Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ib6wShrDrfL2Q1QeaBe77uiWJvg.roa
File: ib6wShrDrfL2Q1QeaBe77uiWJvg.roa (raw, json)
Hash identifier: CfoJB61kvidCk5gDxc4AyNH5Q3MxTBZ5SY8vE1TIJr4=
Subject key identifier: 89:BE:B0:4A:1A:C3:AD:F2:F6:43:54:1E:68:17:BB:EE:E8:96:26:F8
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0186D9E8BD05EBAF4D3D90536773F371EFB2
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ib6wShrDrfL2Q1QeaBe77uiWJvg.roa
Signing time: Mon 13 Mar 2023 07:39:13 +0000
ROA not before: Mon 13 Mar 2023 07:39:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200079
IP address blocks: 45.129.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Mar 2023 07:42:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d9:e8:bd:05:eb:af:4d:3d:90:53:67:73:f3:71:ef:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 13 07:39:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89beb04a1ac3adf2f643541e6817bbeee89626f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:27:eb:96:d3:9b:8f:84:c4:1e:77:37:75:31:
e3:d2:93:7d:d3:92:5f:77:51:e3:b3:65:b8:dd:01:
31:d1:cd:89:01:57:0e:a2:c6:41:4d:73:bf:1b:2a:
7f:28:4f:7f:d2:37:e3:6f:08:21:69:c2:db:a1:17:
8a:c9:8c:86:94:b9:04:10:df:81:22:b5:7d:a9:ff:
63:47:5b:24:e8:b9:1e:fb:01:e5:20:d0:64:45:c9:
c2:c4:15:3c:0b:18:c2:c0:e3:c7:63:dd:36:8a:a0:
8a:f8:d8:7b:53:a2:d7:73:ad:c4:29:23:b1:4a:c6:
84:bc:cd:c0:a9:14:c8:fe:8f:8f:2b:e8:3f:d5:d2:
38:9d:c0:f2:4d:7e:83:c4:ae:da:94:3a:02:21:fb:
81:3a:d2:31:16:80:54:16:29:e4:26:26:ee:ed:e1:
df:5c:0e:0a:a1:4f:46:89:db:87:d1:b9:b4:59:dc:
93:d2:22:b9:29:ca:af:a4:df:27:42:b4:80:ee:93:
83:71:b1:f8:d5:1d:f0:99:1b:d0:65:c3:87:0c:26:
56:86:30:4c:23:54:f0:49:19:dc:22:d1:ac:05:f8:
6f:7d:4a:32:e7:00:9b:cf:0e:bf:19:44:94:5a:14:
45:54:c8:9b:11:98:0f:d2:e1:6a:12:05:4c:68:90:
1c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BE:B0:4A:1A:C3:AD:F2:F6:43:54:1E:68:17:BB:EE:E8:96:26:F8
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ib6wShrDrfL2Q1QeaBe77uiWJvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.87.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:e8:63:a4:05:05:45:7f:e1:95:c0:f6:c0:4d:9c:10:e8:76:
e8:75:5c:79:68:46:a8:4f:8f:40:8c:ea:00:ce:36:2c:1b:5c:
1f:70:37:ad:40:09:db:26:b2:f5:8e:c7:92:0a:8b:48:17:0b:
3f:9d:85:53:45:6e:c7:98:c7:ff:c4:52:4a:c8:54:04:45:06:
5b:e5:23:ff:3b:53:25:ff:f6:ff:1b:51:57:09:cc:45:dd:96:
36:40:32:0e:f5:81:f8:dc:ae:af:29:9e:ea:5c:b8:95:c9:a5:
17:25:3c:da:5c:6c:bb:40:9e:52:91:85:47:55:f3:1d:83:be:
8d:db:31:ba:f5:d8:f5:59:88:ad:79:4a:c2:96:1c:1a:9e:71:
e2:ef:aa:8c:bf:19:fb:02:32:ae:35:49:97:5c:43:4c:f4:ba:
70:a2:2f:16:30:e8:bc:33:87:77:2a:17:eb:b3:cd:86:a6:35:
8e:29:f1:8e:ff:71:6e:d4:b5:2c:ae:25:44:19:37:c4:a1:ae:
a8:65:33:47:50:80:ec:2e:0f:e4:fe:0f:38:9c:7d:1d:5f:7c:
af:2f:b8:09:42:82:ac:cf:a9:21:08:98:e8:44:8d:e3:09:5f:
e0:3d:84:73:aa:08:6f:a8:57:1b:8d:52:ad:26:b2:cf:b7:75:
66:0d:fe:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:41 2024 by rpki-client on console-ams.rpki-client.org