Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iI6FAQH7-Qv7jx5X2V6TiUO4NQ4.roa
File: iI6FAQH7-Qv7jx5X2V6TiUO4NQ4.roa (raw, json)
Hash identifier: yvUvzv79CsgTE9LqSn7YivbQU0gHTsqE9gd7PjtDNEg=
Subject key identifier: 88:8E:85:01:01:FB:F9:0B:FB:8F:1E:57:D9:5E:93:89:43:B8:35:0E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C824C48329B05CFF7000B71274083FA35
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iI6FAQH7-Qv7jx5X2V6TiUO4NQ4.roa
Signing time: Tue 19 Dec 2023 13:38:06 +0000
ROA not before: Tue 19 Dec 2023 13:38:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203168
IP address blocks: 45.128.96.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:82:4c:48:32:9b:05:cf:f7:00:0b:71:27:40:83:fa:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 19 13:38:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=888e850101fbf90bfb8f1e57d95e938943b8350e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2a:b2:3b:35:7a:e7:a1:a9:86:38:ff:bc:e0:
e3:cc:e7:c4:97:f5:03:c2:f9:c0:14:97:2c:41:36:
e2:9f:1f:c1:bc:fd:b2:be:d1:88:60:64:73:89:46:
c4:4f:b3:1a:8e:d9:3e:ed:0b:14:12:ca:4a:b4:d7:
65:ba:23:fc:37:e1:f1:46:78:ad:98:20:5f:53:36:
df:82:f8:9a:4c:35:26:16:48:91:5e:4e:fa:c8:bb:
68:6b:18:00:c3:f7:0a:49:ee:c5:68:6e:17:60:e5:
25:d5:34:ea:6a:2d:26:dc:9a:a3:36:5b:69:39:45:
b2:a7:5d:c0:a4:49:90:28:ee:6c:c3:cc:4c:1c:7e:
9f:02:17:d1:81:a9:84:5a:d2:0d:00:a0:c7:97:b3:
11:dd:35:d1:06:54:92:dc:45:c4:c8:51:00:9f:33:
18:8d:3e:f9:c5:5c:8d:70:73:59:b5:e5:07:20:17:
7d:e9:55:2b:11:9d:a2:7f:2b:3c:d1:a3:a5:86:4b:
1d:60:c1:e6:e5:46:25:fd:d8:6b:dd:85:f6:8d:1a:
40:ca:22:90:3d:06:64:a7:00:fa:5c:b6:35:d2:a7:
92:7f:6f:52:f2:08:8e:8f:e8:91:8d:6a:a1:2c:d1:
e9:93:3f:c0:35:49:fc:fe:4d:a8:89:6f:dc:55:6d:
d2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8E:85:01:01:FB:F9:0B:FB:8F:1E:57:D9:5E:93:89:43:B8:35:0E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iI6FAQH7-Qv7jx5X2V6TiUO4NQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.96.0/24
Signature Algorithm: sha256WithRSAEncryption
10:2d:de:aa:15:cf:1a:30:06:cb:28:59:cb:49:13:41:08:97:
3f:90:d4:c5:3c:02:dc:f7:c8:0c:9a:28:00:a7:95:73:35:1c:
aa:9f:44:ed:ab:d2:1b:cc:d9:76:2e:a2:81:ba:99:2e:92:62:
f8:fd:89:7a:d7:e6:4d:1d:91:ec:c0:2e:8f:a0:54:6c:23:4f:
14:30:84:bf:be:8f:0a:9c:b1:b0:d2:ad:e6:b9:ad:a1:63:2b:
c0:ab:d9:31:2b:85:1f:fd:59:9a:12:bd:1e:be:82:4c:e0:0b:
ef:81:d3:ef:89:77:04:c5:a2:b8:9b:20:61:b6:db:01:50:36:
1a:94:7c:68:18:30:eb:41:76:85:07:34:01:d4:ef:9e:9a:7d:
18:1c:25:db:39:e9:95:f6:f3:31:a6:03:92:85:6b:0e:88:a9:
7c:f2:95:56:bb:72:4e:e7:5e:ca:dd:ce:da:f4:06:47:6c:e9:
4a:75:d9:9c:b4:a1:b4:6e:b9:3d:b1:c0:98:f7:83:6f:c2:a2:
0d:7c:c2:af:0b:76:5a:51:7e:fa:85:70:e6:b6:ef:79:c2:98:
67:67:30:20:42:3f:63:a7:82:50:38:f5:a1:e4:2d:e0:3d:e3:
8d:c3:23:66:0a:79:ac:86:38:9d:c9:03:0f:70:34:05:5f:58:
0f:b0:bc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:18:48 2024 by rpki-client on console-fra.rpki-client.org