Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jQVkxnx16tyV-3TDJuD8R1qvjnI.roa
File: jQVkxnx16tyV-3TDJuD8R1qvjnI.roa (raw, json)
Hash identifier: 0yjh+9TJFGVAt29OZ0gIdkse64bULtnVtGtuN4ssEJY=
Subject key identifier: 8D:05:64:C6:7C:75:EA:DC:95:FB:74:C3:26:E0:FC:47:5A:AF:8E:72
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D81FFDA2DBCBCD11A40A57A60029BA3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jQVkxnx16tyV-3TDJuD8R1qvjnI.roa
Signing time: Sun 01 Jan 2023 13:25:14 +0000
ROA not before: Sun 01 Jan 2023 13:25:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200785
IP address blocks: 45.133.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:ff:da:2d:bc:bc:d1:1a:40:a5:7a:60:02:9b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d0564c67c75eadc95fb74c326e0fc475aaf8e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:90:90:c1:2f:e5:a5:fe:a6:35:f9:55:47:53:
aa:79:4f:5b:0f:8d:19:4d:db:47:21:6c:a4:f6:cd:
4d:7e:cf:a1:b5:c6:80:e2:ab:cf:49:49:d5:d9:40:
a7:07:3d:83:ae:5d:fb:4a:27:56:3b:6a:1f:df:90:
f2:87:d4:82:ce:8e:4a:a6:b3:dd:07:9e:83:93:ec:
8f:99:04:a9:c0:ab:eb:31:fb:8c:01:df:98:a8:78:
ba:72:27:bb:06:78:68:b3:02:5f:00:80:59:a3:dc:
bc:4a:6f:54:5d:9e:07:6e:8b:16:cb:4b:20:f1:7f:
7e:0b:b1:99:b2:b6:ba:8c:d2:7a:0c:46:44:ec:b2:
8e:e8:49:8a:67:7d:7f:b3:c3:b0:a0:b9:41:12:d3:
7e:51:a4:e4:95:87:a7:c1:5b:98:26:cf:73:99:44:
9c:c5:14:5e:ca:c6:9f:bb:5d:40:d7:ae:5f:d8:57:
78:45:67:ed:a2:61:73:10:5b:ea:97:b2:01:3f:6b:
10:18:e0:26:f2:db:15:8f:bf:b8:51:9b:f1:e0:f0:
3a:de:1a:fa:a5:de:b4:8d:dc:c0:0f:bf:c2:05:a0:
7f:01:b1:71:89:5c:11:85:8e:b3:2e:3e:f3:bf:b4:
68:a0:c3:88:56:7a:17:ff:0b:b0:f7:9c:fd:b0:5e:
c1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:05:64:C6:7C:75:EA:DC:95:FB:74:C3:26:E0:FC:47:5A:AF:8E:72
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jQVkxnx16tyV-3TDJuD8R1qvjnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.251.0/24
Signature Algorithm: sha256WithRSAEncryption
09:4f:89:7f:1c:c5:b3:d9:f6:c6:9b:ad:76:65:e6:cb:f7:1e:
f6:35:38:91:2f:23:40:e3:b5:2c:6d:1b:48:94:b3:62:61:99:
3e:88:32:7a:f2:48:37:b5:dc:1e:df:cc:ec:47:71:38:0d:52:
fc:41:b7:1c:64:7b:ea:e3:de:37:82:25:4f:52:5b:69:9b:44:
3f:80:3a:fd:a8:fc:1c:39:ac:1f:07:f2:24:0e:50:62:5c:64:
d0:ee:f9:36:cc:41:b6:04:83:59:29:f0:f8:a3:77:e6:9d:30:
fb:4f:78:c5:db:80:05:e0:00:f7:bf:86:54:e3:a8:83:f2:12:
6f:e8:74:a6:27:9f:ff:bf:28:2a:a9:91:e7:77:19:0e:b5:d7:
4b:fa:58:12:ec:b1:38:41:c9:7c:12:47:ea:c3:0c:42:ee:79:
a1:34:20:e3:1a:6c:72:cd:86:f7:a6:74:4e:5a:3a:27:bb:88:
09:74:d1:17:40:af:a6:f2:d3:eb:99:b5:ee:6d:bc:08:28:ed:
22:5d:b9:b4:48:75:f8:02:12:4e:76:fa:a8:74:58:97:81:e3:
3c:a2:90:aa:91:5e:f2:be:50:f6:6d:8b:86:5b:d6:bc:b5:2b:
8e:70:32:32:8b:05:f7:8f:d4:09:65:62:f2:0c:53:40:02:30:
ab:74:19:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:41 2023 by rpki-client on console-ams.rpki-client.org