Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Y1P784WFXZwdT3UIyQr06xJaS90.roa
File: Y1P784WFXZwdT3UIyQr06xJaS90.roa (raw, json)
Hash identifier: VE33VPpiNds6x9WNCIYk6s6HzRqRFyvvecqfJ2xbqYM=
Subject key identifier: 63:53:FB:F3:85:85:5D:9C:1D:4F:75:08:C9:0A:F4:EB:12:5A:4B:DD
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018876DD94808CC49CF4F78D716A09776394
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Y1P784WFXZwdT3UIyQr06xJaS90.roa
Signing time: Thu 01 Jun 2023 12:10:12 +0000
ROA not before: Thu 01 Jun 2023 12:10:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210058
IP address blocks: 45.91.192.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:76:dd:94:80:8c:c4:9c:f4:f7:8d:71:6a:09:77:63:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 1 12:10:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6353fbf385855d9c1d4f7508c90af4eb125a4bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a9:b7:f9:e4:95:5f:97:db:bb:08:21:39:a9:
67:ee:05:00:80:53:71:f5:5a:e4:61:f4:27:88:0b:
54:d0:15:d4:97:d7:15:0c:38:d7:2b:b4:57:55:c4:
ee:2d:4a:24:d9:1b:be:4c:a7:eb:b2:a5:60:68:86:
0a:dd:21:0e:d9:24:c3:55:6d:c3:f7:15:ea:b7:dd:
b4:13:ae:e5:c8:73:90:18:d1:e6:65:af:b8:02:9c:
23:e3:a7:f9:88:a3:30:80:e9:7e:d8:76:ac:85:2b:
5d:97:72:8b:d3:c1:5a:9c:23:8b:f6:c6:2c:1a:64:
dd:f5:d0:0c:d0:f8:39:c9:48:0c:83:2a:e2:0c:de:
b5:fd:ae:36:1e:5d:7c:7b:fa:6c:da:b0:15:ef:e0:
59:a0:1f:fc:08:d8:b5:54:a9:e8:5e:5b:62:f1:a2:
22:0c:cd:97:76:1c:74:dc:20:e7:48:2f:54:2d:1b:
e5:01:fa:75:b0:bf:ba:a2:57:02:8f:12:2a:46:2b:
d0:79:24:73:3f:0e:39:56:ca:66:ef:cf:55:e7:3b:
b0:90:72:da:d9:0b:68:50:05:10:66:88:02:ad:f6:
68:f7:18:21:d2:0a:d7:23:15:2f:fc:90:74:87:90:
7f:1e:1b:e0:d8:6a:b5:54:66:1a:4d:fb:11:11:be:
2b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:53:FB:F3:85:85:5D:9C:1D:4F:75:08:C9:0A:F4:EB:12:5A:4B:DD
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Y1P784WFXZwdT3UIyQr06xJaS90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.192.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:dd:1c:cb:13:7f:00:34:3e:f1:df:ad:d5:ab:a2:0a:de:a8:
b5:d4:1d:f6:ad:90:13:42:07:f0:cf:27:42:0d:72:9a:d5:51:
ff:40:6e:f4:01:7c:50:bc:ec:57:6b:ba:b8:58:7f:11:4d:e6:
8c:1e:29:44:10:63:24:49:62:df:16:1d:c5:1c:54:f2:a2:6a:
c4:ee:94:7f:31:7f:22:7e:8f:1e:c7:e0:c6:bb:ce:f2:c2:06:
16:64:d7:41:75:0c:65:df:a4:35:bb:4b:ba:ef:88:5d:8d:bb:
23:2d:98:77:7f:49:50:95:21:61:4f:3a:ac:fb:aa:3e:43:f6:
52:3e:0d:c3:79:75:07:9b:40:4b:e7:c6:e2:7e:45:5c:d1:c3:
fb:0d:e5:6a:a8:fe:9e:be:79:56:6b:da:73:a6:89:52:ed:bd:
cf:f7:a8:f3:41:57:b0:f5:12:bd:f4:6f:f0:30:39:df:7a:0f:
70:97:5e:93:84:08:99:13:25:d5:4a:73:b4:ed:93:fc:ef:67:
af:eb:5a:90:42:0a:bc:f0:77:ff:b2:f0:cc:f9:f1:87:94:8b:
9a:22:54:32:50:7f:f3:bf:25:89:2f:79:6e:2b:55:62:f7:d4:
b2:90:05:8d:85:cb:68:07:f4:3c:45:43:1a:14:6d:55:de:5d:
8b:f8:d2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:11 2024 by rpki-client on console-ams.rpki-client.org