Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fLoqMJOJHvn1T7numibhzn5rQD8.roa
File: fLoqMJOJHvn1T7numibhzn5rQD8.roa (raw, json)
Hash identifier: h+ttT/KFpuHPTzwMKwaRE6+X91Zh6FGxVYuq/BGDcg0=
Subject key identifier: 7C:BA:2A:30:93:89:1E:F9:F5:4F:B9:EE:9A:26:E1:CE:7E:6B:40:3F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C1026B74F840C08536B5CC769205C8355
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fLoqMJOJHvn1T7numibhzn5rQD8.roa
Signing time: Mon 27 Nov 2023 09:40:21 +0000
ROA not before: Mon 27 Nov 2023 09:40:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215955
IP address blocks: 45.14.167.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:10:26:b7:4f:84:0c:08:53:6b:5c:c7:69:20:5c:83:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 27 09:40:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cba2a3093891ef9f54fb9ee9a26e1ce7e6b403f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:23:63:28:88:3f:15:26:0c:0f:d7:97:2e:4f:
d8:35:15:93:01:4d:24:41:a0:b0:ea:c4:d4:82:6f:
d0:08:0b:9d:71:b2:29:ad:0e:38:54:a7:94:0f:b8:
18:98:59:73:39:15:cb:cc:49:85:95:a2:d4:1a:bf:
c9:48:40:31:09:36:cb:5d:cf:96:20:e3:b9:74:34:
17:0d:ca:34:1b:56:da:b4:f4:bb:73:6e:69:91:c2:
3f:6d:a3:25:5c:52:02:82:4c:19:c2:2c:dc:84:c6:
c6:96:36:d8:10:b5:df:65:a2:90:34:0b:77:8f:63:
67:cd:da:32:3e:60:99:9b:0a:87:bc:af:29:2f:8d:
37:3d:a9:fa:9b:97:14:f5:af:ed:82:77:b9:55:86:
cd:b0:a0:63:b9:61:aa:2b:e8:a3:5b:40:70:0d:d9:
f9:23:f2:b3:ea:31:ea:96:c0:28:d7:b0:d1:e9:0c:
2f:ed:20:1f:dd:de:5a:8a:9c:d1:e0:fb:63:5b:e2:
92:ff:ed:0c:ca:1e:e8:e7:32:fe:40:76:51:61:ec:
05:aa:95:11:d1:a9:b5:ab:73:24:0c:f7:0e:b1:45:
8f:83:6d:ac:5d:20:d5:c5:65:2e:f2:99:6a:46:b7:
84:e6:f9:5e:1e:1f:fc:72:db:8d:7f:61:a8:9a:8a:
20:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BA:2A:30:93:89:1E:F9:F5:4F:B9:EE:9A:26:E1:CE:7E:6B:40:3F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fLoqMJOJHvn1T7numibhzn5rQD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.167.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:53:28:ef:80:ad:2d:28:d5:ae:63:ff:e1:7a:fd:0f:80:46:
c8:c0:6f:7b:1c:af:88:2f:a5:c6:6e:3c:ff:94:4e:ed:11:67:
1f:40:07:77:1e:fc:15:49:20:32:18:b6:29:1a:c6:fe:2a:82:
d2:c3:07:91:6e:f9:3f:bf:10:1e:dd:74:96:0f:6a:18:af:d5:
49:77:a8:62:df:00:1e:00:5b:dc:64:3d:a2:ba:ff:0a:ed:92:
31:93:a8:78:f3:ed:5a:6e:e8:a4:c5:13:e8:80:b6:f5:bf:8e:
98:b3:af:a6:7b:18:21:99:0c:af:87:85:c0:01:59:46:84:3a:
d8:d0:94:c8:45:23:2a:21:32:ed:d1:6f:98:f9:d2:59:a1:b2:
7b:95:3d:51:76:5c:d9:01:2e:fd:31:23:53:46:38:a2:b5:f2:
8c:fc:46:f7:e2:c2:9b:51:9e:f9:45:88:d7:57:df:b0:d0:c3:
40:6b:94:36:3b:6d:3c:06:5c:79:86:33:e8:96:aa:4b:61:9a:
f2:ee:15:74:82:7c:5e:af:6b:cf:a9:0d:44:90:68:fb:c7:a4:
78:d0:53:4b:d0:d4:04:6d:ac:2d:d4:4a:48:ef:4b:a9:f3:45:
40:22:d9:b5:5d:35:9e:e9:0d:f0:8a:09:c9:0e:a8:74:3c:50:
5e:65:05:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:12 2024 by rpki-client on console-ams.rpki-client.org