Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OurcliHaW3obAvUjm2dBeKVm1L8.roa
File: OurcliHaW3obAvUjm2dBeKVm1L8.roa (raw, json)
Hash identifier: mNnvVKf/UQEHFd6xWTOVIxrPrc/8DrDYPxkhDDkyeOw=
Subject key identifier: 3A:EA:DC:96:21:DA:5B:7A:1B:02:F5:23:9B:67:41:78:A5:66:D4:BF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0189CF5FEF366385AE6C6844CEF4763A4BB5
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OurcliHaW3obAvUjm2dBeKVm1L8.roa
Signing time: Mon 07 Aug 2023 09:41:58 +0000
ROA not before: Mon 07 Aug 2023 09:41:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60446
IP address blocks: 45.14.164.0/24 maxlen: 24
45.9.157.0/24 maxlen: 24
45.149.233.0/24 maxlen: 24
2.59.252.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cf:5f:ef:36:63:85:ae:6c:68:44:ce:f4:76:3a:4b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 7 09:41:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3aeadc9621da5b7a1b02f5239b674178a566d4bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c3:28:96:34:09:c8:68:34:96:de:de:ea:87:
3c:0a:ea:0a:17:0e:4a:e4:7a:8e:3a:04:42:9f:30:
ef:5a:db:6c:7c:39:67:a3:9c:da:1e:17:18:0e:d7:
55:fa:72:a6:c5:87:18:98:44:7e:1c:fc:8e:02:13:
78:a4:e7:41:0c:02:b0:f6:62:d9:40:11:ec:dd:29:
22:c6:bb:6b:9b:35:96:a0:54:2c:95:47:93:11:0d:
39:96:15:b4:b6:48:a4:89:f3:40:8c:37:bc:c8:85:
b9:1f:d9:f3:fc:d0:52:6a:2d:bf:b9:7c:df:bb:15:
c3:e5:27:d5:5b:4f:19:91:a7:fc:d6:61:e0:dd:b1:
96:9e:99:36:b8:bd:d9:63:a1:da:ed:7f:1f:a0:a4:
f1:5f:0d:bc:4c:c8:5a:09:15:b9:56:86:f7:54:88:
75:2f:3f:42:5e:97:63:bc:08:f0:fe:86:77:a8:47:
16:67:33:07:a4:3c:67:0d:0b:f4:7e:4d:af:18:37:
5e:8b:e1:72:9f:3a:23:1e:9f:86:ad:c4:c2:d8:37:
bc:fe:64:f1:88:90:ee:e3:e0:f2:d5:73:06:61:87:
15:2f:50:1a:f3:d2:7f:1f:ea:b8:29:e1:fe:89:f3:
5a:f7:4d:3b:f8:85:61:19:05:46:81:c5:c1:7f:48:
03:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EA:DC:96:21:DA:5B:7A:1B:02:F5:23:9B:67:41:78:A5:66:D4:BF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OurcliHaW3obAvUjm2dBeKVm1L8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.252.0/24
45.9.157.0/24
45.14.164.0/24
45.149.233.0/24
Signature Algorithm: sha256WithRSAEncryption
42:d0:43:e3:af:e0:90:f5:e8:39:de:4e:02:d3:02:77:e8:e3:
10:09:9a:7a:3c:4a:b1:04:92:c4:26:e9:f0:49:36:71:d6:21:
d3:44:98:da:53:76:7b:3a:79:f6:99:ea:0b:54:84:a4:78:61:
91:7f:df:7b:46:96:21:14:91:d9:af:d0:25:c0:4b:3f:ce:60:
ec:29:6c:d0:04:17:96:c2:42:46:2d:77:ed:08:d7:0b:82:9d:
ea:38:2f:a4:fa:1f:7f:44:4f:ed:d6:e5:aa:66:0d:3a:ad:73:
ed:39:92:cf:e8:b8:13:0b:64:71:b8:ff:84:9b:1d:68:67:d4:
49:26:7a:ca:9e:74:af:c0:fd:65:53:4d:f0:3a:be:79:01:cd:
51:94:4a:d1:4d:03:51:96:2e:91:06:43:ef:89:a0:26:4a:6c:
fd:82:df:19:7f:f4:3e:d9:3b:1b:6b:fc:55:f4:16:55:05:3e:
2f:bc:49:41:90:f7:bb:6e:8b:b4:f5:ea:c0:f2:4b:ea:c6:41:
46:44:a9:88:e9:a1:38:bf:a4:a4:3a:f5:c5:f9:77:66:39:46:
ea:b9:6b:be:97:60:13:4d:35:d2:24:e0:e6:c9:10:c5:3f:93:
a4:bb:45:56:da:de:2d:22:6e:ef:aa:73:ca:d6:55:f0:e7:10:
68:3a:63:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 10 15:03:46 2023 by rpki-client on console-ams.rpki-client.org