Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Ks63cJQNifN7um7vTE50_cW-deQ.roa
File: Ks63cJQNifN7um7vTE50_cW-deQ.roa (raw, json)
Hash identifier: nqA01iKOdRmr+bjaf8vTFwQwM67Leo+dy3BMe8YLT2I=
Subject key identifier: 2A:CE:B7:70:94:0D:89:F3:7B:BA:6E:EF:4C:4E:74:FD:C5:BE:75:E4
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 018AB30F94833F7149D8DB8C68C743006541
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Ks63cJQNifN7um7vTE50_cW-deQ.roa
Signing time: Wed 20 Sep 2023 14:47:37 +0000
ROA not before: Wed 20 Sep 2023 14:47:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41789
IP address blocks: 45.82.14.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b3:0f:94:83:3f:71:49:d8:db:8c:68:c7:43:00:65:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Sep 20 14:47:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2aceb770940d89f37bba6eef4c4e74fdc5be75e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7c:12:9c:71:b8:9d:6c:86:88:85:20:ef:38:
38:0d:d0:e6:b0:89:9d:2c:b8:f0:35:a1:a6:86:9f:
8f:9b:e0:67:81:5c:fb:62:bd:57:a8:ef:b6:c3:e0:
90:1f:d6:87:ed:9f:e9:b3:09:c7:20:74:cf:e3:0d:
10:d8:c2:c2:79:13:e2:4d:42:6b:48:7f:8f:89:cc:
ac:c7:91:ea:19:a2:e8:78:6f:fe:26:2e:3c:c9:7c:
82:a6:31:38:2c:17:df:0b:52:3b:4d:e7:c7:25:c6:
e9:96:71:2f:83:4a:a9:cb:f6:e8:63:41:57:d6:b7:
1c:bb:cc:96:bd:0d:ab:49:73:9a:c1:98:be:f3:b5:
31:dd:73:f8:c1:9c:24:40:2c:b4:a9:cd:dd:87:e2:
6c:ad:b2:30:de:27:26:aa:7c:c7:2d:ac:7c:c8:38:
53:77:56:d5:c0:ca:37:4b:b8:28:79:ec:56:51:d2:
a4:81:dc:bb:47:31:61:80:17:7c:8f:c3:d3:5b:ea:
f3:f3:a1:09:9c:43:6c:76:04:00:6d:4b:5d:e7:7f:
a1:6b:62:dd:65:fd:42:ad:fc:25:97:86:e1:7e:6f:
e6:8b:e4:72:1e:df:c1:ba:d6:f9:07:4a:c2:10:77:
fe:fb:5c:b9:d8:db:c6:2f:3c:ff:c3:93:49:b0:c6:
06:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CE:B7:70:94:0D:89:F3:7B:BA:6E:EF:4C:4E:74:FD:C5:BE:75:E4
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Ks63cJQNifN7um7vTE50_cW-deQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.14.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:fa:4d:af:ed:1a:e5:f4:28:ef:2a:67:d3:e7:21:a9:bb:bc:
e1:0f:16:57:f3:97:30:55:52:99:6f:22:a8:d7:13:1b:1f:4b:
97:b0:95:f0:c7:66:9d:0a:22:27:ae:33:4b:db:0e:6b:a0:9a:
77:c5:07:71:a4:09:8c:60:cd:ba:68:6d:2b:32:1e:63:37:1a:
f5:5e:2e:72:9f:9f:ce:ce:1e:4c:86:09:79:8f:39:28:23:27:
66:0d:4d:bd:27:c3:b1:f2:c8:ca:ab:30:5c:26:3a:c5:b7:00:
dd:6c:b2:55:cc:35:2c:5c:ae:71:a0:cc:2d:48:94:64:30:4e:
3c:24:f0:25:02:49:b4:48:ea:cc:a1:9f:59:1d:d2:3b:4e:7c:
a5:4b:0c:18:a5:f0:06:92:ac:73:5f:93:26:6a:ad:c9:97:a6:
df:cf:ec:4b:5d:e4:c2:0b:c7:bd:53:d2:92:81:f1:a0:21:eb:
db:c9:31:47:71:08:23:07:ba:0a:62:d2:9b:56:7a:0f:5f:fe:
2e:2e:3c:98:a6:5b:f6:ba:7a:a3:3c:2a:fc:82:56:2b:26:45:
80:2f:2c:ce:3b:b8:af:9e:63:fb:2d:4f:0f:37:45:e8:6a:80:
d7:ec:02:d4:cf:14:0c:70:df:ce:9e:4e:0c:78:f5:fe:d5:4c:
6a:09:c7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:56 2024 by rpki-client on console-ams.rpki-client.org