Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8W6i-h5mjVRR9EkbPao6kDXRSmM.roa
File: 8W6i-h5mjVRR9EkbPao6kDXRSmM.roa (raw, json)
Hash identifier: 9RheNw1/evpgK4u7Bw1GyHSA5yghMrl8M+HQUK/kLio=
Subject key identifier: F1:6E:A2:FA:1E:66:8D:54:51:F4:49:1B:3D:AA:3A:90:35:D1:4A:63
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0187807D8282F1AC3E85A399ACD9BE08B8A1
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8W6i-h5mjVRR9EkbPao6kDXRSmM.roa
Signing time: Fri 14 Apr 2023 15:58:41 +0000
ROA not before: Fri 14 Apr 2023 15:58:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19437
IP address blocks: 45.8.95.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:80:7d:82:82:f1:ac:3e:85:a3:99:ac:d9:be:08:b8:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 14 15:58:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f16ea2fa1e668d5451f4491b3daa3a9035d14a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:89:71:37:f4:c8:65:88:b5:03:63:31:ad:e3:
41:cf:da:a1:14:9a:fc:9b:9a:f5:22:53:45:0c:f8:
28:cb:b5:52:64:87:d9:f0:df:c5:d2:a7:a5:a9:02:
c0:2e:68:21:f1:93:51:ca:7f:53:de:2d:93:14:bb:
22:08:46:4a:14:bb:cb:da:d7:3f:0f:d9:44:db:d3:
8e:6a:88:de:f9:67:ae:f7:88:d0:14:01:ee:61:68:
89:de:3e:11:d6:00:ca:f2:c6:06:72:20:7e:e3:f1:
a0:65:20:33:07:f9:9b:98:0e:64:da:20:ac:a1:92:
d3:d2:c8:69:bf:17:8d:65:56:3b:ae:00:34:10:b1:
09:e7:c1:0f:ce:79:fc:cd:95:eb:d3:4e:a7:db:7c:
51:78:ee:91:3b:50:d9:e4:8f:61:32:15:f0:cc:55:
e2:58:99:3f:a6:c8:4c:f8:26:bd:45:58:48:c9:41:
d0:01:f1:da:fa:1b:d5:9a:c1:5a:ad:61:66:14:39:
03:b4:b7:3a:b2:64:8e:15:bf:ec:70:8c:5a:2a:ed:
0e:aa:14:97:66:34:ac:62:63:dc:c7:e5:24:4c:9c:
4b:b7:83:27:54:7c:a2:8a:ee:a7:d8:c6:01:81:2e:
96:f4:7c:f5:9e:fc:f9:a4:e1:a2:cb:df:ba:28:bd:
67:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6E:A2:FA:1E:66:8D:54:51:F4:49:1B:3D:AA:3A:90:35:D1:4A:63
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8W6i-h5mjVRR9EkbPao6kDXRSmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.95.0/24
Signature Algorithm: sha256WithRSAEncryption
15:6e:6b:c8:e7:08:a9:72:57:af:42:bf:d6:de:a2:9c:54:31:
0e:e6:54:4d:95:d6:e4:f5:95:50:6e:6f:c7:bc:6f:b8:42:04:
01:9e:f2:68:a9:be:4c:ff:68:7c:94:0a:6f:e6:c9:d4:c8:fd:
7e:15:de:74:50:8e:70:88:f3:43:f5:36:96:23:75:a8:43:1b:
d0:1a:93:0d:64:91:06:02:41:1c:8c:8a:0d:e3:77:88:39:d9:
14:3e:06:ec:5b:bf:3d:e3:aa:4b:ff:b7:d3:2b:d9:f8:42:13:
36:1e:db:c2:2d:55:d5:5a:15:55:82:6e:38:86:f3:65:eb:5e:
37:54:6e:1e:21:4c:71:5c:ce:88:c1:8d:f5:21:3e:8d:31:dd:
7a:e1:f7:07:13:d7:26:91:a7:bd:aa:f4:9d:e1:a1:d2:46:a7:
a7:1c:3e:31:fa:9c:54:fb:0d:cc:19:db:5f:55:2e:c5:8d:b3:
28:7f:0c:dc:28:ce:f5:24:33:de:4b:21:7f:1f:78:44:74:75:
92:2e:a4:24:c3:1e:a5:e1:80:53:28:60:32:15:87:0b:50:a6:
90:0d:74:9d:f0:e4:c9:0c:58:c3:f2:0b:1e:f2:19:8a:5a:03:
68:3a:82:7d:de:25:ee:6d:da:3d:0d:b0:42:05:01:7a:53:b4:
fe:b5:a0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:09 2024 by rpki-client on console-ams.rpki-client.org