Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7Y3sfMcF9ueJNavfnvXYMR9eURc.roa
File: 7Y3sfMcF9ueJNavfnvXYMR9eURc.roa (raw, json)
Hash identifier: c67gVDvypS3BUJyzIZWPYhSv+pOyHYNF3v843dn+p6o=
Subject key identifier: ED:8D:EC:7C:C7:05:F6:E7:89:35:AB:DF:9E:F5:D8:31:1F:5E:51:17
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018612B223FD2256F7B9D77A6E8D6F502945
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7Y3sfMcF9ueJNavfnvXYMR9eURc.roa
Signing time: Thu 02 Feb 2023 15:15:09 +0000
ROA not before: Thu 02 Feb 2023 15:15:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200079
IP address blocks: 45.128.233.0/24 maxlen: 24
45.129.87.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:12:b2:23:fd:22:56:f7:b9:d7:7a:6e:8d:6f:50:29:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 2 15:15:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed8dec7cc705f6e78935abdf9ef5d8311f5e5117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ce:c2:90:97:ef:ff:7b:b3:bd:0a:a8:41:9d:
e9:b6:2b:20:a3:16:d7:e7:1a:23:c4:5e:aa:ac:98:
c4:11:ff:a7:a6:d5:eb:b4:13:48:da:3e:92:d5:ce:
46:43:ee:42:fa:2c:f4:de:ab:fc:0f:7f:43:dd:0e:
b0:9a:4c:2c:98:8a:dd:65:db:c3:f8:a7:79:06:31:
aa:f1:54:29:20:e2:1c:8e:e5:52:35:11:ab:25:6c:
af:e9:12:bb:2d:57:8b:f0:72:4d:d9:be:5d:d3:19:
44:b0:12:a7:e4:e2:61:d2:73:4a:5f:30:67:b0:ad:
a1:84:bf:a8:e5:6b:e2:6a:69:cb:40:f8:7c:6d:41:
36:be:85:02:a7:d7:02:ff:76:cb:38:87:c2:89:c7:
7f:58:36:3b:40:16:a5:2f:45:54:ee:2d:5a:2b:aa:
6d:04:63:e8:05:16:da:8b:ed:7d:46:db:45:0b:07:
96:28:e5:ba:d6:e4:a0:1d:2c:0d:86:5a:2c:51:dc:
39:87:69:59:62:bd:f4:1f:87:2a:7c:dc:eb:47:f4:
d3:d1:bd:fa:34:e4:b0:85:83:5b:26:fa:0e:82:a8:
57:3e:37:86:91:2b:79:38:cf:51:b7:86:8a:ed:a6:
ff:23:e2:ff:19:7d:89:e2:e7:be:90:96:81:c3:f0:
54:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8D:EC:7C:C7:05:F6:E7:89:35:AB:DF:9E:F5:D8:31:1F:5E:51:17
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7Y3sfMcF9ueJNavfnvXYMR9eURc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.233.0/24
45.129.87.0/24
Signature Algorithm: sha256WithRSAEncryption
22:f8:5b:a9:b3:15:ae:3a:75:eb:15:fb:ae:37:e1:e5:72:91:
b2:86:e4:51:89:e2:56:32:19:6e:fe:71:66:e4:6e:29:2f:10:
3e:03:53:9b:01:bb:6d:b9:9f:a1:84:b8:55:1c:85:00:fe:37:
d5:ef:cf:53:48:4d:b5:75:11:6b:91:1a:e5:6e:96:37:7c:97:
e8:33:6b:4f:d5:2d:c0:d3:0f:61:d6:87:c5:62:71:a9:69:7c:
7f:2b:b4:a9:47:08:a2:94:41:b6:57:8f:08:30:07:11:aa:aa:
cd:ff:a9:d9:16:c1:ef:dc:2f:76:5f:77:57:b9:02:f4:d4:eb:
9f:10:26:08:a1:a7:92:67:a1:3d:f2:1e:ea:e9:82:92:aa:14:
55:99:40:ab:76:cd:79:1c:3c:33:7e:61:ae:5a:c5:34:4b:97:
bd:42:90:e8:7c:5b:3c:bf:f3:8d:34:83:b8:b9:f9:b7:ef:69:
bd:ab:c2:a8:d6:c2:cd:61:12:fe:75:46:ab:2c:98:1c:a2:8c:
3c:e5:56:e7:60:48:61:79:15:43:9f:93:cf:1d:a1:c0:cb:9a:
c5:43:aa:fb:a4:78:f1:4a:be:3b:23:9c:2f:fb:21:86:29:bc:
db:4c:55:bf:76:be:ec:0f:2b:12:86:7c:94:7e:8b:c9:b7:16:
8b:a3:e8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:32 2023 by rpki-client on console-ams.rpki-client.org