Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/QSbbDq1oT8PoX-z8phAH9SnVDP8.roa
File: QSbbDq1oT8PoX-z8phAH9SnVDP8.roa (raw, json)
Hash identifier: kVtQJ9Yjoou81By03jN2+/fWzzbm8aeV8vpbG8smpjQ=
Subject key identifier: 41:26:DB:0E:AD:68:4F:C3:E8:5F:EC:FC:A6:10:07:F5:29:D5:0C:FF
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 018AB182709A281E551610E26A2BBBC195CC
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/QSbbDq1oT8PoX-z8phAH9SnVDP8.roa
Signing time: Wed 20 Sep 2023 07:33:50 +0000
ROA not before: Wed 20 Sep 2023 07:33:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41789
IP address blocks: 45.91.67.0/24 maxlen: 24
45.82.14.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b1:82:70:9a:28:1e:55:16:10:e2:6a:2b:bb:c1:95:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Sep 20 07:33:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4126db0ead684fc3e85fecfca61007f529d50cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b5:e3:23:5b:c5:7b:e4:be:7a:80:a6:00:d0:
e8:3e:b5:86:35:8b:f5:bf:62:43:3b:27:2f:d1:68:
28:32:41:63:fb:57:b5:b2:80:47:72:40:91:4d:2d:
0a:89:db:5b:ef:fe:90:fc:04:f5:36:c3:14:a0:18:
7b:75:15:9f:41:5d:76:cc:f6:e7:95:a0:61:a3:d4:
e7:f7:e8:4e:ef:46:08:12:d8:1f:c5:ae:46:53:31:
f8:fb:5f:8b:01:4d:36:e9:cd:25:df:7f:6a:68:47:
e1:4b:4d:7c:d6:b4:51:48:d1:d3:b9:3b:97:d6:f0:
64:a6:f6:44:c0:21:d7:57:97:c2:71:5c:6b:19:58:
fb:28:cd:8f:19:d2:d5:47:93:86:47:8b:09:d9:62:
91:d9:d3:85:1a:7e:da:5b:38:c9:19:7b:7a:8c:93:
af:12:7f:aa:99:c3:5c:d2:fe:32:ef:b6:01:3c:4b:
02:60:a2:64:36:9d:35:ee:98:13:d1:7d:a0:32:46:
ed:3b:2d:5f:07:f9:59:58:93:76:0b:e5:7c:cf:6b:
fa:78:73:fd:4d:38:e0:c3:a2:4b:d0:22:73:ac:72:
3f:51:25:74:23:dd:c4:d7:96:be:e2:12:96:b8:70:
53:bc:2a:b2:37:58:43:01:96:75:72:1a:fe:33:9e:
27:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:26:DB:0E:AD:68:4F:C3:E8:5F:EC:FC:A6:10:07:F5:29:D5:0C:FF
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/QSbbDq1oT8PoX-z8phAH9SnVDP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.14.0/23
45.91.67.0/24
Signature Algorithm: sha256WithRSAEncryption
87:ac:68:b2:ca:34:cb:52:d1:51:f6:c4:04:b1:45:41:3b:7d:
dc:ed:f2:3a:5b:65:41:8b:d4:52:f7:2b:84:49:dc:91:ea:e5:
85:41:1d:9b:4f:7f:69:17:3a:ef:a8:46:23:5a:dd:91:e1:f0:
af:0e:08:61:fc:3f:80:3e:7b:8d:36:8e:1e:06:56:63:ea:66:
3c:90:ad:58:b9:82:91:b8:ba:f5:16:e8:49:f5:d1:e1:0c:03:
d3:4d:69:88:2c:42:4d:20:1f:d9:ad:57:d9:60:c6:84:1d:20:
35:8a:f6:14:35:50:29:0a:75:71:d1:c0:a3:cd:73:5b:1e:8c:
8c:53:98:e0:0b:61:c8:36:0d:c0:fd:cb:d0:9f:3d:cb:f0:00:
a7:99:03:07:65:c6:1e:35:02:e6:51:d4:82:5b:f4:99:b6:d6:
c0:f3:01:6e:38:86:dd:c5:7e:98:3d:90:03:5f:dc:e7:40:88:
ab:94:ab:9b:43:26:a0:d4:8d:c1:35:55:05:e9:4e:49:48:2d:
42:a3:a3:9a:35:56:92:7f:40:14:25:46:8b:73:29:91:01:44:
4a:a2:78:a0:98:76:60:cb:f5:65:21:0f:ae:99:f2:8a:39:be:
9f:11:ff:4a:0f:c2:59:6c:64:0e:1c:5a:48:a0:8a:72:88:64:
32:f9:ec:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 20 15:37:46 2023 by rpki-client on console-ams.rpki-client.org