Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mkYOj0cEDFrWPAAAORrNyBFnZBA.roa
File: mkYOj0cEDFrWPAAAORrNyBFnZBA.roa (raw, json)
Hash identifier: jVx7oW/inONiQUbaiFKWEwZZbRCsCwdW6tIdKfRa3m0=
Subject key identifier: 9A:46:0E:8F:47:04:0C:5A:D6:3C:00:00:39:1A:CD:C8:11:67:64:10
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CDFFC13AD9F3DF6D71DC0E7B1E2ABF4EC
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mkYOj0cEDFrWPAAAORrNyBFnZBA.roa
Signing time: Sat 06 Jan 2024 18:14:48 +0000
ROA not before: Sat 06 Jan 2024 18:14:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203168
IP address blocks: 45.128.96.0/24 maxlen: 24
193.222.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jan 2024 14:37:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:df:fc:13:ad:9f:3d:f6:d7:1d:c0:e7:b1:e2:ab:f4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 6 18:14:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a460e8f47040c5ad63c0000391acdc811676410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:93:d6:fe:51:88:77:a3:9b:bc:a4:ae:24:10:
d8:1b:a1:3f:4b:34:7e:bc:27:6d:9d:8f:f1:64:f2:
cc:4a:55:d0:01:89:52:8a:5e:42:84:9d:bd:99:e1:
e6:be:73:8f:63:af:72:4c:46:ee:4a:bc:7c:a7:56:
84:8d:eb:23:d5:a1:fe:d5:c3:ce:ab:3c:53:86:82:
7f:59:37:12:46:ce:e6:02:dc:25:da:e2:e7:07:3a:
e2:0e:e4:20:34:79:47:1f:17:60:b5:f7:c0:fa:00:
19:f7:c5:ba:26:8b:7d:e0:49:30:ba:08:80:f0:e6:
12:52:5a:f4:84:c3:3d:c6:a0:11:9a:de:20:23:a9:
85:ed:ff:94:2f:aa:ad:39:b7:84:c8:7e:f1:ef:dc:
3b:1e:87:0b:d4:17:f9:d8:28:42:ab:b7:fb:60:2e:
79:14:e7:9d:9f:2a:87:22:dd:ed:8a:c5:52:b7:8f:
b5:dc:94:56:31:31:db:9b:9d:e9:da:9e:7e:7e:25:
dc:23:62:3e:81:ef:a6:60:17:f7:79:5a:6f:7d:b8:
08:8d:51:c1:0e:dc:ae:be:df:7d:e6:8c:d1:ba:17:
4d:6a:de:fd:2b:a0:a4:0d:a7:51:5e:52:00:b2:e7:
cf:6b:b0:03:96:07:f0:54:46:d7:3b:d8:76:e4:c8:
bf:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:46:0E:8F:47:04:0C:5A:D6:3C:00:00:39:1A:CD:C8:11:67:64:10
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mkYOj0cEDFrWPAAAORrNyBFnZBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.96.0/24
193.222.96.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:9b:ed:87:46:65:84:ff:98:e2:4b:9b:6b:f9:a9:be:53:be:
6b:78:21:ff:ef:a3:24:98:52:da:0f:7a:45:03:9a:86:15:c3:
2f:f6:2f:d8:63:8b:76:75:af:c8:77:f6:75:c0:8a:99:be:bc:
fa:34:55:66:b7:21:fa:78:2c:9c:9a:f4:e8:7e:0a:24:a9:2e:
30:7c:53:d7:1c:11:12:93:11:d7:73:37:0b:e9:1a:f9:f7:35:
a2:34:c0:64:4a:79:cb:9b:87:f6:84:bb:d8:6a:ac:68:39:fc:
58:49:01:68:d5:9d:e6:8c:0a:9e:16:60:a9:78:6f:17:45:5b:
2f:70:e1:7f:b7:ac:a4:6a:ff:16:82:f4:fa:6f:b0:35:56:ee:
b5:37:57:b0:b2:f4:51:5c:e8:9a:2b:e4:9f:c0:1b:94:bb:8e:
89:fc:29:35:aa:c4:86:70:bb:67:89:64:00:e8:73:2a:69:fa:
77:94:7c:78:da:f0:12:2f:a9:8a:a8:73:f6:3a:31:14:54:39:
67:cf:7f:c6:cf:3a:be:4c:63:fe:60:10:0a:be:86:12:c1:a3:
35:ec:d6:45:83:91:a6:51:02:ad:ac:26:b7:8f:9c:6e:4b:fa:
42:32:14:98:dd:6e:8a:a7:0a:f5:51:ed:1c:e3:be:39:27:24:
c0:9c:6e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 30 20:09:06 2024 by rpki-client on console-ams.rpki-client.org