Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/7Bdqw4R_5mSChtSAPIp1Woksnbk.roa
File: 7Bdqw4R_5mSChtSAPIp1Woksnbk.roa (raw, json)
Hash identifier: SOQ5CqjQFFrrRj1Zhs78/6qCb2pNdJ5eUzWLN0z5kXc=
Subject key identifier: EC:17:6A:C3:84:7F:E6:64:82:86:D4:80:3C:8A:75:5A:89:2C:9D:B9
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 0185711E677BE28C2C6777ABB3229FF72982
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/7Bdqw4R_5mSChtSAPIp1Woksnbk.roa
Signing time: Mon 02 Jan 2023 06:14:56 +0000
ROA not before: Mon 02 Jan 2023 06:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44486
IP address blocks: 45.156.145.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:67:7b:e2:8c:2c:67:77:ab:b3:22:9f:f7:29:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Jan 2 06:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec176ac3847fe6648286d4803c8a755a892c9db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b2:cb:03:05:af:d5:e8:9d:d6:85:00:0d:83:
99:ed:b3:ac:6e:fa:98:c6:72:4c:28:54:b3:96:9f:
2f:e1:3a:99:5e:4c:19:0a:53:9a:60:14:96:e6:cf:
cf:5e:dd:e8:c6:29:1a:e0:93:18:6d:90:5b:cb:27:
55:52:e0:36:c5:8d:ae:35:eb:78:17:93:5f:6b:1d:
40:60:04:23:85:1c:a9:78:1a:7a:0f:c5:67:4e:89:
4b:ed:a5:ed:91:0d:f3:6a:15:65:a5:d1:13:f2:ed:
ba:e7:67:b8:db:36:36:a8:f3:c3:59:6e:4f:95:00:
9f:76:ad:97:4b:13:6b:02:d2:84:9b:54:75:78:6f:
73:6d:c6:2b:bd:7f:06:b7:9b:fe:cc:bf:af:08:d8:
1d:92:f2:ab:a7:72:13:c1:b3:67:0d:e2:d9:c7:13:
3a:b7:24:61:de:3f:b9:ac:e5:f3:cb:fb:59:34:47:
f7:2e:c3:dd:75:a6:df:03:44:27:d9:10:34:ae:31:
c5:42:2b:17:e1:14:3e:49:96:e5:bc:fa:66:4c:c2:
5c:cd:dd:fd:3d:81:a4:79:d4:1c:56:90:40:de:2f:
b1:3f:00:eb:ac:6c:8a:60:cf:d4:a5:cd:2e:80:af:
39:06:b0:38:4d:b7:f1:d3:68:5c:b5:0d:e8:a6:61:
8f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:17:6A:C3:84:7F:E6:64:82:86:D4:80:3C:8A:75:5A:89:2C:9D:B9
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/7Bdqw4R_5mSChtSAPIp1Woksnbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.145.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:ee:38:b5:35:5d:cc:44:36:b4:86:17:de:aa:cb:c7:53:47:
51:1d:3e:19:fb:f8:b3:e1:62:ae:1a:ec:24:ed:53:61:a2:97:
bc:ba:4d:f7:49:b4:4a:d2:d0:f9:09:b7:f7:0d:1c:38:2a:7b:
40:65:d4:43:3b:3b:1d:b6:3a:15:d8:b6:59:87:71:1a:7a:49:
cd:65:00:11:9c:a8:f9:bc:07:10:44:a8:44:11:28:c3:7a:1f:
45:33:54:8d:37:bb:c0:ee:b1:b7:3f:c4:f1:9b:c8:c2:d8:31:
85:8f:51:fe:f4:3e:1f:0c:e2:23:99:0a:9b:b4:ac:16:bd:da:
a0:ed:3e:3a:ab:ba:53:95:a0:9d:68:e7:01:e5:9b:e5:d7:fb:
d4:5f:4a:f1:4a:02:13:19:82:1b:9a:11:51:2e:31:87:d3:59:
f8:ff:91:fb:17:ab:a6:21:c4:ce:f1:9f:a2:1f:41:6e:6c:42:
f2:46:10:83:b0:99:ac:52:0d:b1:3e:e1:f9:6f:3e:79:a0:b0:
4a:6b:2b:56:bd:a8:9a:71:b2:56:41:6c:c7:9a:6e:8a:b7:8c:
4c:8b:ad:e6:00:e2:0d:18:92:32:81:e8:22:5f:2d:37:4f:db:
2f:2b:9b:04:26:09:dc:d5:dd:99:5a:ee:bd:73:18:89:40:73:
0a:84:6c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:53 2023 by rpki-client on console-ams.rpki-client.org