Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NyMFF6fhrJKqLfK29s2_PsNr9LU.roa
File: NyMFF6fhrJKqLfK29s2_PsNr9LU.roa (raw, json)
Hash identifier: lQQJh7UxJzeZsbIxJP7mBF0JEwWpfMpZZalzzfU/t20=
Subject key identifier: 37:23:05:17:A7:E1:AC:92:AA:2D:F2:B6:F6:CD:BF:3E:C3:6B:F4:B5
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0185867D62F4E6D7399F16B9A46402550D51
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NyMFF6fhrJKqLfK29s2_PsNr9LU.roa
Signing time: Fri 06 Jan 2023 09:50:42 +0000
ROA not before: Fri 06 Jan 2023 09:50:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47969
IP address blocks: 45.9.158.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:86:7d:62:f4:e6:d7:39:9f:16:b9:a4:64:02:55:0d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 6 09:50:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37230517a7e1ac92aa2df2b6f6cdbf3ec36bf4b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:08:92:9c:ac:85:da:62:b5:64:b7:6f:9e:06:
c4:5b:88:c0:ee:3b:41:ed:e9:6c:66:2b:9f:91:70:
6d:ff:b2:7a:87:b7:b1:0d:18:59:29:e6:3e:fd:22:
f0:6f:14:a5:71:16:5a:b2:6f:00:82:6c:85:93:bb:
38:9a:ef:c7:3c:0a:80:d9:9c:6c:91:83:10:de:4e:
0c:9a:3f:8b:89:bf:ed:89:ab:9f:8a:0c:a9:47:3d:
29:3c:b3:69:ff:a4:33:4e:ab:6e:d4:b7:17:87:9b:
c7:91:eb:18:26:fb:dc:8c:e5:92:97:25:21:4e:df:
22:75:80:89:61:5c:d6:2d:08:b8:a4:23:c1:7e:99:
87:ad:c6:1e:10:84:88:a9:98:37:ae:19:3f:bd:01:
11:cb:14:63:8f:df:0b:81:5b:bb:91:51:b3:91:86:
3d:9f:b5:4f:66:b6:ef:c9:9e:ee:09:24:91:2c:9d:
85:91:77:c0:dd:f1:51:97:b2:03:bb:b4:a9:93:21:
07:96:05:7e:35:07:da:6d:95:ef:8b:85:0d:f7:2a:
0a:a4:ec:bf:18:09:01:00:55:6d:e8:b4:2e:b2:18:
3e:b6:bd:f2:fb:df:06:77:d9:34:8e:e1:d3:33:e7:
21:3e:90:41:9d:28:ba:89:33:0f:ab:87:75:5c:49:
da:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:23:05:17:A7:E1:AC:92:AA:2D:F2:B6:F6:CD:BF:3E:C3:6B:F4:B5
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NyMFF6fhrJKqLfK29s2_PsNr9LU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.158.0/23
Signature Algorithm: sha256WithRSAEncryption
19:08:b6:95:54:ed:74:3f:03:bc:33:47:fd:2f:7e:17:51:55:
06:0d:4c:17:49:12:d9:a2:d0:11:62:5b:86:a0:60:18:2f:1d:
db:12:e0:4c:a5:88:96:18:18:1d:a1:3a:5a:45:ef:f8:74:89:
4a:68:e5:29:78:17:b1:a0:65:a5:25:0c:2e:53:4a:26:9c:69:
92:12:0b:87:30:b7:e2:46:2c:48:42:ab:c1:04:43:d4:c5:e6:
57:be:d3:37:cd:9f:ff:16:74:85:7e:12:26:1f:0e:af:60:a5:
30:47:66:94:de:a5:50:65:ac:4d:8c:6d:8c:7a:ac:22:a2:0f:
5b:6a:16:59:40:02:8e:88:bf:8e:b9:e7:e9:50:36:e6:07:54:
13:a4:97:f1:9d:02:f7:f4:b1:9f:99:ba:ae:42:e6:39:34:ce:
b3:35:78:90:e1:46:8a:43:6e:f1:a4:c3:30:93:17:42:8b:dd:
9b:4b:8b:07:44:29:ec:38:da:1e:87:de:57:55:7f:12:57:52:
be:fb:e0:3a:33:2e:be:2e:78:3b:59:d9:c9:b0:05:aa:b8:d6:
c9:a5:a3:6b:24:83:e1:29:fd:db:2e:46:a2:8a:c6:45:ac:11:
dc:1f:41:82:f9:6e:82:e4:f3:5a:78:a7:40:a5:b7:cf:c2:b2:
fd:05:f2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:10 2024 by rpki-client on console-ams.rpki-client.org