Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/DxXknpiowTryryuSD2leSdfaK5E.roa
File: DxXknpiowTryryuSD2leSdfaK5E.roa (raw, json)
Hash identifier: KYXatXnRCXYbgQs3MBgPN6EvwobE2KUXmqgRC7/Nk90=
Subject key identifier: 0F:15:E4:9E:98:A8:C1:3A:F2:AF:2B:92:0F:69:5E:49:D7:DA:2B:91
Certificate issuer: /CN=75ea894ee05775e0ef061d086ca252147f5c91de
Certificate serial: 01856C9CB7CF9E38FFD5685DB75441BEE638
Authority key identifier: 75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/DxXknpiowTryryuSD2leSdfaK5E.roa
Signing time: Sun 01 Jan 2023 09:14:47 +0000
ROA not before: Sun 01 Jan 2023 09:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207045
IP address blocks: 45.154.47.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:9c:b7:cf:9e:38:ff:d5:68:5d:b7:54:41:be:e6:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75ea894ee05775e0ef061d086ca252147f5c91de
Validity
Not Before: Jan 1 09:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f15e49e98a8c13af2af2b920f695e49d7da2b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c8:83:54:d0:1d:52:be:11:8b:60:26:c9:fb:
ea:9e:14:e4:16:8c:bb:0e:63:1f:89:ec:8d:99:a9:
e9:37:fa:02:dc:6a:9f:c8:63:59:95:f1:27:ef:3d:
a4:bc:62:98:9e:c3:03:1c:64:9d:a0:00:ab:35:6b:
25:5b:11:55:fd:7f:1c:0e:e0:1d:05:aa:c5:b2:32:
8f:98:8e:c3:fa:24:63:3b:43:4e:d4:d3:ab:6a:97:
5a:dd:94:ba:f8:4a:13:da:e9:4a:11:58:66:9b:23:
8a:45:ea:f3:2a:da:be:74:c4:83:be:8a:a2:d7:71:
18:77:24:78:88:55:08:6f:6a:0b:54:3b:33:eb:d0:
96:29:8a:96:41:bd:5c:a0:ec:1e:a6:be:aa:f2:44:
a7:96:41:db:0e:ef:ac:16:01:17:a3:4f:2f:54:cd:
b7:5b:c8:26:43:2a:64:a3:0d:5b:2b:be:fd:d9:9e:
5e:69:2c:66:0e:e9:da:8b:0d:25:52:a6:3f:68:bf:
da:b2:e3:5c:ad:eb:0e:36:60:3a:ef:56:ca:a6:7e:
bf:e3:f9:26:3f:77:bf:e4:12:5c:06:83:28:ae:ef:
e3:44:34:1f:df:76:e8:3e:22:57:58:d5:b8:1a:8b:
87:ce:19:3b:60:c6:a2:0b:44:09:ce:d3:0f:1f:6a:
52:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:15:E4:9E:98:A8:C1:3A:F2:AF:2B:92:0F:69:5E:49:D7:DA:2B:91
X509v3 Authority Key Identifier:
keyid:75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/DxXknpiowTryryuSD2leSdfaK5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.47.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:60:c0:de:9f:32:e6:8d:27:ad:09:cf:8d:c6:a6:a5:8f:dd:
f6:0c:d0:fc:80:86:43:ff:09:64:14:fa:ad:b3:10:43:84:21:
97:29:08:3b:f3:1a:82:6f:3e:53:cc:08:fd:31:6e:d0:70:dc:
c9:b9:2c:89:2f:28:5d:f8:8d:62:72:4b:05:fc:a6:25:df:82:
7f:78:d9:25:14:db:d6:19:3d:2f:ef:63:5b:00:f1:83:be:6b:
a0:d1:40:94:0a:2b:b2:77:b1:f2:f7:c7:f6:a3:14:ec:e8:43:
8b:6d:3b:73:24:26:b9:2c:e7:ed:1b:13:3f:0a:db:e9:b3:1a:
8b:26:65:3d:95:70:1f:e9:d6:e3:d2:46:b4:5f:00:e9:07:1c:
84:a0:26:63:ea:0d:5e:91:f3:84:c7:10:ae:ba:83:e8:61:99:
5b:fa:a4:6d:71:82:13:a6:ed:c2:c3:e5:ec:0e:0b:3f:be:a7:
9c:b8:6b:85:62:d7:16:83:fb:22:49:f1:72:c5:59:2d:52:f4:
ca:06:27:63:b5:6b:7c:79:c9:9a:26:bb:f8:e7:0d:84:61:59:
56:63:c9:df:ee:c9:5f:cc:28:2d:81:74:94:4a:9b:55:65:bd:
fa:01:37:69:5f:36:57:1a:c7:c9:aa:41:81:9a:53:2c:6d:9e:
7b:43:26:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:55:38 2024 by rpki-client on console.sobornost.net