Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RXWq1J79BwJLflqOS4YE2atxIq8.roa
File: RXWq1J79BwJLflqOS4YE2atxIq8.roa (raw, json)
Hash identifier: wXIS38MOe4wmrEW+TPIUfkthaACLObH2U8oOjfMcnV0=
Subject key identifier: 45:75:AA:D4:9E:FD:07:02:4B:7E:5A:8E:4B:86:04:D9:AB:71:22:AF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C8B520A94D5EFE9461E0323B9E96A3D85
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RXWq1J79BwJLflqOS4YE2atxIq8.roa
Signing time: Thu 21 Dec 2023 07:40:58 +0000
ROA not before: Thu 21 Dec 2023 07:40:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60539
IP address blocks: 87.121.162.0/24 maxlen: 24
94.156.177.0/24 maxlen: 24
45.84.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8b:52:0a:94:d5:ef:e9:46:1e:03:23:b9:e9:6a:3d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 21 07:40:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4575aad49efd07024b7e5a8e4b8604d9ab7122af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:81:08:5c:17:4f:c8:85:97:a3:da:b3:fe:b5:
a7:6c:11:8b:a1:aa:b0:5e:39:16:a2:77:3f:ec:51:
e8:20:88:85:e7:a7:10:af:40:78:10:62:a6:2a:7a:
f5:ad:26:51:2c:36:d6:95:85:09:75:47:cf:ae:b1:
b8:40:a8:a7:0e:47:2d:e8:38:ca:60:13:a1:89:06:
e1:e4:16:c9:d3:f6:ce:f0:3a:aa:49:73:57:89:b6:
1b:06:dd:9a:5f:c0:9a:5f:68:5f:4f:4d:60:69:fa:
bf:42:02:f9:19:46:e6:7f:ea:13:7e:62:e9:7a:40:
36:44:17:da:af:75:c5:12:5d:0a:fa:51:57:34:16:
7a:0f:d0:70:44:a3:c1:3d:ac:79:4d:34:63:fb:3c:
87:6f:38:8b:4e:0b:07:e0:0d:8b:c9:4e:63:ad:0f:
8d:c0:d6:f9:31:8f:3c:b8:f9:b5:27:38:a1:21:da:
cd:23:46:0a:e0:ad:a1:e8:14:da:84:35:53:f1:d5:
ec:61:49:a0:72:99:d3:6c:13:96:de:3a:5a:67:64:
fe:ee:45:2c:6c:4e:61:a7:6f:58:ae:bc:f3:6d:f0:
76:8b:62:09:2b:87:59:fb:60:d9:4d:72:66:05:d4:
4f:75:79:cb:c4:fb:17:46:19:9e:30:8e:f2:69:82:
c9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:75:AA:D4:9E:FD:07:02:4B:7E:5A:8E:4B:86:04:D9:AB:71:22:AF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RXWq1J79BwJLflqOS4YE2atxIq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.89.0/24
87.121.162.0/24
94.156.177.0/24
Signature Algorithm: sha256WithRSAEncryption
03:8f:18:1f:1f:2e:13:8a:61:de:5d:65:f3:d1:92:c5:57:07:
58:ad:60:21:02:6d:f4:8f:83:88:83:bb:33:85:62:eb:95:a0:
0a:e0:e0:ee:a5:a0:13:74:d6:c0:59:7a:38:a9:69:db:1a:ff:
38:62:7e:ac:b2:0a:3e:de:58:c6:64:5e:e1:30:86:a6:f6:1f:
6f:0e:98:a7:c5:91:9a:f8:b8:b6:fd:7a:62:96:d0:98:3e:84:
b5:f7:29:70:b1:93:06:d2:bd:cc:6a:2b:42:cc:c6:66:80:45:
a0:cd:06:47:78:02:eb:ee:9c:e7:19:18:21:f8:15:1b:1b:16:
37:1d:e3:04:73:e9:c3:d3:ee:0c:50:a1:99:f1:70:c6:5d:ac:
0f:90:b8:9d:64:8e:dd:ca:2d:33:2d:f6:39:7b:52:27:c4:4c:
44:c9:8d:aa:bb:c5:c2:20:e6:7e:45:e4:f7:2a:a8:6b:0c:c4:
dd:bb:59:30:14:a5:85:65:1f:e2:f8:78:fc:bf:2f:67:60:c0:
53:58:2d:74:a1:82:a6:cd:60:2c:11:d6:93:73:7b:ba:9d:75:
e7:4a:e7:aa:9c:cb:8b:fd:bb:0b:89:37:1f:79:1a:8f:0f:95:
2b:32:eb:40:4b:b1:f5:f0:b7:9f:06:ac:9f:97:a8:1c:8d:f9:
e4:74:0f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:10 2024 by rpki-client on console-ams.rpki-client.org