Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/avb_1zoq5YkcCQ9dInxDCgrk2WU.roa
File: avb_1zoq5YkcCQ9dInxDCgrk2WU.roa (raw, json)
Hash identifier: RCudb+8pLA2WrzxVq9L23EcL4Cadl4dCSusPDLKDNas=
Subject key identifier: 6A:F6:FF:D7:3A:2A:E5:89:1C:09:0F:5D:22:7C:43:0A:0A:E4:D9:65
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01899C7A9B368DA2C82794360A63D2639630
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/avb_1zoq5YkcCQ9dInxDCgrk2WU.roa
Signing time: Fri 28 Jul 2023 12:30:27 +0000
ROA not before: Fri 28 Jul 2023 12:30:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49316
IP address blocks: 45.88.66.0/24 maxlen: 24
45.128.235.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9c:7a:9b:36:8d:a2:c8:27:94:36:0a:63:d2:63:96:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 28 12:30:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6af6ffd73a2ae5891c090f5d227c430a0ae4d965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:47:c5:bc:ec:8c:f0:61:1f:cc:7c:55:cc:fd:
4f:1d:41:bc:55:59:4a:9e:03:64:f7:05:9c:15:9f:
ac:77:db:c9:36:a2:5e:57:1b:52:aa:73:e3:87:99:
6f:13:8d:d6:d9:d8:d1:54:43:63:ad:47:0e:d2:91:
57:46:21:a9:59:b1:db:61:37:ff:81:94:0c:8e:b6:
13:29:0c:25:9e:28:f7:4a:77:04:ea:b6:e7:27:8d:
ae:d1:32:89:c3:9e:32:03:76:22:c4:07:61:90:f8:
9c:31:0e:8e:12:64:55:6c:14:7a:b3:af:3b:26:47:
44:e0:4a:6d:70:65:3c:07:de:f8:bc:d4:0d:ae:db:
36:4c:bb:09:f1:03:c1:eb:9b:b0:77:92:66:c5:9b:
e9:5e:54:31:85:2c:98:ed:6f:3d:dd:3d:51:81:48:
70:2d:30:b6:89:e5:8c:75:b2:58:24:2c:97:cd:d3:
83:7a:cc:26:74:2a:0d:6c:2b:04:4f:dd:50:fd:43:
d6:61:3f:5e:4d:f6:92:d2:20:bb:c5:c0:37:e9:ff:
32:25:95:6d:ce:3f:b2:06:e9:5c:6d:15:94:4e:9b:
f1:08:60:f1:24:6c:87:7b:3a:4a:6d:a1:05:fd:96:
7f:96:84:4a:26:40:51:2b:19:e1:57:4b:1b:d2:14:
9f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F6:FF:D7:3A:2A:E5:89:1C:09:0F:5D:22:7C:43:0A:0A:E4:D9:65
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/avb_1zoq5YkcCQ9dInxDCgrk2WU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.66.0/24
45.128.235.0/24
Signature Algorithm: sha256WithRSAEncryption
05:1d:21:f1:9e:18:a6:55:70:a2:c6:48:8b:b5:5d:64:cb:f6:
95:eb:b1:87:17:52:12:a2:a5:9f:f4:7c:72:6a:d0:10:73:d4:
a5:18:d0:69:15:22:74:fc:ce:f4:7b:f6:a5:1d:10:9f:2b:be:
83:76:61:69:9d:5f:a1:ba:01:b3:98:d7:70:61:0a:46:c8:73:
78:55:cb:e4:2e:94:7c:da:79:55:47:b2:1c:47:37:3a:da:78:
8c:af:fb:3b:17:fd:2a:24:33:1f:02:ca:12:17:be:17:e3:85:
69:6b:c2:29:cc:20:0f:cf:45:ce:54:f9:0d:b2:78:87:69:45:
1c:66:31:e0:5f:60:11:9c:89:ec:b0:ab:cb:25:45:c9:84:b0:
b9:51:e0:7e:ef:88:3e:c3:cf:d2:28:9d:ed:04:d7:a6:eb:73:
57:34:03:c6:d3:40:2a:15:40:38:81:84:4b:5e:3b:68:0c:22:
47:fa:b9:99:e5:f1:f1:ff:e3:42:7c:89:91:2f:a9:80:c9:5b:
f5:aa:dd:d6:63:b8:05:f2:23:65:8a:7a:0c:af:31:a5:80:88:
fc:53:2a:27:d4:9a:0f:1e:42:cc:43:bd:ee:61:25:0f:72:df:
51:d0:32:50:af:9f:9a:3a:f2:90:f4:67:04:99:99:09:e5:3d:
b1:7c:7a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 10 09:06:08 2023 by rpki-client on console-ams.rpki-client.org