Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/h4eizUNQ-igbLVhOM6-FUz7Cua4.roa
File: h4eizUNQ-igbLVhOM6-FUz7Cua4.roa (raw, json)
Hash identifier: TMwYwx5nAnqSxMXtH9fXbickZrAQH73fPrmhOKl309M=
Subject key identifier: 87:87:A2:CD:43:50:FA:28:1B:2D:58:4E:33:AF:85:53:3E:C2:B9:AE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A22251430475E0E3491E07504768AE6F0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/h4eizUNQ-igbLVhOM6-FUz7Cua4.roa
Signing time: Wed 23 Aug 2023 11:26:09 +0000
ROA not before: Wed 23 Aug 2023 11:26:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 147291
IP address blocks: 45.14.167.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:22:25:14:30:47:5e:0e:34:91:e0:75:04:76:8a:e6:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 23 11:26:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8787a2cd4350fa281b2d584e33af85533ec2b9ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ca:62:75:08:d8:d3:84:71:37:95:f7:88:91:
bd:f8:17:74:25:9e:29:de:47:74:62:75:ca:50:fb:
84:1b:73:12:a7:65:ed:03:44:fe:73:b2:81:d5:36:
84:54:a6:7b:8c:4f:c8:a3:e5:c5:1e:70:47:0c:0b:
62:d8:6d:29:bf:d4:f4:f3:d3:c1:47:08:19:a1:d9:
e1:d0:a5:92:e7:aa:ff:fd:c7:f4:0d:1d:8c:c6:41:
4d:d5:37:8c:99:f8:65:07:d7:b8:68:ef:2c:d9:6b:
bd:b5:b2:87:13:5d:bb:d3:38:2a:77:20:73:2f:25:
eb:e8:b4:44:62:10:e3:48:42:5b:7f:d6:38:95:2e:
59:15:f0:bb:fc:dc:ea:42:4f:bb:f3:bb:46:e4:1a:
08:61:4d:f3:6e:0d:d3:dc:e8:3a:54:0c:4c:e4:63:
f4:38:6e:a4:44:65:eb:c7:6a:54:a4:e4:3b:ef:ad:
73:19:d3:fb:ec:4a:04:88:d1:45:bf:dc:48:86:e0:
97:7a:a3:8d:54:d1:9c:f3:6c:81:54:72:46:6f:a4:
d8:34:8f:b0:d8:b8:50:e3:de:fd:7c:e3:6e:e6:1b:
0f:76:ad:25:67:ff:d9:55:e4:95:2d:e7:ba:24:19:
7e:09:d6:ac:28:29:52:aa:40:36:b4:01:db:23:5b:
ea:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:87:A2:CD:43:50:FA:28:1B:2D:58:4E:33:AF:85:53:3E:C2:B9:AE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/h4eizUNQ-igbLVhOM6-FUz7Cua4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.167.0/24
Signature Algorithm: sha256WithRSAEncryption
36:4f:01:a5:08:57:89:ae:db:2b:3e:6c:9c:c4:44:14:2e:97:
9b:4e:ef:61:7a:fe:f7:92:45:df:34:4f:27:f1:47:dc:b8:87:
a9:7d:a1:38:89:99:25:41:7c:a4:1d:ac:2b:44:ae:15:51:1b:
e5:ed:4f:b0:4c:ed:60:22:14:12:d5:64:be:83:6f:b4:64:42:
e6:b9:27:00:89:ca:72:4d:c6:09:e3:7a:ac:dc:48:67:0c:59:
ec:83:12:04:0a:0d:d1:1d:09:37:5e:07:30:46:ce:87:25:30:
b6:19:88:c8:5e:ba:e9:03:42:f3:f9:a5:cd:52:9e:f0:30:c9:
53:f0:54:cd:ba:e3:fb:ae:34:a9:b6:89:6d:63:a7:a7:f3:43:
5e:4d:96:80:e3:ab:be:21:0c:e9:a9:98:b2:4c:f1:eb:85:9e:
26:db:27:5c:90:d5:3a:c2:ee:57:2f:7f:6b:8d:3c:4b:ac:b9:
73:14:ee:6b:81:d9:d7:f5:27:f1:9f:18:9b:c0:80:46:61:f1:
50:b8:d7:a8:08:cc:eb:a1:d7:f2:9a:09:d7:72:89:22:47:16:
55:30:de:2c:c5:49:af:03:2b:49:9e:fe:4e:bf:85:bc:bf:bc:
19:78:fa:98:3e:15:8a:a6:c7:65:86:c0:4b:31:b3:c8:79:a6:
ca:3c:c9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 6 13:41:49 2023 by rpki-client on console-ams.rpki-client.org