c:97:ea:4d:72:e9:1c:15:ed:53:c3:
69:e1:c6:fd:0a:75:6b:86:26:78:49:a6:ed:1e:3d:
74:de:38:b4:d6:fa:42:05:d0:70:74:4a:cf:07:9b:
c7:52:34:b9:8e:27:82:d9:31:9e:fb:b1:24:8a:ce:
5d:69:eb:77:ff:0e:34:20:74:65:83:a1:18:0c:e4:
b7:ed:d4:db:49:db:1c:1d:de:9d:1a:df:a2:b6:c0:
38:8e:2d:a3:ab:59:c9:ef:bc:b3:25:80:f2:5d:81:
d1:76:8f:48:33:9c:05:69:a1:41:fc:f1:ea:9b:89:
f3:50:19:a8:34:c6:d1:a2:71:47:d3:be:9e:80:aa:
2c:7c:76:3c:1f:2d:5f:1b:d7:e4:ad:20:fc:4d:3a:
f0:fa:35:2c:9c:91:43:90:d8:e2:df:70:c3:78:9c:
11:fc:68:2d:81:f7:e3:37:8b:ae:00:60:0c:b7:b9:
ef:c6:0f:8b:c3:b5:39:69:97:f3:ac:93:0d:92:d9:
d9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:58:14:27:0D:1C:AF:9B:07:50:9F:5A:70:FF:28:DA:F5:88:32:A6
X509v3 Authority Key Identifier:
keyid:07:FF:23:64:4E:E7:65:F1:73:1D:BD:55:9E:60:8B:DC:00:53:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_8jZE7nZfFzHb1VnmCL3ABTw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b1e1c5-621b-458a-8e53-de37a01c6c39/1/61gUJw0cr5sHUJ9acP8o2vWIMqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b1e1c5-621b-458a-8e53-de37a01c6c39/1/B_8jZE7nZfFzHb1VnmCL3ABTw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.1.0/24
Signature Algorithm: sha256WithRSAEncryption
17:48:c8:96:ce:a2:dd:a0:ab:94:de:45:ea:22:b1:eb:b6:94:
57:48:99:ae:69:4f:e2:46:4f:e7:ac:76:1f:af:96:da:d6:85:
d0:21:d7:b2:16:66:f6:5c:79:f0:ae:8f:76:1b:e5:9a:67:4e:
a2:b2:d5:36:3f:b9:b3:96:b2:f5:ba:1a:b4:71:13:a6:e6:8c:
b8:72:b5:7a:d1:8c:a1:04:b8:f2:e9:54:3a:c8:f0:f3:13:69:
e2:60:01:52:d6:df:53:d2:00:87:3b:3e:07:5f:be:c9:5d:5f:
d9:06:5f:ae:7c:c8:aa:ab:b0:bc:fe:d5:ae:56:5f:af:ba:6a:
d9:22:b9:98:4d:d4:68:15:4d:05:20:61:54:e7:26:ea:80:27:
08:28:9f:80:d1:e6:18:bb:42:13:07:3b:e9:98:8f:12:5b:3d:
c0:2d:bb:a9:e7:eb:14:ee:bc:f6:fe:8e:d4:90:fe:d2:95:4e:
bc:2a:2b:b0:74:fc:54:32:b3:22:9b:ff:ba:3a:8f:d8:48:b0:
d5:93:f6:51:dc:35:1a:d2:60:55:9e:8e:a9:cc:ff:5a:8c:fa:
22:6c:4d:a9:00:32:08:66:d3:06:04:1f:3b:48:e9:48:ea:f0:
6b:3f:cd:69:ae:b9:c9:e4:bf:17:f7:b7:bc:fe:bf:85:9a:1e:
75:3f:0a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:11 2023 by rpki-client on console-fra.rpki-client.org