Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/a-HtRgbBTSc58P2VU1jEFGDbRp0.roa
File: a-HtRgbBTSc58P2VU1jEFGDbRp0.roa (raw, json)
Hash identifier: XbEloLFZpsm2/YXs0Na8lj8c1DFG7QzDrIulJl6RoRQ=
Subject key identifier: 6B:E1:ED:46:06:C1:4D:27:39:F0:FD:95:53:58:C4:14:60:DB:46:9D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C6CD54ACF5EAE7CE301FD23CC50D7E9A4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/a-HtRgbBTSc58P2VU1jEFGDbRp0.roa
Signing time: Fri 15 Dec 2023 09:36:06 +0000
ROA not before: Fri 15 Dec 2023 09:36:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212027
IP address blocks: 45.66.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6c:d5:4a:cf:5e:ae:7c:e3:01:fd:23:cc:50:d7:e9:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 15 09:36:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6be1ed4606c14d2739f0fd955358c41460db469d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:2b:63:82:a2:08:8d:30:44:8c:3a:7c:ff:cc:
d0:41:eb:34:c5:dd:62:64:49:b6:31:c2:32:11:dd:
c5:bc:eb:9d:45:82:45:c6:66:60:47:34:54:e9:55:
a0:6b:c3:e5:f2:93:0b:1d:9b:17:a2:5f:33:f1:90:
5f:e4:61:42:4b:46:b9:07:ee:c6:b5:27:50:a5:f6:
2b:eb:9f:70:75:7c:89:76:c0:d2:8d:c6:7e:bb:5b:
cf:ec:ac:16:69:2d:a6:fe:fd:db:23:ff:87:52:8d:
81:21:15:fd:8c:cf:7b:12:6c:c7:a5:01:32:24:58:
18:18:8a:7e:8d:d4:73:2e:7f:7d:ec:79:04:26:f0:
d3:ab:27:2d:c2:05:5e:a5:5b:dc:25:54:1a:97:85:
f4:80:a4:63:13:b8:9f:37:0e:10:12:dc:61:9e:c6:
1e:94:6c:27:7b:08:10:84:01:23:17:8c:fe:38:ce:
2b:c8:f4:99:ed:8a:34:45:06:79:4b:f4:5c:ed:ca:
8d:b1:65:e7:57:48:3c:c6:4d:68:28:9b:92:53:3a:
0f:cf:a5:c5:34:26:d2:07:a9:3a:35:45:12:52:b5:
4c:69:0b:3c:07:db:0b:2e:a9:2a:3f:a7:4b:6d:b3:
b2:94:62:7f:4c:e1:f8:c8:4b:c7:d9:d9:ad:e7:7b:
a9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E1:ED:46:06:C1:4D:27:39:F0:FD:95:53:58:C4:14:60:DB:46:9D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/a-HtRgbBTSc58P2VU1jEFGDbRp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.230.0/24
Signature Algorithm: sha256WithRSAEncryption
99:7c:56:8c:a7:37:fc:0d:b0:67:9a:3e:75:09:a6:df:9b:f7:
20:75:60:69:68:e0:7d:c0:15:40:2e:df:85:2d:fe:a0:38:cb:
7e:99:75:0d:28:e2:af:36:f4:ce:cc:3e:2c:79:71:e4:87:d9:
50:7e:47:45:3c:55:01:48:69:06:49:a4:36:d2:9d:41:da:d8:
8e:cf:9e:09:6f:fa:ae:ef:eb:54:04:d1:90:4d:e1:b4:1d:00:
64:c5:31:51:3e:7d:0e:81:50:e1:9f:cd:2f:52:13:cb:af:11:
fe:a8:c9:99:0f:87:4f:02:92:97:11:d7:b9:fa:c6:0f:ff:b1:
a3:91:3b:aa:11:d3:ac:06:d2:33:56:41:bf:91:23:f2:33:f2:
a3:12:42:40:50:c4:5b:90:5c:12:ed:b1:62:80:f0:fd:d4:a9:
be:e8:ba:70:9b:5f:9c:a6:65:ed:8e:9c:c8:9c:5e:ed:7a:ea:
f1:a4:a7:1e:e3:e9:b8:42:7a:34:fc:9c:c7:85:9c:6f:c7:b0:
88:42:b2:81:c0:70:84:ff:1b:8b:20:fd:b7:44:03:3e:e3:3d:
70:6b:bf:3e:95:ae:b9:d2:8a:67:ab:6a:24:60:90:ff:db:84:
38:66:1c:e8:bf:03:a8:7c:20:23:79:b4:4e:6c:90:58:2e:1c:
15:cf:58:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:12 2024 by rpki-client on console-ams.rpki-client.org