Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eqI6sLiA-GB1lbOxcTij2VjTeIg.roa
File: eqI6sLiA-GB1lbOxcTij2VjTeIg.roa (raw, json)
Hash identifier: HXYTO1L5VHqRDxBmOxxlV0kqhU+xAGoR8rMZIgMxxnY=
Subject key identifier: 7A:A2:3A:B0:B8:80:F8:60:75:95:B3:B1:71:38:A3:D9:58:D3:78:88
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018B5B1750FFDF7ADDFF5F3A38BFE1772D40
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eqI6sLiA-GB1lbOxcTij2VjTeIg.roa
Signing time: Mon 23 Oct 2023 05:52:16 +0000
ROA not before: Mon 23 Oct 2023 05:52:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20911
IP address blocks: 45.90.90.0/23 maxlen: 24
193.42.34.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5b:17:50:ff:df:7a:dd:ff:5f:3a:38:bf:e1:77:2d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 23 05:52:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7aa23ab0b880f8607595b3b17138a3d958d37888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7d:06:95:69:17:20:01:25:16:bb:bf:27:50:
ea:28:0b:c8:3e:4f:29:94:d2:3d:27:07:71:a5:82:
97:9f:d9:99:b8:cb:08:3b:6c:2d:50:56:e6:ba:0e:
6f:d8:ac:5b:17:37:54:42:21:b0:7c:7b:4d:e5:77:
ca:81:2b:84:c3:c6:2d:cd:86:c6:b3:d0:83:20:6d:
c3:56:df:55:95:49:44:18:d6:53:dd:06:3f:8b:95:
d1:57:8c:11:cb:ac:9f:a6:36:1a:f2:9d:b8:d7:06:
c3:0e:cb:6a:d8:7b:d8:a8:97:63:ab:a3:b0:75:de:
0b:ef:1c:ff:46:ef:83:af:67:80:38:97:c1:50:c8:
70:e2:fd:08:73:a3:8e:5b:09:d6:c5:d7:b4:04:02:
3a:7a:a1:7e:de:f4:6c:8f:87:9b:dc:1f:72:dc:d0:
e7:7f:0c:28:0c:71:c5:12:d0:53:77:7d:f7:3b:f1:
fd:1c:dc:4f:69:88:9e:f6:48:81:c2:45:98:8a:ab:
4a:dc:b3:58:23:00:c8:df:07:6e:3f:87:dc:1e:3b:
c2:21:0d:16:c7:d8:d9:b4:24:a0:41:de:d7:af:5d:
7e:1d:59:08:77:bd:d0:af:77:5c:a8:34:f4:c3:cd:
96:b7:12:34:3b:9b:d6:84:cb:dc:5b:17:de:9e:f7:
ca:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A2:3A:B0:B8:80:F8:60:75:95:B3:B1:71:38:A3:D9:58:D3:78:88
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eqI6sLiA-GB1lbOxcTij2VjTeIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.90.0/23
193.42.34.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:53:31:ba:e3:eb:ee:34:f7:e9:d4:69:4f:54:3a:ac:39:84:
0a:e3:bb:17:38:ce:11:02:62:91:aa:e7:27:24:eb:53:8e:00:
aa:66:37:46:26:6c:e2:6b:89:fd:2e:c5:82:98:ee:42:6e:41:
69:f4:13:3a:1b:46:98:c0:9a:c4:fa:26:64:72:c3:f4:6d:e7:
36:e0:7b:31:9c:a1:20:95:f7:65:3c:0d:37:0b:90:6f:32:ee:
d2:f9:fd:51:54:f5:65:83:32:2e:51:4a:d6:27:e8:f9:6e:cc:
a3:6b:1d:82:32:c1:9c:5b:f0:de:0d:b8:89:28:2a:e0:c7:7e:
81:ed:3e:a2:f5:94:f6:52:d3:d0:8f:60:90:16:cc:7a:ac:29:
2d:a9:3d:a8:79:b4:a8:8d:f9:6c:3e:69:77:9f:3b:b3:d0:1b:
bc:de:76:93:5d:94:f2:22:6d:b8:b0:00:f8:7c:d9:79:50:b2:
aa:d5:da:e5:da:97:e6:0f:7b:41:c5:8f:0c:d9:c8:f8:02:17:
ee:65:13:9d:d4:95:70:2c:ae:22:c3:27:87:67:4d:88:e4:ce:
63:a4:ee:49:ab:9b:e3:bd:84:10:eb:81:f9:69:3b:c8:60:df:
6e:77:48:d6:ca:1c:8d:1c:6d:4a:07:9e:5f:ec:84:99:a8:ad:
53:1d:88:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:12 2024 by rpki-client on console-ams.rpki-client.org