Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Qor0kn0hP6usdoII183gR2XfbXc.roa
File: Qor0kn0hP6usdoII183gR2XfbXc.roa (raw, json)
Hash identifier: NFdCRx0hd7qhhN26MyLM59v12rRZ+rViyeF+lmLFaO4=
Subject key identifier: 42:8A:F4:92:7D:21:3F:AB:AC:76:82:08:D7:CD:E0:47:65:DF:6D:77
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A1DBDEC0DA6E911A15B5F1A8570D28B55
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Qor0kn0hP6usdoII183gR2XfbXc.roa
Signing time: Tue 22 Aug 2023 14:55:00 +0000
ROA not before: Tue 22 Aug 2023 14:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209371
IP address blocks: 45.128.96.0/24 maxlen: 24
45.84.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1d:bd:ec:0d:a6:e9:11:a1:5b:5f:1a:85:70:d2:8b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 22 14:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=428af4927d213fabac768208d7cde04765df6d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:da:df:a2:e9:bf:dc:3c:20:8b:a1:c2:05:44:
48:ee:d1:d4:f5:b4:0a:63:e4:1c:5d:c8:0f:ee:c1:
a4:3c:76:7b:e3:9c:2c:95:11:47:3e:50:21:da:b9:
78:46:ee:60:53:45:3e:70:64:8f:a8:c8:eb:30:6a:
8f:5a:7c:3f:8d:a0:88:87:4c:9d:29:44:3e:b5:21:
3d:f8:a1:67:8f:96:b6:b7:5e:a2:42:5c:37:da:eb:
2b:bf:13:b5:8d:6d:d5:14:97:db:9d:b2:fa:15:a8:
1a:2b:7c:db:f4:a5:74:f9:f4:c7:86:3d:16:b9:99:
8b:3b:69:02:83:18:fb:41:33:65:15:41:74:ce:d2:
b7:48:32:aa:6e:5d:2c:57:aa:40:88:c4:70:63:11:
2b:15:58:c5:c0:d8:68:20:e8:4c:27:6e:61:b8:2f:
c3:46:dd:6e:4f:7d:34:61:67:c0:ed:54:ed:1c:41:
fc:8b:0d:00:e9:e5:58:75:f5:c6:96:cb:78:96:3f:
ec:2c:16:5b:a7:45:cb:b5:33:38:58:d9:61:47:76:
0f:3c:18:2c:9d:22:ba:64:ea:92:62:3b:7b:bd:76:
54:03:02:b1:02:12:4d:65:88:81:92:45:36:44:fb:
d4:b4:ba:fa:37:a7:aa:5b:02:37:9d:3c:7e:d8:9b:
2f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8A:F4:92:7D:21:3F:AB:AC:76:82:08:D7:CD:E0:47:65:DF:6D:77
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Qor0kn0hP6usdoII183gR2XfbXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.89.0/24
45.128.96.0/24
Signature Algorithm: sha256WithRSAEncryption
64:cd:d5:a6:2c:d0:fe:74:5a:b6:b9:ba:44:83:7e:81:fe:0a:
d7:e2:1e:52:12:29:54:f2:f6:2f:37:3e:39:2f:9e:2d:84:03:
a7:b7:6f:5d:79:c1:22:44:de:76:a6:c4:ab:53:34:2c:a2:60:
b3:0a:e6:0f:e4:36:3f:1b:45:fd:92:b7:81:93:8e:77:bd:ca:
f4:2f:d3:1e:ee:13:8f:1a:1a:ff:2c:ce:b6:08:7b:d4:d7:92:
15:14:e6:e0:4f:87:1d:b0:11:a1:35:ae:5a:7b:31:f0:5b:14:
2a:b4:61:cd:e6:07:28:49:25:e1:d7:72:b5:34:1e:a5:62:28:
0a:1c:c4:c1:f2:34:d7:74:4e:ac:b9:bb:2a:8b:a8:d3:8e:49:
c6:0e:9a:65:c3:0a:bd:3e:76:f2:e6:a3:5b:7e:26:7c:59:07:
32:51:8a:47:f3:6f:ba:4c:51:c7:2c:35:c7:ca:d4:ed:ff:b7:
90:cc:b8:40:7e:b0:ee:c5:a1:29:3a:14:0f:98:1d:34:2c:f8:
11:74:80:53:42:ef:02:12:a9:1e:5c:22:f8:f1:0b:83:90:35:
03:d2:4f:b7:a8:ab:15:8e:62:8f:79:3c:7a:68:d4:f4:49:f2:
f8:e3:63:74:ed:f7:e8:8c:93:73:19:67:1a:cd:01:f7:72:f5:
53:af:cc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 19 13:10:42 2023 by rpki-client on console-ams.rpki-client.org