Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/c26nsahE74rSOh2cXujkmBcQ7mk.roa
File: c26nsahE74rSOh2cXujkmBcQ7mk.roa (raw, json)
Hash identifier: iqKRHwylC2rAtCiOQ8gvqYzGCzoLl7FtUhkOWS2VIJ8=
Subject key identifier: 73:6E:A7:B1:A8:44:EF:8A:D2:3A:1D:9C:5E:E8:E4:98:17:10:EE:69
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C3066F139BF044CE8552E3C1BA2E87838
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/c26nsahE74rSOh2cXujkmBcQ7mk.roa
Signing time: Sun 03 Dec 2023 15:58:21 +0000
ROA not before: Sun 03 Dec 2023 15:58:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21859
IP address blocks: 45.8.94.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:30:66:f1:39:bf:04:4c:e8:55:2e:3c:1b:a2:e8:78:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 3 15:58:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=736ea7b1a844ef8ad23a1d9c5ee8e4981710ee69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fe:ed:20:43:63:3b:57:37:b3:e9:0f:5c:cc:
45:25:5d:22:6e:79:d4:82:e9:72:bf:16:8e:8c:ec:
06:43:cd:48:00:54:a8:32:01:63:b2:26:c6:23:82:
c7:7d:64:a5:3a:1d:a8:cf:a7:0d:73:b9:2d:79:db:
6b:2b:a9:2f:76:95:95:40:43:c0:55:cc:cf:19:11:
27:bd:14:b6:78:2a:a1:16:0c:86:0b:2d:8c:09:c0:
ca:43:70:48:85:85:91:fe:ba:c3:d6:f9:85:44:79:
88:dc:52:8d:71:f9:7d:05:52:2e:ea:28:24:16:b6:
87:af:4a:dc:fe:c6:c5:dc:a9:8b:c6:f5:8b:57:88:
17:ea:03:3d:e5:83:b9:91:ca:19:87:38:2e:b4:fb:
74:1b:81:70:01:52:3e:70:71:85:01:cc:48:34:a0:
59:e8:72:ef:10:55:de:bc:72:06:a1:06:48:bf:b5:
06:ae:a2:c0:25:d9:41:c1:ed:2b:fc:b5:ff:8f:6a:
28:9e:c0:3c:fc:74:7e:3a:6c:fb:50:5a:10:ed:cc:
12:2c:43:7d:87:9b:9e:17:4c:27:9b:fc:86:09:54:
41:9e:73:a3:0b:6f:4e:5f:49:ad:09:f4:2e:31:16:
0f:d0:ff:21:8e:14:2e:f8:be:e1:76:50:57:96:5c:
24:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:6E:A7:B1:A8:44:EF:8A:D2:3A:1D:9C:5E:E8:E4:98:17:10:EE:69
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/c26nsahE74rSOh2cXujkmBcQ7mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.94.0/24
Signature Algorithm: sha256WithRSAEncryption
47:28:d3:1a:dc:fe:76:f0:1c:7c:b6:85:d8:1a:6d:29:56:87:
55:a5:7f:35:b8:a2:61:b4:e1:ec:e6:54:40:ec:ef:e2:2c:d6:
a6:cb:3c:43:f5:05:82:74:ab:69:fd:a5:32:0d:ec:30:1b:6b:
54:f6:05:a2:e0:e9:ea:d7:ca:19:d0:4b:1d:8b:8d:fa:f7:cb:
1c:d6:52:63:5b:e9:9f:64:a4:68:5a:26:88:b9:ab:f3:1c:89:
aa:53:6e:d1:45:61:bc:86:a3:c7:4d:76:be:4c:16:7f:eb:89:
71:19:15:02:21:aa:02:89:2a:01:a7:44:84:36:32:0a:23:d2:
56:33:bb:fa:a2:d0:0c:07:10:16:12:5f:96:8a:90:25:2c:af:
98:e1:6a:70:2e:0c:4c:9b:ca:92:5e:2a:8c:dc:ea:9a:ed:15:
0f:45:65:e5:52:8d:bc:98:cd:8a:74:95:57:b9:4a:64:f4:aa:
33:9c:cb:62:92:b2:2f:4a:ce:cf:e0:b7:e3:66:81:4e:e9:f2:
f3:03:d8:9f:c4:9b:94:7d:d4:8e:9e:e0:1d:80:01:59:c1:6d:
9c:88:5e:18:7f:8f:5e:2b:85:36:64:ae:0d:fe:ef:49:71:08:
84:9c:15:ad:53:72:43:db:a8:2a:74:af:65:5c:fe:c1:23:ca:
ec:7f:80:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:12 2024 by rpki-client on console-ams.rpki-client.org