Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5BM7vIzVd2YzC64USlChqP2zfJY.roa
File: 5BM7vIzVd2YzC64USlChqP2zfJY.roa (raw, json)
Hash identifier: RkDDUyNIpRoTzJ7nEZJiEdg6Bpfwc1Mz5TiNctpyCoU=
Subject key identifier: E4:13:3B:BC:8C:D5:77:66:33:0B:AE:14:4A:50:A1:A8:FD:B3:7C:96
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0187B42BCCADF7B6B584BCAFEE185190A745
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5BM7vIzVd2YzC64USlChqP2zfJY.roa
Signing time: Mon 24 Apr 2023 16:49:41 +0000
ROA not before: Mon 24 Apr 2023 16:49:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213257
IP address blocks: 45.84.90.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b4:2b:cc:ad:f7:b6:b5:84:bc:af:ee:18:51:90:a7:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 24 16:49:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4133bbc8cd57766330bae144a50a1a8fdb37c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:55:64:ba:16:3d:cc:93:f3:c3:34:83:0d:3d:
d4:7d:7d:1b:cb:68:7d:88:61:68:45:aa:70:6d:a1:
d5:80:ac:14:48:da:93:e5:11:73:a4:44:e1:f7:f2:
1c:25:71:5b:b0:0d:bc:10:17:3e:0c:0a:45:63:ea:
5b:bb:14:87:b1:2a:61:e1:00:3c:b1:8a:79:3d:21:
62:66:db:15:16:ff:5f:2f:46:b9:7f:59:6c:bc:01:
10:93:29:e7:e6:85:96:56:57:7a:89:cd:14:b4:58:
c8:2b:7f:fe:73:29:b2:35:38:66:b0:2b:04:13:9a:
25:8b:e8:58:7a:db:73:7f:5d:56:81:8a:3f:3c:54:
6d:ef:47:12:d7:21:63:1d:1e:11:0c:e4:18:14:42:
b5:29:5d:ce:cb:33:98:d4:0a:67:5f:8e:3b:54:8b:
22:3f:f8:2f:5a:eb:80:b2:5c:61:15:54:44:b3:c8:
9b:bf:41:3b:bb:3c:85:75:e3:c0:ba:6e:34:66:d6:
90:43:8d:c1:39:52:3c:f3:41:ca:7a:e1:15:7c:2f:
b3:e0:57:10:b9:0c:f8:b0:a8:93:f1:8b:68:cf:6c:
55:a5:a8:f6:09:a7:8e:0c:36:85:1b:4f:fe:29:1e:
5e:32:b1:24:18:d7:26:9a:84:25:9c:74:77:40:a0:
78:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:13:3B:BC:8C:D5:77:66:33:0B:AE:14:4A:50:A1:A8:FD:B3:7C:96
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5BM7vIzVd2YzC64USlChqP2zfJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.90.0/24
Signature Algorithm: sha256WithRSAEncryption
68:0b:5d:95:61:8d:d8:14:69:c3:83:fc:1a:2e:ee:78:1a:ec:
b3:e6:bf:12:6e:c6:4c:57:8d:50:7f:6c:b1:79:fd:3f:af:d1:
f0:d3:4a:15:0b:05:c0:03:65:eb:99:4e:ca:46:11:2a:1c:2a:
20:00:9f:b6:11:da:62:e3:62:f6:77:a6:63:ee:13:78:75:67:
5f:fb:b4:be:a3:23:fb:f4:74:57:44:5a:f6:f1:17:5d:2a:cf:
f0:43:cd:c6:b3:66:d9:cf:80:4b:d7:be:ed:2b:21:04:5b:0c:
98:42:f0:08:16:cb:4f:2a:23:64:f6:d1:f6:2a:0f:ef:e1:fb:
12:7c:d8:9d:80:64:95:eb:50:83:95:7d:2c:25:57:90:60:b2:
8d:0c:c3:b9:c3:1c:3b:33:9a:a2:8e:b9:ba:7b:80:53:a4:02:
5c:5b:a7:db:61:85:3f:24:ed:6a:b3:d8:e5:bb:72:e4:5c:8e:
ea:46:20:cc:72:42:d3:d6:b9:9d:8d:0f:d9:a8:ee:85:91:21:
a9:db:31:98:ea:57:9f:08:06:f0:4d:10:f9:12:5b:97:72:69:
ed:43:d3:75:c5:70:96:2f:44:5c:47:04:87:52:40:24:5d:de:
e1:d8:fa:18:bf:25:1b:e5:9f:79:20:4b:d8:d9:4d:b0:db:05:
3a:45:c2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:31 2023 by rpki-client on console-ams.rpki-client.org