Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/T9PR0k3TqyPp7rIyF3g-T-jI8iE.roa
File: T9PR0k3TqyPp7rIyF3g-T-jI8iE.roa (raw, json)
Hash identifier: RY2JZVxGUjIT2GYQRoJyPhR3tAEUQqP72Qx+JeVAtyo=
Subject key identifier: 4F:D3:D1:D2:4D:D3:AB:23:E9:EE:B2:32:17:78:3E:4F:E8:C8:F2:21
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 018ADFD0D552061944F0BAC609C8EE903B91
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/T9PR0k3TqyPp7rIyF3g-T-jI8iE.roa
Signing time: Fri 29 Sep 2023 07:21:59 +0000
ROA not before: Fri 29 Sep 2023 07:21:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48266
IP address blocks: 45.67.201.0/24 maxlen: 24
45.67.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Dec 2023 07:38:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:df:d0:d5:52:06:19:44:f0:ba:c6:09:c8:ee:90:3b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Sep 29 07:21:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fd3d1d24dd3ab23e9eeb23217783e4fe8c8f221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:39:99:04:40:9f:cf:6a:e0:2a:43:21:4a:44:
53:c2:4f:78:9d:f0:b7:74:cc:ec:a7:2a:c2:2b:4e:
b1:a6:12:2d:94:b3:48:a6:81:3b:80:88:d5:b5:8d:
78:98:e1:f5:17:be:ec:fc:3b:c6:d8:05:fd:97:38:
2c:53:e5:3f:cd:fe:4b:11:54:50:c1:83:4c:1d:f7:
83:68:4b:da:62:cf:8b:81:b3:5d:3d:ab:24:2b:45:
f6:b8:d4:b7:90:70:b9:4a:68:76:03:3f:7a:fe:37:
ba:e4:4c:b2:52:5c:18:a7:e7:fd:4b:7b:cc:c7:22:
9d:db:02:f0:6f:e0:53:75:22:3d:f5:a5:04:a2:84:
4d:2e:a6:30:7f:1d:6e:56:cf:c6:b4:18:51:b9:e6:
56:d8:d9:d0:41:30:d1:e3:10:d1:6a:80:07:d0:3e:
40:83:e5:b2:7b:42:b0:ec:00:f6:7a:60:01:da:fc:
57:eb:74:d0:f6:a4:17:34:36:b8:c1:75:75:c1:5e:
db:38:7e:05:b5:23:b4:eb:44:e6:c9:3e:95:bc:6c:
e5:67:2e:52:89:cc:60:2b:c5:98:7f:08:d0:68:fd:
b7:ff:63:37:0c:52:b1:6c:64:11:4c:3e:65:2b:54:
99:36:d7:33:a1:88:18:77:e3:b2:0a:21:fb:cd:15:
ad:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D3:D1:D2:4D:D3:AB:23:E9:EE:B2:32:17:78:3E:4F:E8:C8:F2:21
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/T9PR0k3TqyPp7rIyF3g-T-jI8iE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.200.0/23
Signature Algorithm: sha256WithRSAEncryption
77:81:04:03:63:32:76:67:07:77:de:89:94:35:c4:6f:b3:7c:
db:8c:65:3c:5f:78:88:c4:91:c0:a9:4f:96:2a:52:16:88:52:
89:77:26:ef:7f:3e:ed:26:c2:5c:03:14:84:38:48:d9:bf:05:
0c:5c:96:24:ee:9a:14:3b:41:cb:62:81:44:83:9a:b9:2c:59:
1f:82:5f:7e:21:cd:df:c8:82:01:d9:ae:c6:e6:e7:36:62:a8:
72:3a:6a:bf:ae:d7:e8:1d:6d:e3:cd:f8:74:9f:a4:33:a7:3e:
e0:c5:1e:f3:fd:84:da:ea:f1:6e:ca:a7:b7:e7:42:73:a6:e9:
fa:01:5a:9d:ed:0a:a6:fd:0a:ef:dc:a0:d4:51:3d:eb:67:d4:
29:b9:0b:07:04:48:7e:54:1b:d3:3c:d8:2e:35:5d:60:22:26:
9a:a2:71:b9:33:e0:21:83:bf:ed:39:e2:7b:71:f6:80:64:03:
5f:01:8f:16:47:d0:7b:c7:b2:49:0d:20:95:3b:04:7a:af:b5:
d2:9c:a7:9e:44:5f:cc:c5:9b:03:d7:aa:07:29:51:9f:dc:be:
43:3d:3a:7f:13:cf:7e:25:02:a3:3a:51:cc:ac:41:f0:e1:c9:
e7:c1:cf:b1:d8:a2:61:80:f5:0f:8a:d7:6b:b3:6b:5a:c6:46:
50:ab:23:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:48 2024 by rpki-client on console-ams.rpki-client.org