Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6FH6x_RsiSrTe-nN1WNx62uXxPI.roa
File: 6FH6x_RsiSrTe-nN1WNx62uXxPI.roa (raw, json)
Hash identifier: YYuU1FSJGsPFGoMbjXtbabV5JSSB0Q1UemLgEnWdrx0=
Subject key identifier: E8:51:FA:C7:F4:6C:89:2A:D3:7B:E9:CD:D5:63:71:EB:6B:97:C4:F2
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A8F80B1FFD7B38498CE9C75F943419D4F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6FH6x_RsiSrTe-nN1WNx62uXxPI.roa
Signing time: Wed 13 Sep 2023 17:04:50 +0000
ROA not before: Wed 13 Sep 2023 17:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205733
IP address blocks: 45.14.167.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8f:80:b1:ff:d7:b3:84:98:ce:9c:75:f9:43:41:9d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 13 17:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e851fac7f46c892ad37be9cdd56371eb6b97c4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:df:77:2c:37:45:00:9d:81:97:33:23:02:4b:
92:3e:ab:78:d3:0a:39:27:02:4e:be:99:48:6f:89:
c0:76:1d:39:09:c3:0e:04:4e:3a:7d:58:79:3b:e0:
c4:84:59:9d:cd:b1:44:f4:a6:92:ab:15:a3:f9:18:
05:35:1d:cd:36:24:12:7c:ea:e8:99:61:90:2c:a6:
1c:27:6a:2e:79:27:da:2c:00:aa:33:90:7d:4a:ea:
92:83:8f:fc:07:13:eb:68:f7:cf:41:b4:42:21:44:
37:60:f3:46:a5:1c:34:0d:18:87:85:5c:56:5a:27:
39:5b:1c:9f:da:12:df:d5:20:e6:14:90:60:89:c4:
ad:d2:bb:18:73:28:82:70:45:49:67:4c:c5:db:06:
60:66:eb:32:9b:37:8e:cc:71:64:3c:73:a8:b6:72:
ee:82:fd:38:97:f4:94:ed:4f:8c:77:26:5b:a1:04:
ed:2b:fa:cb:b1:7e:dd:21:e8:4d:0d:13:d6:eb:0d:
38:18:b7:a6:43:17:28:75:c2:81:7e:cb:9e:d1:6b:
eb:50:07:49:9b:2d:2e:2a:eb:47:6e:08:8e:37:fd:
c5:02:5c:d7:1e:c9:9a:9b:11:0a:e5:64:17:a6:7c:
8c:a6:80:43:58:d9:4b:aa:f3:b8:5e:38:3d:79:20:
c3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:51:FA:C7:F4:6C:89:2A:D3:7B:E9:CD:D5:63:71:EB:6B:97:C4:F2
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6FH6x_RsiSrTe-nN1WNx62uXxPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.167.0/24
Signature Algorithm: sha256WithRSAEncryption
62:25:9b:c0:8a:9f:19:9b:d4:20:ea:8d:c1:0f:c0:41:4c:57:
8b:8b:05:86:89:61:83:e3:f0:3f:58:fc:37:53:96:c2:47:18:
7e:f6:77:e2:5d:da:bb:0f:ae:41:85:47:23:bd:0e:87:d6:ab:
8f:28:20:15:2c:e9:b8:30:00:04:de:8d:ed:a6:d7:37:0d:11:
15:8d:91:04:4f:69:cf:57:be:b3:ef:93:5b:3a:31:39:de:27:
bb:3b:cd:b5:5a:8d:db:7e:b5:89:2b:8b:34:89:25:54:86:0c:
f0:e3:cb:a5:c6:1e:69:dc:a1:13:c3:4b:4f:ff:c3:78:d0:fc:
d8:14:80:18:58:d4:1f:96:af:28:2e:e0:89:d8:e1:6b:4b:f3:
d2:c9:de:0f:3d:43:fe:69:dc:75:67:59:6e:a3:4f:7a:f9:a8:
29:00:17:d2:03:ff:db:f5:bd:ae:4f:d7:72:a4:25:6b:fe:5f:
ce:2a:57:9b:90:45:c8:72:c7:ca:59:98:0e:0b:e8:d9:34:7b:
6c:23:e3:5b:40:d9:a7:4b:28:c2:91:e7:93:26:31:ae:04:c6:
ca:63:0c:c5:c3:27:77:56:11:f7:22:4d:a2:02:71:7e:40:b0:
e3:1f:d4:ac:cf:65:06:f0:c1:d5:01:84:02:fb:48:5d:65:01:
8e:33:c2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 14 12:54:27 2023 by rpki-client on console-ams.rpki-client.org