Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/kqcH3p5p1osO4wpAYC1oYtLZPD0.roa
File: kqcH3p5p1osO4wpAYC1oYtLZPD0.roa (raw, json)
Hash identifier: 2UF5DfsiJ5AMsOHtIBKK18seqlIVRiALFTbA/116aa0=
Subject key identifier: 92:A7:07:DE:9E:69:D6:8B:0E:E3:0A:40:60:2D:68:62:D2:D9:3C:3D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018BCE52DD8B4F889BDC530B69A40C6A7CA5
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/kqcH3p5p1osO4wpAYC1oYtLZPD0.roa
Signing time: Tue 14 Nov 2023 14:53:39 +0000
ROA not before: Tue 14 Nov 2023 14:53:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216181
IP address blocks: 45.84.90.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ce:52:dd:8b:4f:88:9b:dc:53:0b:69:a4:0c:6a:7c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 14 14:53:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92a707de9e69d68b0ee30a40602d6862d2d93c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e3:38:d8:8d:7b:0a:11:c7:ad:79:51:2e:27:
3a:95:74:86:0c:ae:13:e0:59:90:1a:08:16:3c:51:
d0:f4:97:a7:81:e7:5c:5d:9c:01:5c:12:3a:96:41:
d5:2a:00:2f:58:2e:e5:72:b8:49:77:1b:bd:26:f4:
37:ea:9f:b5:f4:46:d5:a1:31:f9:43:13:e6:66:ee:
cc:78:41:e2:b1:93:b1:14:8e:4b:31:ae:ad:3e:05:
b1:11:81:2c:4c:89:bf:fd:15:cd:bf:68:43:be:4e:
3d:bb:23:50:04:8e:d2:a1:8e:ac:f1:57:b2:39:e2:
25:96:98:ad:a6:8e:7f:1a:bf:e6:9c:81:00:72:db:
59:54:c1:ad:c5:eb:67:bb:79:49:bb:17:0a:b9:9e:
1b:64:29:ef:70:25:5f:e6:d6:f0:ba:67:8c:f3:23:
71:0f:42:0d:fe:fa:e4:c6:0a:1f:a6:d1:fb:74:90:
a1:17:52:dc:d0:ba:a8:27:2e:00:6c:c9:11:8e:1e:
e6:79:43:a1:32:4a:27:3f:4e:88:63:29:4f:33:27:
7c:76:d1:9e:b1:77:fa:8a:2b:6e:db:25:70:35:e1:
a4:92:4e:38:e0:c4:2f:db:22:16:13:60:d1:89:ee:
78:7b:ed:a6:0f:92:e8:91:e4:b8:03:c9:2c:46:1f:
9b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A7:07:DE:9E:69:D6:8B:0E:E3:0A:40:60:2D:68:62:D2:D9:3C:3D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/kqcH3p5p1osO4wpAYC1oYtLZPD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.90.0/24
Signature Algorithm: sha256WithRSAEncryption
87:26:f9:f5:66:d7:7f:34:18:23:63:c9:60:72:dc:1a:6d:08:
76:8d:28:fe:0b:cf:59:63:f3:7a:5b:4c:21:bc:fa:b8:6a:0b:
37:50:80:ab:ce:ef:cd:01:28:7d:14:a2:bb:9d:c1:55:ac:31:
65:60:b0:88:b0:30:45:ce:8d:9e:4f:79:e6:ec:bd:e3:ca:34:
5e:03:8a:c9:79:27:3b:98:ee:81:c1:a9:8c:be:a2:08:94:ee:
b9:7f:cf:8b:58:53:38:10:64:5b:b8:8c:c5:99:b7:b0:dd:9a:
e5:6f:62:b6:bd:7a:ee:61:1e:b0:76:3b:66:38:8e:26:2b:d1:
55:a2:21:b7:56:6b:aa:24:f9:53:c5:36:94:fc:eb:b5:86:be:
6b:91:e2:17:b6:03:11:ae:23:63:06:33:e0:ce:09:e6:a7:bc:
5a:20:79:d3:cf:03:7e:ce:c5:c7:70:bb:bc:8e:f1:e2:dd:0c:
57:06:fa:b1:07:c1:e8:38:92:92:48:cc:67:5a:49:f0:ca:4a:
73:1a:37:6b:b3:7a:a3:9f:ae:4d:2d:b0:6c:58:d6:04:61:2f:
7f:ba:9d:36:eb:15:ec:db:83:6a:33:55:05:7f:bb:63:dd:de:
29:c4:65:b0:9f:83:de:f0:9e:fc:98:ab:c8:ef:68:14:ba:1d:
6b:f3:77:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 29 07:45:51 2023 by rpki-client on console-ams.rpki-client.org