Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SXFdfOORwXFZ_7vaHtgaAroN4YI.roa
File: SXFdfOORwXFZ_7vaHtgaAroN4YI.roa (raw, json)
Hash identifier: wCJpmmQDDuf5/OUpQMZ/4N8XtxwJVY8Oablo41EzOAk=
Subject key identifier: 49:71:5D:7C:E3:91:C1:71:59:FF:BB:DA:1E:D8:1A:02:BA:0D:E1:82
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DCE4C08BA91CA26F8CF0AD333EEACE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SXFdfOORwXFZ_7vaHtgaAroN4YI.roa
Signing time: Tue 02 Jan 2024 06:29:28 +0000
ROA not before: Tue 02 Jan 2024 06:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47674
IP address blocks: 45.84.222.0/24 maxlen: 24
194.59.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jan 2024 13:23:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:e4:c0:8b:a9:1c:a2:6f:8c:f0:ad:33:3e:ea:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49715d7ce391c17159ffbbda1ed81a02ba0de182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:92:cf:34:e6:37:e9:7d:19:33:79:71:c2:eb:
4b:ac:3e:ce:f5:24:12:b7:9c:0b:e3:5c:7b:a9:fd:
fb:18:73:f7:f6:f1:09:0f:c1:16:c5:25:bc:6f:42:
65:0f:8f:0b:cf:6c:db:db:09:53:6e:da:63:6d:c9:
d5:05:fd:d8:3d:0a:a8:6a:bb:7c:55:7b:34:f8:53:
6a:50:0b:0c:bc:a7:02:94:0f:4b:a8:b6:a2:77:89:
1e:62:35:a2:c2:75:31:09:53:f4:b2:8d:db:0f:26:
d6:5a:8f:23:f0:f4:8f:7d:98:df:05:3b:87:24:4d:
ab:ba:f4:47:6a:93:b0:4c:e0:69:02:0c:9e:60:15:
51:9f:c7:07:ad:7c:19:55:e9:45:8a:48:b9:41:ae:
83:14:c2:91:54:a0:ac:5c:87:78:ca:d3:e3:c2:fe:
f3:3f:c5:57:60:d0:75:0e:7a:4c:5f:02:91:f9:5a:
24:4e:77:87:62:f8:fe:18:89:a4:67:f6:36:32:36:
b6:a1:34:2f:23:c3:2c:14:d4:c5:85:32:93:d3:c1:
c4:dd:17:d4:3b:11:30:dd:00:9f:a9:23:38:25:f2:
ae:4e:31:93:99:51:6d:3f:ac:0e:97:45:ec:1b:8f:
2c:30:60:bb:de:aa:e0:a1:60:75:00:0a:d4:4a:f6:
7c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:71:5D:7C:E3:91:C1:71:59:FF:BB:DA:1E:D8:1A:02:BA:0D:E1:82
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SXFdfOORwXFZ_7vaHtgaAroN4YI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.222.0/24
194.59.31.0/24
Signature Algorithm: sha256WithRSAEncryption
08:31:13:de:f7:7f:4a:16:c2:80:71:78:7d:86:4a:6c:35:d2:
ec:33:7a:a0:5f:3a:9d:33:88:24:95:c3:45:c9:a7:9d:60:fe:
49:15:56:7a:99:34:ca:0b:71:05:25:6a:12:d7:15:5a:6c:25:
cc:2b:b9:4b:2b:05:f6:d5:01:3b:51:d7:43:f5:a5:36:d7:62:
ff:99:bf:2c:6c:0a:48:19:6c:ac:18:99:4c:cc:7e:f1:84:33:
01:5e:23:3b:ed:6e:4f:65:05:78:c0:39:30:7a:60:d5:83:05:
fa:0e:8b:d3:e0:cb:48:f9:d5:73:0e:2b:60:d6:70:c2:bf:03:
56:59:d0:5d:05:fa:7d:26:3a:ce:5c:93:2e:32:0c:43:4f:f9:
7e:a3:8b:3e:d9:90:6f:8d:87:58:21:29:d4:fb:bd:f2:a8:3f:
ed:e5:ad:8a:d2:44:c4:86:94:1c:df:f5:ba:26:19:8b:9d:fe:
f1:a5:f3:11:17:5c:69:11:5b:ee:ba:dc:c9:b1:3a:3e:96:b0:
4d:67:3e:2b:d3:a1:91:34:45:8f:71:b8:83:b0:3e:3d:f6:6b:
29:2a:a8:8f:8d:b6:7b:64:b8:48:d7:78:01:c7:16:c1:e9:b9:
12:a9:b5:99:0b:93:bc:d2:ec:79:50:44:92:56:e4:8c:fd:8b:
ec:31:bf:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 19 18:27:57 2024 by rpki-client on console-ams.rpki-client.org