Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/o_nfrlMYwwNmF18FOe9oOEzuNkI.roa
File: o_nfrlMYwwNmF18FOe9oOEzuNkI.roa (raw, json)
Hash identifier: zC/PdPCoUvwykj/OJsBtdo2Lxyl0dyaFQacts7Mhk7E=
Subject key identifier: A3:F9:DF:AE:53:18:C3:03:66:17:5F:05:39:EF:68:38:4C:EE:36:42
Certificate issuer: /CN=ded8582b0243863c572ce25786ccb36ff795b22e
Certificate serial: 01856E2F76D593C2E4E3C5C7BC48252A3823
Authority key identifier: DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/o_nfrlMYwwNmF18FOe9oOEzuNkI.roa
Signing time: Sun 01 Jan 2023 16:34:42 +0000
ROA not before: Sun 01 Jan 2023 16:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207123
IP address blocks: 45.142.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:76:d5:93:c2:e4:e3:c5:c7:bc:48:25:2a:38:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded8582b0243863c572ce25786ccb36ff795b22e
Validity
Not Before: Jan 1 16:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3f9dfae5318c30366175f0539ef68384cee3642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a5:61:bd:ab:6a:74:18:46:f2:49:61:de:77:
be:6a:f0:d9:ed:ef:02:bd:cb:76:c1:56:a5:a6:7a:
b4:e3:49:34:b4:77:c7:cf:8c:db:e5:10:f5:a6:f0:
9b:52:20:df:34:49:a8:9b:39:54:d4:5e:c5:55:35:
3c:f2:dc:b4:1d:4f:39:d6:b4:5b:93:1b:3d:b4:bd:
6f:20:43:41:7b:a0:d4:2d:05:08:fc:5c:4f:73:f0:
b2:5d:c8:35:ca:96:9b:1a:0d:34:56:56:c3:8e:e3:
2f:d4:33:ed:1f:23:e0:c6:6e:6c:f2:08:39:87:90:
b1:e7:0d:3b:78:4d:74:b1:ac:6b:20:7f:00:1b:d1:
67:10:ae:b0:81:ae:b5:e7:96:ab:e9:02:5a:de:a8:
81:0b:11:1d:f0:ff:39:45:ff:67:1e:54:71:e6:07:
1f:c2:ac:04:90:d8:55:04:bc:af:56:41:60:6b:ad:
f9:23:a4:83:a1:cb:39:c7:e9:ca:46:7b:2e:7d:59:
c2:ca:60:02:61:e9:54:1e:81:f3:59:e9:6c:c9:c6:
86:3f:f2:d8:c6:b8:dc:18:74:ab:0e:27:93:32:7b:
09:d7:1d:68:c3:a3:03:c1:b2:45:4a:a7:d9:0d:0d:
0b:ec:14:12:47:a7:aa:87:b3:e0:e9:cc:a4:25:1f:
7b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F9:DF:AE:53:18:C3:03:66:17:5F:05:39:EF:68:38:4C:EE:36:42
X509v3 Authority Key Identifier:
keyid:DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/o_nfrlMYwwNmF18FOe9oOEzuNkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.89.0/24
Signature Algorithm: sha256WithRSAEncryption
ee:9a:82:2a:13:e4:5d:e1:a1:c2:c0:dc:7f:6c:a5:66:d7:7c:
0d:2e:69:b9:82:29:b6:ba:53:91:68:63:a8:0a:d9:d8:7c:6f:
82:1e:8b:b5:83:5a:7d:53:3e:ec:20:62:be:42:d7:5b:cf:d5:
07:98:ac:5b:59:06:20:af:14:07:1c:3f:fe:cb:42:bc:68:11:
09:68:e1:7d:5c:39:7c:44:41:0b:2a:ff:23:de:88:71:35:6b:
af:bb:6a:e6:a6:fa:bf:21:04:27:95:d5:02:b5:93:9f:e0:e5:
f9:cb:1f:d8:0d:6d:ec:43:a6:07:f8:8f:37:b5:a1:4c:46:fe:
f2:5f:b5:29:8b:4e:e2:05:b7:73:18:56:c0:5c:62:8b:e4:52:
74:5d:a3:26:31:d3:ae:5d:1b:a0:88:0e:8c:82:ae:b8:ac:49:
35:cb:48:6f:e1:d1:34:30:dd:0a:4d:49:8e:e7:b3:16:22:bf:
b6:38:a7:a7:68:2a:6a:03:38:aa:eb:26:6e:ba:00:3d:a0:70:
e9:d8:1c:6f:90:b8:d8:9f:65:91:38:fe:f6:ea:d3:20:45:99:
e4:0a:5a:a8:bb:c5:d3:f7:84:fc:c4:12:51:56:48:cc:7e:af:
c2:c6:64:88:0f:68:60:86:08:94:8b:2b:f9:d2:22:2d:52:0c:
6a:8b:96:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:20:52 2024 by rpki-client on console-fra.rpki-client.org