Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/c2TS82tEQ7SJpWbzTiEYv5DB6wU.roa
File: c2TS82tEQ7SJpWbzTiEYv5DB6wU.roa (raw, json)
Hash identifier: BVFhMhiLYFoLK3wMkIcNQMX/binPfeZGmCTz2ucY+Zo=
Subject key identifier: 73:64:D2:F3:6B:44:43:B4:89:A5:66:F3:4E:21:18:BF:90:C1:EB:05
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DCD44CC55941D7BFA682034273E41B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/c2TS82tEQ7SJpWbzTiEYv5DB6wU.roa
Signing time: Tue 02 Jan 2024 06:29:24 +0000
ROA not before: Tue 02 Jan 2024 06:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 45.8.94.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:d4:4c:c5:59:41:d7:bf:a6:82:03:42:73:e4:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7364d2f36b4443b489a566f34e2118bf90c1eb05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:65:f7:a4:77:ae:11:dd:91:3a:86:82:d0:49:
be:d5:5a:c4:b9:f1:2b:dd:fc:a0:6a:5a:6a:0f:75:
ee:5a:c5:84:84:be:43:da:53:48:74:e4:63:32:b9:
bc:6c:e6:1e:a5:52:0c:c6:ad:9a:8f:b3:e7:0b:31:
7a:9d:43:cd:59:f6:c1:67:a1:9f:5c:26:f5:92:95:
1c:92:16:08:52:a9:3f:70:59:65:19:46:e7:50:4d:
2a:2a:2e:2b:43:49:91:fb:af:e7:0c:d2:d7:90:44:
41:68:6b:11:bf:db:c1:cf:5a:4f:05:f0:72:f9:5b:
9c:04:62:f1:c9:7d:db:58:dc:eb:78:75:1b:60:0a:
1f:d4:f4:1a:ee:88:ab:9e:da:46:74:04:86:3e:43:
f8:ae:b9:2f:7a:2f:0d:a3:9d:76:fe:ff:cd:98:b6:
56:b2:29:c2:f2:59:3c:d9:77:a3:8e:3c:f5:ad:6d:
6f:14:20:e5:41:b7:8a:79:62:39:da:38:42:64:f1:
e4:41:d7:bc:88:ba:5b:6d:8a:d8:7a:0d:d6:bf:0a:
75:aa:bd:6c:26:ed:7d:f5:ca:0b:f8:47:09:db:6f:
76:f3:10:81:d3:21:25:73:23:ca:3d:d7:6e:d1:b1:
99:7a:d7:32:55:6c:7a:e0:1e:9a:f1:1a:9a:10:6f:
50:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:64:D2:F3:6B:44:43:B4:89:A5:66:F3:4E:21:18:BF:90:C1:EB:05
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/c2TS82tEQ7SJpWbzTiEYv5DB6wU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.94.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:2f:ec:58:84:61:30:84:9f:16:76:01:65:4a:ae:d5:ae:cf:
51:a2:6e:43:fa:53:03:e2:90:0a:fe:65:aa:ce:f6:59:2c:ab:
18:83:46:8e:28:44:bf:23:3b:d2:46:05:9d:b3:41:43:79:eb:
75:90:5d:f5:92:4e:de:e8:86:69:31:22:11:43:d6:31:44:f3:
2c:53:0a:49:e2:cf:c9:b6:df:1e:7a:5d:53:76:dd:c0:e5:53:
7b:39:26:d3:76:f2:dd:e8:bf:98:22:12:73:1e:0c:b2:76:cf:
2e:de:4d:b0:ae:f9:39:65:69:91:fd:7d:a2:2e:64:b7:a0:c3:
4c:1b:6b:ee:e2:d5:75:a3:92:eb:a5:ee:f4:69:57:26:81:13:
d4:38:ee:14:c2:f5:43:75:b5:f4:07:2f:db:7d:01:63:ae:2f:
53:01:bd:55:49:95:64:f4:41:16:bd:33:0f:c5:d0:c4:8a:a6:
fd:ea:dc:df:3c:99:a9:6b:89:a3:6c:d0:fe:7e:ee:5b:57:b8:
cb:73:16:f7:a6:99:ee:f0:c1:dd:9a:d5:8f:51:fc:95:e7:04:
35:76:b1:ee:3c:04:ed:c6:9f:e0:f5:7a:e1:7b:01:16:77:14:
f3:c4:3f:0f:91:97:bf:21:95:b3:41:aa:71:8e:4d:b6:d9:50:
d0:dc:84:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:34:16 2024 by rpki-client on console-ams.rpki-client.org