Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gNnxiOJ2V4moINd-jaK9lReN3O8.roa
File: gNnxiOJ2V4moINd-jaK9lReN3O8.roa (raw, json)
Hash identifier: 9OdjTZ31ctHS89jiX1YL6+VpzgdbfOaT2V8yr5YBLBc=
Subject key identifier: 80:D9:F1:88:E2:76:57:89:A8:20:D7:7E:8D:A2:BD:95:17:8D:DC:EF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CA6C4B7CDC246FEAD77E71996A6DFF20C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gNnxiOJ2V4moINd-jaK9lReN3O8.roa
Signing time: Tue 26 Dec 2023 15:35:59 +0000
ROA not before: Tue 26 Dec 2023 15:35:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200636
IP address blocks: 45.12.253.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a6:c4:b7:cd:c2:46:fe:ad:77:e7:19:96:a6:df:f2:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 26 15:35:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80d9f188e2765789a820d77e8da2bd95178ddcef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:03:d1:e2:34:2d:dd:3f:9f:3c:c5:59:e9:3f:
85:9f:28:53:6a:66:a3:1b:ba:0d:05:2f:18:23:48:
5e:14:68:89:5b:57:9b:ae:d0:93:7b:67:7b:2c:2b:
d4:88:27:a9:ca:e4:aa:c2:22:83:ba:4e:fa:e6:42:
5f:fb:30:3b:cd:8a:54:65:32:9e:9d:f8:3a:92:f6:
2d:54:ca:e7:d0:c8:be:1b:1f:25:78:af:39:54:ba:
b8:9e:72:d6:40:70:3d:f4:e7:0c:b3:9b:ea:7b:24:
e7:14:03:a6:2c:3e:3c:b1:00:a5:81:2c:89:4b:cc:
76:7e:cf:e1:bf:25:5f:d3:51:07:c9:99:42:fd:17:
e4:73:f5:b1:bb:52:a0:a5:28:2e:81:4a:b7:0d:4b:
a4:5b:05:dd:52:8d:8d:44:bb:ad:99:0d:8f:dc:fc:
1d:c8:63:ce:18:b7:55:a5:00:99:dd:30:11:f8:f9:
e5:43:67:e4:31:fc:b9:5d:e4:8a:f5:c8:8b:cf:6b:
44:26:45:ab:54:e3:13:d3:84:34:76:03:c5:9f:ba:
bc:e2:7e:e2:8f:52:6b:dc:2d:f8:cb:6a:ac:e0:11:
92:03:87:af:7f:2e:d4:70:6a:ce:d1:96:45:96:1d:
8e:27:31:28:79:2d:a2:46:23:c8:5c:19:56:1d:dc:
4d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D9:F1:88:E2:76:57:89:A8:20:D7:7E:8D:A2:BD:95:17:8D:DC:EF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gNnxiOJ2V4moINd-jaK9lReN3O8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.253.0/24
Signature Algorithm: sha256WithRSAEncryption
37:2e:15:6f:2b:5b:76:a2:2c:bf:41:12:c8:67:8f:09:1d:99:
04:29:6a:ec:63:a6:af:49:79:05:97:dd:ac:38:74:37:58:b2:
89:6b:b4:f9:1c:e0:2c:50:6a:cb:65:f8:85:49:33:e0:be:5f:
89:f2:c2:e8:fb:ff:7b:24:e4:7e:92:d2:14:72:09:3f:ad:5d:
cb:e7:e2:95:eb:c6:4e:90:55:1f:a1:e1:85:f1:a0:b7:45:c9:
90:71:a8:50:19:f4:29:28:92:8b:26:c1:75:76:38:0a:94:fd:
e7:e9:0f:aa:db:8f:ad:ed:c2:e4:3b:1e:c9:21:96:09:1e:bd:
92:31:b1:83:01:58:5c:5c:e4:3d:87:d6:ac:05:86:1b:52:f1:
05:a7:e3:54:7b:8d:7d:eb:2d:17:8d:7d:a2:cf:28:34:c2:14:
ed:f8:0d:f7:a7:de:cf:c5:40:c4:06:96:6a:54:6c:d0:e8:38:
4d:61:3a:db:9d:d0:83:48:5f:58:0a:54:ac:04:9d:46:2c:92:
a4:dd:9f:1f:ba:a0:03:37:8e:88:59:4d:40:9c:6b:57:7c:27:
11:a6:21:a8:ee:f6:f4:2d:7d:9f:81:8d:8b:08:51:73:de:61:
6e:e7:4b:78:11:05:df:7f:cb:b1:d1:59:3f:a9:36:80:18:b5:
47:dd:f2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:12 2024 by rpki-client on console-ams.rpki-client.org