Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/POqbZP-EQ5ry0V6-ictIncSu_lE.roa
File: POqbZP-EQ5ry0V6-ictIncSu_lE.roa (raw, json)
Hash identifier: NdF+ASuIy5r514oaLKbjNmRuiPfOwxfsCnLh9zz43VA=
Subject key identifier: 3C:EA:9B:64:FF:84:43:9A:F2:D1:5E:BE:89:CB:48:9D:C4:AE:FE:51
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01885356EB2DA4D6BC91FAEA6B7902E8E2FE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/POqbZP-EQ5ry0V6-ictIncSu_lE.roa
Signing time: Thu 25 May 2023 14:36:25 +0000
ROA not before: Thu 25 May 2023 14:36:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 94.156.14.0/24 maxlen: 24
45.129.85.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:53:56:eb:2d:a4:d6:bc:91:fa:ea:6b:79:02:e8:e2:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 25 14:36:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3cea9b64ff84439af2d15ebe89cb489dc4aefe51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b3:82:80:5e:04:d7:2c:0d:18:49:3d:a4:b4:
b0:d1:f7:24:67:24:87:ff:26:75:aa:d8:49:34:3e:
9f:d4:bc:f3:67:88:73:31:d5:c6:39:4b:0b:be:24:
31:1b:ee:10:ad:3f:18:bb:ef:af:b7:87:83:5e:3c:
25:38:a6:c0:a5:a4:b2:7c:b2:35:4f:da:d2:7a:76:
a6:d3:3e:ad:a1:2c:eb:55:53:34:1a:36:94:06:25:
2f:1a:b4:c7:bf:8c:d6:80:ed:71:21:4b:20:1c:89:
46:76:cb:dd:54:cb:da:c5:84:d6:2f:69:52:fc:b1:
07:f9:c6:12:61:88:37:51:39:3c:b2:d4:63:30:c8:
17:3c:9c:62:1d:43:a9:50:bf:72:18:fd:6f:a4:e1:
73:7e:9e:88:32:8c:75:10:57:22:a3:4e:ba:2f:a4:
4f:a6:c8:22:c4:e8:0e:c3:2e:c8:16:ef:f3:74:b1:
ab:92:57:cf:f3:37:96:5b:ce:a9:3d:43:5b:3f:5c:
29:f0:cd:30:d6:b2:09:0b:52:d1:f8:67:c5:61:0e:
6d:58:73:56:b0:2c:6f:8f:34:f2:db:03:1c:05:a3:
b4:56:0b:de:a7:f2:cd:58:72:42:ac:d2:ef:dd:10:
d5:88:77:ec:75:c2:14:27:ff:70:28:f0:63:f2:fa:
71:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:EA:9B:64:FF:84:43:9A:F2:D1:5E:BE:89:CB:48:9D:C4:AE:FE:51
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/POqbZP-EQ5ry0V6-ictIncSu_lE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.85.0/24
94.156.14.0/24
Signature Algorithm: sha256WithRSAEncryption
99:42:27:43:33:2d:0f:21:89:d6:99:a5:18:a4:42:89:31:98:
6d:b3:67:70:81:cf:92:14:2a:b6:4a:11:a5:38:b1:9b:38:f3:
9d:d1:57:46:23:4d:67:e5:4c:cf:28:c6:1c:82:87:93:56:bd:
6a:4e:a0:a0:c5:37:5c:2f:95:03:2e:03:ac:3b:e8:c5:f6:0e:
71:9d:c6:1c:8f:14:69:75:84:8e:a9:36:59:79:fe:2a:9c:ae:
94:80:07:b8:07:2d:ac:9e:30:d7:87:41:2a:24:af:5c:38:6b:
e1:2f:c8:f6:03:76:52:8c:4b:09:e0:45:ae:ef:c3:15:78:5d:
39:60:0f:65:e6:7c:e4:c1:6c:e4:56:33:58:a7:89:51:a4:5f:
8e:2c:45:2f:02:46:51:52:1b:8d:ac:56:08:bb:6e:a2:eb:64:
05:ac:b6:cb:9c:78:8f:40:d8:81:0f:4c:03:8a:8b:5e:8f:28:
17:e0:04:ba:32:7c:bf:ec:83:16:e2:5d:67:cc:5b:04:6e:29:
d7:0d:a6:b9:ba:ca:63:1d:ed:c7:90:b1:de:3d:ac:7d:dd:2f:
f4:63:84:88:e2:65:d2:f7:88:5c:fe:b0:ac:be:c0:7d:0c:21:
f2:53:9e:20:fd:b8:46:38:79:da:ae:5e:d8:d7:c2:d9:5b:0d:
9f:7b:f0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:36 2023 by rpki-client on console-ams.rpki-client.org