Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EdvomW6ZukgacgBbWczXSGzbd0U.roa
File: EdvomW6ZukgacgBbWczXSGzbd0U.roa (raw, json)
Hash identifier: /5MaqJsfXPma5c3v3n7w1XqXN5Y1//G3vQUtFjhpgbw=
Subject key identifier: 11:DB:E8:99:6E:99:BA:48:1A:72:00:5B:59:CC:D7:48:6C:DB:77:45
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0185BFA4154755AD70760F5D0CF442604A4D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EdvomW6ZukgacgBbWczXSGzbd0U.roa
Signing time: Tue 17 Jan 2023 12:11:19 +0000
ROA not before: Tue 17 Jan 2023 12:11:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43607
IP address blocks: 84.54.48.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bf:a4:15:47:55:ad:70:76:0f:5d:0c:f4:42:60:4a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 17 12:11:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11dbe8996e99ba481a72005b59ccd7486cdb7745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:96:d2:1b:c3:cb:a9:0e:f5:84:5c:55:3e:ed:
cd:d6:ee:2e:99:c0:60:3f:aa:9c:c0:5e:26:d9:19:
81:22:01:25:84:a5:a9:3e:55:b4:d5:2f:26:e9:a8:
2d:bb:ab:87:2e:c2:20:00:a5:31:4a:ac:20:fc:10:
27:b8:13:6b:e8:b1:a2:1e:53:97:18:5e:2e:41:40:
37:2a:1f:b4:66:99:17:e0:4e:90:73:a2:ea:f5:67:
24:5e:94:ac:41:4f:7a:fd:6d:ff:0e:9f:10:e0:e5:
ed:e7:79:c2:c8:d6:73:a7:e8:45:08:70:92:25:97:
f3:10:42:da:31:41:3b:99:8a:c0:da:90:9b:b4:2a:
9a:40:50:61:68:c3:e4:57:bf:48:74:91:e3:ea:6a:
75:a3:f5:a7:3f:28:66:ca:85:15:5f:2c:b4:e6:61:
ae:2f:d9:f7:70:bd:75:52:28:07:ca:88:8c:d5:18:
3f:79:0b:ed:01:ac:28:cd:df:dd:ce:1c:f9:7e:c2:
d0:f3:08:6c:9f:f5:71:0b:6c:cf:ae:1a:e9:96:9d:
d6:de:b3:92:12:83:bf:0c:bd:69:21:5a:c9:be:6f:
02:a0:97:37:50:6a:79:8d:87:4d:62:b4:12:4e:88:
0d:89:e0:6a:43:ae:f7:be:21:3f:4b:5a:9e:bf:fc:
b5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DB:E8:99:6E:99:BA:48:1A:72:00:5B:59:CC:D7:48:6C:DB:77:45
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EdvomW6ZukgacgBbWczXSGzbd0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.48.0/24
Signature Algorithm: sha256WithRSAEncryption
17:89:bf:c3:6d:50:02:b2:ec:e8:a2:93:2a:b1:0e:09:fe:0b:
da:77:c1:db:d0:a1:62:c7:f8:d2:58:3c:20:d7:d8:c6:92:2d:
fb:bc:01:0a:5b:bd:70:09:c8:95:c2:68:12:09:1b:d1:0a:c6:
7a:70:68:77:34:1f:cf:4d:80:b1:58:06:2c:e4:06:ac:9d:e9:
6c:74:63:65:c6:98:20:9e:db:a3:da:9b:4b:61:3a:10:77:c8:
ac:e0:12:d2:ef:12:25:0b:86:7b:77:c4:d9:0e:56:62:45:b6:
cc:26:58:3f:5f:84:5c:17:3f:74:d0:fb:eb:e6:08:5b:6a:f7:
d5:0d:d8:25:c3:9b:b5:c0:b7:85:da:e0:92:8b:1c:e0:b5:5f:
e7:d1:c0:59:da:76:7c:9e:1c:b0:c5:aa:14:7f:8e:9e:55:ac:
68:f8:a1:1a:92:20:b8:bf:8c:b4:37:0c:cf:6c:ba:6e:3c:34:
b7:31:95:06:36:90:5a:ae:67:d7:95:14:36:c6:da:ad:f0:75:
47:34:8b:74:cc:ff:1e:f9:bb:72:f7:b4:d2:47:49:ea:22:37:
a0:e3:74:4c:08:c8:49:b9:28:a1:fc:85:02:13:39:33:f2:29:
bc:cf:fc:41:4d:7a:f4:3d:b2:2d:37:89:4b:e5:74:3f:0e:fd:
95:e1:29:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:10 2024 by rpki-client on console-ams.rpki-client.org