Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/p6kH9R80lOswoEA5QZHH_2YfbIc.roa
File: p6kH9R80lOswoEA5QZHH_2YfbIc.roa (raw, json)
Hash identifier: Kk5QRNRu6ELHTGBMm+uJCDXrif/ZeOttEHFzl6/SlUI=
Subject key identifier: A7:A9:07:F5:1F:34:94:EB:30:A0:40:39:41:91:C7:FF:66:1F:6C:87
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D82065E2F7044CE5AA0D09DD2FDA641
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/p6kH9R80lOswoEA5QZHH_2YfbIc.roa
Signing time: Sun 01 Jan 2023 13:25:15 +0000
ROA not before: Sun 01 Jan 2023 13:25:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203576
IP address blocks: 45.151.88.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:82:06:5e:2f:70:44:ce:5a:a0:d0:9d:d2:fd:a6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7a907f51f3494eb30a040394191c7ff661f6c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:83:a4:d6:91:d1:1c:39:87:16:af:03:9e:07:
f2:b4:f7:df:f7:6d:1d:d1:18:27:90:94:5d:78:08:
28:ba:54:d1:fb:06:ad:dd:7c:7a:58:41:44:47:a1:
33:c1:b2:a1:e7:6f:69:3b:18:4c:88:60:cf:06:3c:
04:d3:13:95:b9:88:80:26:ca:45:8a:12:72:c9:ba:
74:a5:2d:75:93:a6:9d:30:95:47:ce:d2:7e:2a:e4:
3d:a3:da:45:1d:2f:e6:3c:9a:ec:0c:a8:60:99:c6:
43:60:a9:0a:93:0b:91:ed:51:f7:f2:3a:c4:b0:1b:
38:4d:45:bb:91:e9:48:a8:1d:04:44:e3:7f:d3:43:
26:89:a5:b0:37:99:2d:b8:27:d9:70:19:0d:f8:8a:
31:e9:e2:f9:f5:9e:5b:f2:0e:56:9d:6c:02:eb:29:
ea:fc:2b:9f:18:4f:6d:72:a6:cc:9b:3e:f1:da:88:
07:69:b9:58:7f:2d:e1:c7:66:6a:e5:99:87:75:92:
fc:0b:8b:54:c2:ac:04:16:5a:42:93:8c:21:e8:02:
7a:e8:54:42:5f:8b:b2:3f:01:fd:8b:67:0b:5f:89:
b5:a3:2a:4c:2e:ef:db:e2:21:91:74:1d:83:10:e1:
b0:b2:fa:59:34:88:c4:de:0f:8a:9f:99:67:df:14:
8e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A9:07:F5:1F:34:94:EB:30:A0:40:39:41:91:C7:FF:66:1F:6C:87
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/p6kH9R80lOswoEA5QZHH_2YfbIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.154.0/24
45.151.88.0/24
Signature Algorithm: sha256WithRSAEncryption
99:cf:36:be:f3:17:3e:5f:8d:27:fb:f6:95:31:6a:3b:94:d9:
ec:cc:d0:89:aa:6e:f4:8a:ee:a3:3d:b8:90:4a:cf:a0:99:7a:
b6:b0:49:eb:1e:c9:d1:60:7f:f0:f9:1a:8d:37:64:fb:b5:b5:
dc:e5:07:02:d1:ed:40:57:b7:71:49:66:72:d7:70:5f:e0:da:
c1:c5:e7:33:51:0d:fc:8f:cd:49:53:3c:eb:b5:fe:ed:b8:ef:
41:3e:1b:59:0a:a4:2c:0c:3c:b9:a2:35:58:2c:09:bf:23:22:
93:7c:b3:59:79:93:d0:2b:00:cf:80:73:87:13:f3:79:de:fc:
7a:60:03:cf:ad:44:12:77:80:ae:17:5f:3e:f6:b0:af:e5:f6:
d8:ca:c7:52:0b:01:51:7a:5d:28:7a:ab:da:12:6f:0f:8f:ee:
98:a2:00:8c:5b:59:29:78:c7:04:a7:3b:b1:e7:a5:9b:51:6c:
f7:70:8d:a2:9b:b9:b1:42:68:d7:78:c6:3f:66:f3:49:a1:81:
dc:5b:67:21:44:09:e3:5b:c8:53:a9:ae:0a:ae:0e:d4:a6:c2:
bd:d5:4f:5b:ea:76:42:22:b9:fa:01:05:20:2d:ce:2a:e4:7c:
17:ff:19:47:d7:9c:db:46:91:a2:77:c8:ad:51:c4:93:d9:02:
19:f2:3d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:13 2024 by rpki-client on console-ams.rpki-client.org