Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/7kzs5lc8epSXinQ0fNeLiVqSZyw.roa
File: 7kzs5lc8epSXinQ0fNeLiVqSZyw.roa (raw, json)
Hash identifier: QxdVq27HEhK+fdBiA6N/90a7HAFQiXT+PafpsyW4oBI=
Subject key identifier: EE:4C:EC:E6:57:3C:7A:94:97:8A:74:34:7C:D7:8B:89:5A:92:67:2C
Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial: 018A6EA223E20A10A49991475AB5126919A1
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/7kzs5lc8epSXinQ0fNeLiVqSZyw.roa
Signing time: Thu 07 Sep 2023 07:53:54 +0000
ROA not before: Thu 07 Sep 2023 07:53:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 10753
IP address blocks: 45.139.64.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6e:a2:23:e2:0a:10:a4:99:91:47:5a:b5:12:69:19:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Validity
Not Before: Sep 7 07:53:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee4cece6573c7a94978a74347cd78b895a92672c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:92:35:01:e8:1e:cb:88:2a:68:61:7d:54:b3:
0d:7a:94:1c:c8:b5:d0:a5:5d:a5:af:21:da:f7:73:
ec:e4:7f:04:57:f4:a8:e5:24:d1:83:7f:05:96:3a:
1c:9c:96:86:9f:94:bf:00:8c:df:66:4c:ab:a8:85:
f8:2b:0b:35:bc:64:00:80:04:08:31:b2:f5:6c:70:
c0:b7:c9:e6:96:08:44:f1:c8:bc:91:08:90:d8:bd:
79:86:f4:98:d5:a7:79:09:62:7f:63:35:3a:0e:cd:
b7:99:9d:7d:a1:ec:7a:bb:01:65:f5:b0:cd:e9:c9:
e8:0d:10:a6:99:55:d0:f6:53:1c:21:90:a9:09:c8:
1c:a3:cb:70:5a:ec:c3:0f:db:9a:67:25:21:99:b3:
8c:a6:7e:50:5f:d0:50:94:c7:f4:d4:ce:e0:71:70:
12:da:e2:b7:25:5b:19:24:6e:15:70:5f:d2:4a:6e:
f4:66:e3:db:a9:bd:8b:65:9f:e3:48:12:3f:c3:3a:
47:38:cc:c0:a4:3d:53:41:13:29:aa:74:4b:f3:1a:
d0:dd:b8:98:04:30:cb:d6:c2:ad:55:fd:ef:4b:8c:
5c:36:88:8e:23:63:72:dc:13:77:e9:d0:4b:65:07:
6e:62:dd:51:9d:4b:a4:b7:a4:ff:72:6d:c0:bb:52:
e5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4C:EC:E6:57:3C:7A:94:97:8A:74:34:7C:D7:8B:89:5A:92:67:2C
X509v3 Authority Key Identifier:
keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/7kzs5lc8epSXinQ0fNeLiVqSZyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.64.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:0d:c3:42:23:a8:65:8b:72:d7:a0:5b:71:55:90:bb:55:e2:
ed:0d:1c:30:d9:6b:74:97:f8:7e:74:a9:fa:3a:62:d0:b7:8b:
78:ce:36:30:36:a2:10:89:c5:5e:ac:26:c9:62:cb:0c:7a:fc:
42:a6:53:88:70:79:a4:90:dc:e7:ba:b2:fd:6a:45:b8:82:ce:
15:f5:7f:68:85:7a:08:9a:5e:43:12:cb:67:f6:90:fd:1a:1a:
e1:92:fe:f3:f5:b3:2a:eb:81:7d:ab:95:cf:14:d5:28:73:3d:
cf:ab:ba:a5:c3:da:17:5a:89:32:71:fe:21:9e:ca:9b:b6:4b:
21:54:49:ef:6e:64:84:0f:73:05:64:6d:51:3c:2f:9d:4c:31:
98:80:39:22:e7:16:7f:95:21:e0:5b:06:9c:d2:90:b5:33:cc:
e1:ec:bb:8c:1f:22:94:64:cb:5f:c1:eb:f8:9c:05:37:bb:da:
6f:ca:c3:b0:b3:97:97:41:42:23:e3:ec:34:23:f3:db:83:74:
1f:fb:b4:62:db:e0:d2:30:4f:77:7e:5b:a2:d2:5a:aa:55:ad:
93:e6:be:af:dd:10:26:d2:2d:8d:96:32:9c:2e:4b:9a:ba:da:
b3:25:bc:f7:da:bd:1d:13:27:b1:f5:d5:b7:55:bd:ca:10:ab:
a3:5c:4d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 12 18:34:53 2023 by rpki-client on console-fra.rpki-client.org