Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5jFAXoCtp7ZU_0d120uVGl7i08M.roa
File: 5jFAXoCtp7ZU_0d120uVGl7i08M.roa (raw, json)
Hash identifier: sNC4+L3lXgulek/bA/ds5xFd5fvcGBONIzS8ZvWy2eQ=
Subject key identifier: E6:31:40:5E:80:AD:A7:B6:54:FF:47:75:DB:4B:95:1A:5E:E2:D3:C3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A42720C27524C842069BFFE7EE7E35C03
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5jFAXoCtp7ZU_0d120uVGl7i08M.roa
Signing time: Tue 29 Aug 2023 17:58:05 +0000
ROA not before: Tue 29 Aug 2023 17:58:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45014
IP address blocks: 45.14.166.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:42:72:0c:27:52:4c:84:20:69:bf:fe:7e:e7:e3:5c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 29 17:58:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e631405e80ada7b654ff4775db4b951a5ee2d3c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:83:d5:57:21:46:15:c0:7a:6b:23:b4:c5:87:
e6:89:6f:99:e7:a1:46:cd:cc:de:a9:14:f9:62:37:
4d:35:42:91:9a:b9:2c:84:d9:57:8c:f7:60:83:89:
cf:ca:e0:6b:01:2f:77:e6:29:e3:2b:f0:d9:8e:1a:
cf:bc:76:48:fb:e3:81:21:4a:1f:07:79:ad:99:e1:
cc:a7:7f:59:81:26:9f:29:ab:44:7c:89:94:81:09:
62:b9:56:78:7a:be:9f:93:ee:74:86:8e:2c:5c:1b:
b5:fe:eb:4b:2f:ae:04:9d:c7:39:fc:58:e5:cb:bc:
10:e0:8d:31:9e:83:e5:f2:15:4b:dd:7a:91:8e:6c:
c0:ae:b3:d3:ef:3b:35:17:ff:0e:5f:6f:8f:58:a5:
16:3a:f5:4e:a7:f0:6e:32:ea:33:21:aa:be:66:3e:
35:8a:19:e9:b1:41:26:94:fc:05:17:49:f8:91:95:
4d:7c:ed:21:2f:eb:a3:8f:b2:ff:45:24:16:a5:fa:
38:e0:22:94:5f:62:71:ca:2f:2d:5a:1b:67:9d:c0:
3e:ec:a4:62:e7:e8:03:17:8d:05:54:34:3d:51:f9:
34:b2:20:0e:e1:a9:4c:29:b8:53:37:7d:f1:3b:35:
69:94:26:71:33:e6:9e:5a:13:83:90:30:9d:06:22:
22:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:31:40:5E:80:AD:A7:B6:54:FF:47:75:DB:4B:95:1A:5E:E2:D3:C3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5jFAXoCtp7ZU_0d120uVGl7i08M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.166.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:26:83:54:cc:0a:8c:bd:d3:dd:ae:b4:9c:80:d3:50:be:b1:
d4:ba:62:1e:58:5f:29:cf:2c:53:57:f5:72:e7:d9:46:71:70:
d5:a0:51:27:f0:56:75:31:df:39:09:af:69:f8:6a:bb:5d:24:
19:e3:5b:e8:12:12:28:46:a6:94:32:97:ac:5b:71:f4:f9:d7:
96:f1:33:ad:9f:d8:c6:97:15:70:14:98:c5:d3:0c:c0:2c:a2:
bf:dc:bf:c2:9d:ec:51:9b:89:f4:a2:67:54:b2:86:93:b8:6c:
37:e2:d3:3e:87:ad:f7:4e:a7:2e:81:8a:b0:d3:07:9c:cc:c2:
3e:2e:16:a6:73:9b:bc:61:5b:54:cd:10:6f:3b:17:40:95:45:
78:a0:7f:30:55:8f:e9:ea:0b:44:51:2b:60:bb:95:91:cc:19:
4c:ab:a9:64:41:9d:63:9b:5c:19:69:f1:df:d6:02:96:b6:03:
65:ce:0d:f1:ab:d1:82:89:82:f9:9d:e4:37:a5:5b:52:a2:54:
e9:b1:e2:64:47:f9:f9:e6:76:e5:0f:4e:13:fd:45:34:b9:09:
8e:bc:a3:30:3d:83:c4:a1:69:1d:98:9c:3c:12:1e:f2:3b:34:
37:da:10:80:fc:32:dc:16:bb:b7:36:84:78:cc:0f:d5:23:6a:
44:bf:d9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:09 2024 by rpki-client on console-ams.rpki-client.org