Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fzeWE1ZRWa5_6Wt_HayzQN13OwY.roa
File: fzeWE1ZRWa5_6Wt_HayzQN13OwY.roa (raw, json)
Hash identifier: 16XMqWqoKFptq6XguF1S67lTC8nm5adHMrkIa/Wu28A=
Subject key identifier: 7F:37:96:13:56:51:59:AE:7F:E9:6B:7F:1D:AC:B3:40:DD:77:3B:06
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D81E37153EDA7C0F01E5326368E11D7
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fzeWE1ZRWa5_6Wt_HayzQN13OwY.roa
Signing time: Sun 01 Jan 2023 13:25:06 +0000
ROA not before: Sun 01 Jan 2023 13:25:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38337
IP address blocks: 45.88.66.0/24 maxlen: 24
194.180.49.0/24 maxlen: 24
185.225.75.0/24 maxlen: 24
45.128.235.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:e3:71:53:ed:a7:c0:f0:1e:53:26:36:8e:11:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f379613565159ae7fe96b7f1dacb340dd773b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:14:01:06:d1:90:0f:7a:0d:16:ac:b5:85:e5:
28:00:cb:90:99:d8:9f:78:79:2b:f0:16:11:ea:3f:
cb:05:9b:c5:2d:21:41:d6:36:f9:6e:05:8c:58:1c:
11:0d:70:18:5a:de:11:80:0a:ec:9b:16:15:5f:8f:
28:07:4c:b2:00:00:92:db:5c:d3:1c:ce:4c:3b:b4:
73:de:52:c9:96:47:c0:3f:28:d8:9a:94:18:38:5a:
aa:10:63:2b:8f:ab:f7:d0:b2:b8:49:89:4b:b4:3d:
3b:f9:b7:c5:45:02:eb:d7:de:51:09:15:71:c3:df:
60:90:23:bd:25:6c:6c:05:f9:4e:d6:1d:d3:4a:1b:
4a:44:5b:69:28:60:8c:aa:b5:43:2b:6a:be:ad:74:
0f:02:f7:f0:d8:9c:73:04:4d:b8:a1:88:f5:61:88:
36:b8:c7:5f:8f:df:68:2d:0b:b7:ba:ed:73:aa:0c:
61:6b:03:31:a5:46:4c:13:10:8c:b9:ed:1d:7a:c2:
80:d1:69:f5:c1:1d:a4:1d:7b:36:83:39:66:3a:cf:
38:58:56:1b:8c:57:39:42:2a:13:69:b9:3e:48:09:
91:95:20:b4:bf:e1:05:58:fa:91:ed:a5:00:5a:67:
23:b5:9b:77:96:6c:b1:2b:96:2a:c0:67:9b:aa:9a:
d4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:37:96:13:56:51:59:AE:7F:E9:6B:7F:1D:AC:B3:40:DD:77:3B:06
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fzeWE1ZRWa5_6Wt_HayzQN13OwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.66.0/24
45.128.235.0/24
185.225.75.0/24
194.180.49.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:c4:35:3d:5b:7d:6a:66:6b:f3:e5:b5:f9:71:9d:8e:ad:32:
88:c8:f0:ec:30:32:12:ca:72:45:ca:35:38:33:a8:79:95:fe:
90:26:69:64:3f:b1:26:0f:ce:32:9c:80:5c:ba:e6:79:0d:04:
6a:2a:b9:e4:b4:89:e5:ae:72:af:77:2f:7a:db:3e:00:79:f9:
11:52:f9:02:c6:74:7c:a9:a0:ac:42:24:aa:10:d8:86:26:8e:
7d:29:99:aa:90:0d:fa:58:a5:93:1e:71:59:68:7e:6f:9a:62:
0e:e1:ac:29:fa:ab:20:c5:7a:12:18:1e:ff:c2:b7:26:61:97:
3f:84:53:11:e0:64:dd:e1:bc:93:ce:c3:62:ec:26:80:6e:74:
24:29:95:e6:0d:be:ad:44:b7:86:bd:dc:21:fd:02:bb:ec:b8:
ec:a6:2e:b5:4a:9e:ad:9d:e2:f1:57:69:6b:83:b5:8e:c5:b4:
70:10:29:1f:b1:e4:27:6e:02:a0:33:a0:fc:f1:3e:61:52:6f:
fa:20:6d:a7:fe:c5:ac:02:73:5c:d1:e4:f2:1d:36:71:3e:38:
33:45:da:4e:d2:54:9e:7e:7f:fc:ea:e7:1c:89:4b:7f:0a:d2:
39:36:ef:0a:8b:72:99:5d:a7:c2:e1:bb:7f:09:29:b2:0c:8d:
2a:d6:1e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:40 2023 by rpki-client on console-ams.rpki-client.org