Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bj2granrdtj_1U6vFP3X38JSKfo.roa
File: bj2granrdtj_1U6vFP3X38JSKfo.roa (raw, json)
Hash identifier: eLoeE7liJf1g6L70YEJMcLWjroQOXCpxTRMRBuo51aU=
Subject key identifier: 6E:3D:A0:AD:A9:EB:76:D8:FF:D5:4E:AF:14:FD:D7:DF:C2:52:29:FA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A83DBBC1A21E5360118B346DB0AA93E28
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bj2granrdtj_1U6vFP3X38JSKfo.roa
Signing time: Mon 11 Sep 2023 10:48:50 +0000
ROA not before: Mon 11 Sep 2023 10:48:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201021
IP address blocks: 45.151.91.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:83:db:bc:1a:21:e5:36:01:18:b3:46:db:0a:a9:3e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 11 10:48:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e3da0ada9eb76d8ffd54eaf14fdd7dfc25229fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d4:b2:62:03:fa:26:ef:24:f5:e3:25:e9:70:
20:4f:2b:6b:9e:d8:05:62:b5:97:0c:3c:48:d2:57:
2f:20:a3:36:cc:ed:a3:96:73:ac:4d:2b:16:24:81:
c4:00:23:ac:05:4e:cc:38:6d:0c:b9:a0:17:53:e8:
12:2e:30:4a:37:de:ff:b7:7c:e2:04:6e:02:8b:8b:
f9:aa:79:cf:71:d1:6a:25:0d:e4:ee:a0:ce:f1:d8:
3b:22:9b:64:75:81:0c:80:33:08:b2:9b:b5:f0:35:
b7:8a:62:b3:3c:e0:12:80:ad:13:da:10:24:b5:41:
43:c8:4c:95:5c:ae:13:f5:95:30:41:bc:b1:fd:15:
5f:70:91:30:2a:b6:d0:e9:15:40:00:63:f5:08:63:
5e:cf:57:57:5e:fe:c3:3d:06:09:53:a4:8e:cb:53:
d4:16:ce:2c:89:af:ba:bf:e4:d6:dc:07:a8:cc:2b:
89:9f:1e:d3:28:72:6c:0b:1f:c2:eb:b3:ec:27:2c:
96:8a:58:05:a8:4e:c5:6f:80:33:eb:80:30:30:87:
c7:4c:c5:9e:2a:a6:cc:79:56:84:b1:6b:61:df:e9:
ab:8a:57:27:ee:a2:63:12:58:62:5e:8f:81:6f:b8:
ea:38:5c:04:0f:fd:2a:6f:00:73:6b:42:9c:e0:83:
b1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3D:A0:AD:A9:EB:76:D8:FF:D5:4E:AF:14:FD:D7:DF:C2:52:29:FA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bj2granrdtj_1U6vFP3X38JSKfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.91.0/24
Signature Algorithm: sha256WithRSAEncryption
86:d4:e1:f5:14:01:2a:2d:3c:54:fb:f8:1a:15:99:cf:80:cd:
cc:b6:2c:25:be:2c:19:4f:10:f8:5a:49:a2:6d:f4:00:ef:35:
a7:a2:8d:28:fe:c8:e6:34:c1:aa:0f:4b:c8:3e:0a:00:62:59:
7b:d9:30:90:2c:d4:7a:3d:19:9a:fb:a9:dd:06:f7:9a:d7:5b:
6e:98:c5:66:1f:64:d9:eb:b6:a4:1a:e8:27:2a:ae:fe:36:57:
a9:43:dc:cd:91:33:10:a2:b8:55:1d:b6:29:45:6a:9f:e7:9f:
39:51:3b:00:17:45:36:e2:db:5d:6d:d1:11:80:12:0b:2f:61:
31:81:e8:03:54:1b:27:84:5f:84:d5:b3:da:ff:e0:7e:bb:36:
12:df:01:9d:76:02:52:e0:fb:21:49:5d:c9:76:0f:85:0f:cc:
0e:c5:e2:7c:4c:b3:cc:5e:9b:8c:9c:6e:01:30:c2:a1:ab:02:
8f:13:b0:70:23:5a:ed:cd:46:b0:24:17:7d:7e:3f:65:f4:f6:
15:42:85:77:3d:c6:11:f2:0f:09:1f:de:b5:b0:c4:14:e9:05:
1e:e6:a1:1c:fb:69:20:d0:0b:e5:bd:bf:f9:41:9e:fb:d9:8a:
97:36:31:b3:65:d3:f4:d2:60:5e:13:f0:81:6e:08:3e:26:15:
97:65:08:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 16 12:58:13 2023 by rpki-client on console-ams.rpki-client.org