Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/FDhRqmdfBFtwve_P51am5KOPTis.roa
File: FDhRqmdfBFtwve_P51am5KOPTis.roa (raw, json)
Hash identifier: 8EGhLF9EljWZSGz/ihWvLe6Q02kHxLkhvc4s+DSMH1U=
Subject key identifier: 14:38:51:AA:67:5F:04:5B:70:BD:EF:CF:E7:56:A6:E4:A3:8F:4E:2B
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 0188DE773D03EDE5B9342BAE2B0C4E1B6198
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/FDhRqmdfBFtwve_P51am5KOPTis.roa
Signing time: Wed 21 Jun 2023 14:58:56 +0000
ROA not before: Wed 21 Jun 2023 14:58:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 45.82.13.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:de:77:3d:03:ed:e5:b9:34:2b:ae:2b:0c:4e:1b:61:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Jun 21 14:58:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=143851aa675f045b70bdefcfe756a6e4a38f4e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f2:bd:5a:ba:1f:b1:d6:c2:ba:c3:ca:0b:f5:
e3:65:b1:f2:3b:6c:fb:51:a5:50:4b:84:a5:62:77:
46:96:63:6b:f5:b9:da:20:cd:42:6c:07:f8:f3:d1:
43:ca:4c:4d:8d:59:73:f7:37:25:90:d7:e9:82:e2:
c6:90:e1:f4:3f:79:58:ef:37:1d:df:8d:6c:e4:0d:
1d:82:f5:ec:a1:09:98:88:67:f5:d1:ba:19:b9:d9:
b3:63:4d:5a:65:ee:f1:fa:5b:5a:dc:03:36:9e:24:
a0:8f:28:bc:b1:57:fd:0a:3f:d9:98:e4:2e:f1:f3:
72:0a:bd:29:78:dd:f8:95:19:69:4c:f7:a2:8c:e0:
ec:72:dd:d3:46:af:9a:6a:22:60:32:f4:39:27:4d:
f9:a8:5b:d9:fe:b1:5d:3e:52:86:60:cc:c2:7a:6e:
a5:5e:5a:18:eb:fc:43:cf:2c:84:71:c3:71:f9:1c:
99:ca:16:b5:22:2f:9a:a4:dc:4c:f1:f4:e6:ad:58:
6f:2d:99:5a:a4:98:0d:63:13:82:11:a0:65:cf:c9:
7e:43:55:4c:a9:bb:5a:56:2e:b3:39:43:7d:0d:b0:
c0:d6:6f:a2:78:0c:92:f2:2e:7e:1a:b9:c9:fe:78:
fd:75:f6:d2:28:04:7f:58:54:d2:0e:8b:4d:75:39:
7d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:38:51:AA:67:5F:04:5B:70:BD:EF:CF:E7:56:A6:E4:A3:8F:4E:2B
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/FDhRqmdfBFtwve_P51am5KOPTis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.13.0/24
Signature Algorithm: sha256WithRSAEncryption
90:a3:ea:82:66:f4:a1:1b:cd:94:1e:c4:25:d0:e5:f1:64:b8:
19:5c:dc:d2:36:83:d1:86:6e:88:30:7b:89:25:b6:7d:a9:0b:
e4:43:35:33:d3:e3:e7:2d:eb:17:1e:3b:70:32:1d:e7:4c:b7:
bc:65:ae:71:98:ca:51:48:a5:be:0a:e6:7b:79:ab:02:36:d3:
12:cf:0f:be:09:2b:85:7d:b5:38:33:5c:19:fb:bf:95:07:9b:
8b:2e:cc:83:ff:00:d8:34:6c:ec:dc:fa:f9:84:1c:4c:d1:89:
d9:76:5f:81:92:b5:9d:ab:97:f2:c5:c5:99:ca:04:36:b1:14:
53:81:9f:c9:1d:bc:9a:ee:ba:64:53:53:cc:fd:0c:0d:98:1a:
1c:3e:cc:75:62:a2:cb:56:b7:9e:d5:b3:cd:66:8c:bd:a5:8c:
3b:b9:a1:2d:85:65:e3:be:bb:21:0e:ad:e4:c0:eb:4c:aa:1c:
2c:ec:f8:e4:40:53:c0:ab:89:59:4a:55:be:2f:5b:71:40:2b:
a3:6f:72:e5:12:d4:9e:ac:64:59:c9:60:e1:fb:ac:f9:73:04:
2f:7e:2a:c9:09:d7:94:91:cb:e4:7d:dd:a7:3b:b2:ec:fe:5c:
31:56:29:a2:fa:f5:e7:30:85:ad:1d:38:3c:0a:b7:72:96:13:
80:4d:29:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:33 2023 by rpki-client on console-fra.rpki-client.org