Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/c_JDj55FRwu6uNEL2T4F4yrq6bk.roa
File: c_JDj55FRwu6uNEL2T4F4yrq6bk.roa (raw, json)
Hash identifier: 0zaIoJfxJJxhiycgXiEn+cG7Oz892DBuR8BjAb9ZKmA=
Subject key identifier: 73:F2:43:8F:9E:45:47:0B:BA:B8:D1:0B:D9:3E:05:E3:2A:EA:E9:B9
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 018AB30F941A124D01EEB427D02FAE93B472
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/c_JDj55FRwu6uNEL2T4F4yrq6bk.roa
Signing time: Wed 20 Sep 2023 14:47:37 +0000
ROA not before: Wed 20 Sep 2023 14:47:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9123
IP address blocks: 45.91.67.0/24 maxlen: 24
91.200.150.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b3:0f:94:1a:12:4d:01:ee:b4:27:d0:2f:ae:93:b4:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Sep 20 14:47:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73f2438f9e45470bbab8d10bd93e05e32aeae9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a3:22:ee:8a:93:e9:9d:0e:5f:38:61:41:45:
3e:77:1e:51:dc:45:34:ad:73:db:2a:36:05:12:1f:
18:b4:98:d1:7c:ae:82:b6:65:ce:03:41:04:1d:07:
b2:a4:20:2e:6b:64:30:5e:4c:3d:8e:cc:41:ce:a8:
dd:f9:3b:f0:85:b6:e4:b9:a3:9c:e5:96:d8:ad:67:
f3:00:33:39:43:df:99:17:4c:c6:79:fe:51:39:16:
71:ac:7c:ba:e8:dc:7e:a5:6c:74:c0:63:58:18:b7:
76:40:52:2d:cf:0a:94:5b:05:08:22:d9:36:24:74:
e8:61:03:72:cb:8c:8b:75:36:19:2d:1f:c5:bd:d4:
f8:77:8d:de:f7:7b:e4:2a:48:31:8a:73:12:8c:67:
d3:95:d9:ab:53:c3:be:94:d5:db:5e:be:5d:df:ea:
71:f7:bf:3b:a0:6c:b4:63:8e:f2:cf:c0:c2:be:e1:
2e:94:a6:e6:53:0f:67:77:69:40:59:b5:a3:2e:1b:
35:bc:20:bd:7d:7f:7f:c5:23:12:70:e2:68:75:cd:
c5:30:47:c1:0d:ea:82:31:8e:9c:68:86:7d:f0:52:
97:09:cf:b9:7b:13:7a:9a:a7:10:84:e3:e9:d2:83:
6b:94:4d:62:52:4e:e5:f5:26:f5:6a:d6:5c:42:dc:
16:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F2:43:8F:9E:45:47:0B:BA:B8:D1:0B:D9:3E:05:E3:2A:EA:E9:B9
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/c_JDj55FRwu6uNEL2T4F4yrq6bk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.67.0/24
91.200.150.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:93:ad:98:56:9b:8d:22:64:fc:67:1b:12:a9:25:4e:8f:8d:
76:08:eb:c1:c2:dc:1e:45:34:85:bd:61:80:f7:1b:96:25:d8:
88:58:08:ec:f4:54:89:25:41:28:eb:4a:50:b2:7b:8e:2f:45:
04:f6:c3:06:b2:5a:f2:37:e2:f0:a3:f6:95:79:93:a3:8e:28:
75:cf:fc:2e:80:2d:41:71:6c:ba:a0:fa:5f:f1:be:c3:1e:7f:
dc:7a:c5:4c:b8:0d:d2:4c:51:82:de:48:bb:48:f1:37:96:36:
f4:b5:9f:02:9d:4a:8e:88:07:c2:ca:66:bd:e6:7d:9d:79:08:
b0:04:54:cf:c1:c4:43:4e:cb:36:25:eb:29:7a:a0:db:54:46:
6d:f7:66:d1:05:f0:11:ce:8a:db:fa:67:4f:45:6a:34:65:67:
00:ab:4a:f8:05:d7:66:20:5c:bf:58:52:12:50:36:4a:70:1b:
3b:18:4a:85:52:ff:92:30:da:81:7e:34:64:81:23:29:2c:84:
de:0c:80:9c:0a:30:4a:32:27:0e:33:2d:d0:2c:bb:1f:e1:1a:
0e:30:c6:64:8b:86:cf:df:3f:b1:9b:86:95:2d:2d:9f:68:0d:
37:9e:86:d6:ac:a4:1a:84:1f:a7:0b:b5:69:c8:12:a3:9c:cd:
ed:b5:b3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 10 12:37:48 2023 by rpki-client on console-ams.rpki-client.org