Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/9kcqu34sQQSk064PEVOBr2ZaDAg.roa
File: 9kcqu34sQQSk064PEVOBr2ZaDAg.roa (raw, json)
Hash identifier: Gt71Pa2Kl8QoKfBTi5lfuwDnKOyolTm7FprK68slEHU=
Subject key identifier: F6:47:2A:BB:7E:2C:41:04:A4:D3:AE:0F:11:53:81:AF:66:5A:0C:08
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 01856F94D96F0463AA26E32C6DA05D5E94E5
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/9kcqu34sQQSk064PEVOBr2ZaDAg.roa
Signing time: Sun 01 Jan 2023 23:05:03 +0000
ROA not before: Sun 01 Jan 2023 23:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40028
IP address blocks: 45.43.87.0/24 maxlen: 24
107.181.150.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:d9:6f:04:63:aa:26:e3:2c:6d:a0:5d:5e:94:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jan 1 23:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6472abb7e2c4104a4d3ae0f115381af665a0c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:45:8c:3c:47:9a:5d:c9:e5:49:fa:87:2a:eb:
94:9c:1d:b9:9a:f7:1f:a8:6f:15:2c:44:cc:4d:32:
28:6a:d3:86:bf:ea:69:d7:9b:fe:be:d8:9a:cc:9a:
a7:9f:ae:be:e8:89:26:af:5b:2c:f1:e5:e5:2c:70:
8f:d8:72:d0:a3:52:29:49:b4:6c:24:af:b4:d1:46:
a8:f3:d7:13:46:ed:eb:5b:2a:77:90:99:a4:e7:03:
ec:69:bb:8e:84:08:14:5a:20:00:17:b9:29:d4:7c:
2c:35:a8:bc:28:60:61:a3:13:c4:b7:1c:a0:89:0f:
b1:31:c8:bc:24:70:f3:76:d4:4d:d8:4e:ec:c5:70:
53:ef:58:b2:b0:7d:78:5c:d3:c1:9e:49:a9:2f:82:
f2:6a:2d:48:6f:ee:7d:c8:e0:6b:2e:1c:86:1d:73:
9c:df:0f:0b:54:64:1e:d9:53:c5:8c:a6:84:28:53:
54:ae:8f:76:b3:39:57:77:f6:06:e1:99:4c:99:80:
1a:00:51:75:d6:c0:ee:59:68:c8:e3:9d:4c:c4:7f:
63:be:e3:e5:77:20:5f:7b:a7:d7:e5:6a:70:c5:bd:
4d:bf:0d:03:d8:85:40:d1:4f:d4:a3:0f:a2:e4:6b:
b0:7d:90:00:d2:55:8e:80:64:d5:55:5e:b4:af:3f:
6b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:47:2A:BB:7E:2C:41:04:A4:D3:AE:0F:11:53:81:AF:66:5A:0C:08
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/9kcqu34sQQSk064PEVOBr2ZaDAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.87.0/24
107.181.150.0/24
Signature Algorithm: sha256WithRSAEncryption
24:0c:32:7b:e4:a8:8b:06:7a:96:4c:3c:8e:1e:5e:d2:36:20:
9a:38:9e:2c:59:5f:de:9e:4a:64:06:5e:fb:9f:95:a7:b6:7a:
66:e3:67:b3:2e:1c:74:b2:41:1e:82:2e:e2:c1:94:fe:64:c7:
37:ef:fd:46:76:df:6a:07:39:93:f0:e3:87:d4:fc:87:05:90:
b9:06:9a:53:99:be:d5:0a:8a:99:cf:60:b9:93:8c:02:6b:4b:
e1:e0:e8:25:d1:01:02:54:a9:2d:33:e4:5c:df:c8:f2:12:66:
fa:d1:81:10:a6:ce:44:7f:ed:2a:48:fc:bb:e7:2e:a4:90:26:
b6:51:0b:31:8e:31:f1:1c:0a:97:80:dc:9d:61:e8:1f:86:32:
97:50:0a:e8:af:b7:42:19:c9:27:24:de:87:a6:00:3d:45:98:
64:b4:52:79:c6:8a:b8:bf:9f:6c:25:70:3d:40:57:f4:38:f1:
4c:b7:20:5b:31:00:18:63:bc:2f:0c:57:01:7c:e6:1b:b9:12:
f1:a4:b8:b2:27:50:54:e9:ff:cd:ac:47:56:58:1a:32:4a:2d:
a4:53:48:44:86:d2:a4:5a:91:04:d9:c8:1d:34:f1:13:f5:f9:
8b:22:74:78:44:32:e1:b8:b2:40:78:66:b0:2b:02:5a:bd:ea:
6c:4d:fe:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:40:08 2024 by rpki-client on console-fra.rpki-client.org