Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/HWJRg9jYgt9xASus4b4NvMWxGsg.roa
File: HWJRg9jYgt9xASus4b4NvMWxGsg.roa (raw, json)
Hash identifier: a3/sirzUsSwiH5s8U07+9wvAiA46sV6yUxkr+i8kIRM=
Subject key identifier: 1D:62:51:83:D8:D8:82:DF:71:01:2B:AC:E1:BE:0D:BC:C5:B1:1A:C8
Certificate issuer: /CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Certificate serial: 01856D53F07F402162C0DB32AA039E6E1CBE
Authority key identifier: 49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/HWJRg9jYgt9xASus4b4NvMWxGsg.roa
Signing time: Sun 01 Jan 2023 12:34:55 +0000
ROA not before: Sun 01 Jan 2023 12:34:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44066
IP address blocks: 45.81.232.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:f0:7f:40:21:62:c0:db:32:aa:03:9e:6e:1c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Validity
Not Before: Jan 1 12:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d625183d8d882df71012bace1be0dbcc5b11ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ca:74:08:bf:3b:5e:41:c4:dc:dd:e8:04:6e:
36:6c:17:6f:e8:f2:d2:4a:23:52:e7:46:01:0e:42:
6d:b8:28:06:60:3a:9f:3c:ba:ee:cf:4b:87:9e:b3:
e6:ce:ab:ab:35:46:c8:d5:63:43:49:74:ab:2a:13:
81:4b:46:69:8d:0d:b7:b4:83:7b:bf:dc:5f:7d:dd:
64:7a:66:cf:01:50:cb:eb:0d:40:a2:36:77:93:5a:
c7:a3:63:b2:54:14:a0:66:03:e8:de:ff:85:0d:87:
ec:34:36:b6:fc:4d:95:3e:48:71:1a:f1:a8:85:a8:
80:15:76:4c:71:f2:ae:cd:49:31:4a:74:c7:16:15:
e2:a9:7e:12:9c:8e:92:e7:e2:7c:0d:a0:b4:46:e0:
13:72:2b:47:ec:18:fa:4c:bb:37:fe:a3:84:0f:e3:
cc:bd:25:46:37:60:b2:62:0e:fb:09:27:ba:32:79:
0f:81:ae:28:3a:25:6f:36:73:55:de:1c:72:d5:9c:
70:42:3c:60:6b:43:d3:3e:11:f7:a5:a5:e9:59:ea:
a4:92:42:c9:24:a0:3d:14:e2:37:3c:03:cb:1c:e1:
a0:1e:96:d5:64:b6:0c:3f:99:b0:58:04:1e:c7:2a:
b7:4a:2e:16:72:b0:bd:d9:63:e8:f6:eb:be:8d:a2:
85:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:62:51:83:D8:D8:82:DF:71:01:2B:AC:E1:BE:0D:BC:C5:B1:1A:C8
X509v3 Authority Key Identifier:
keyid:49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/HWJRg9jYgt9xASus4b4NvMWxGsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.232.0/22
Signature Algorithm: sha256WithRSAEncryption
15:c1:af:16:37:bc:8f:14:25:7f:f1:70:78:26:66:67:15:b4:
e9:c4:71:43:81:f4:f8:7c:47:74:f2:7d:62:47:db:62:51:cc:
af:ad:1b:39:b7:a6:d6:0f:4d:91:d0:46:86:89:1c:fe:a6:6b:
41:2f:9f:cb:a0:3b:2c:f5:94:91:01:cc:73:d8:ae:c8:ab:47:
5e:08:6b:1c:7c:57:dc:23:c8:1e:a1:d5:a3:88:7a:da:f0:ae:
0d:ed:a8:8c:74:a2:b7:24:14:23:dc:75:5d:58:b6:f8:72:52:
f5:b2:bb:21:6b:0d:eb:2d:15:43:f5:73:7e:33:06:f9:ae:b0:
9c:bf:59:c1:75:88:4c:e6:a4:94:04:74:8b:a3:0c:c9:c5:d3:
0c:25:6c:ca:bf:b3:92:47:98:5b:ba:f0:df:b0:09:d1:c9:b9:
0c:4d:d9:5e:0f:da:68:e4:d1:00:6c:30:d8:c7:9f:10:b9:ce:
8f:bc:20:45:ca:99:69:ac:c8:cd:51:70:83:b4:c0:19:1a:dc:
83:ed:72:90:c3:d1:9a:0d:e6:4d:a8:da:9a:76:78:24:64:a5:
8e:4e:d1:ef:ae:9c:e5:d6:85:cf:a8:2b:47:78:f1:12:27:af:
e3:30:c0:aa:91:36:65:a9:fe:08:13:49:00:9d:99:fe:4e:af:
f4:db:d0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:11 2024 by rpki-client on console-ams.rpki-client.org