Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/phqdlz0784Y6tgY1hrQkSvzat4o.roa
File: phqdlz0784Y6tgY1hrQkSvzat4o.roa (raw, json)
Hash identifier: PCxhWyn9S0xPpdMgMQt2t0fX7eWE887s2nsb2ACZmYg=
Subject key identifier: A6:1A:9D:97:3D:3B:F3:86:3A:B6:06:35:86:B4:24:4A:FC:DA:B7:8A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D8215D96EA195F8B8C342C3DE2A9ABF
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/phqdlz0784Y6tgY1hrQkSvzat4o.roa
Signing time: Sun 01 Jan 2023 13:25:19 +0000
ROA not before: Sun 01 Jan 2023 13:25:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 270385
IP address blocks: 45.151.91.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:82:15:d9:6e:a1:95:f8:b8:c3:42:c3:de:2a:9a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a61a9d973d3bf3863ab6063586b4244afcdab78a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:31:1d:d0:95:f8:c2:13:68:70:e3:cd:41:a5:
9c:6b:cc:c9:03:08:95:e8:ae:a1:8a:f2:db:60:32:
f5:18:77:f9:e8:5d:14:ff:fd:b7:52:f5:4a:9e:0a:
1e:1f:2a:14:7a:46:2b:1a:81:4d:c2:06:6a:b8:d5:
d0:12:2b:8e:30:1c:76:11:36:12:13:04:65:20:36:
68:ff:19:36:65:aa:95:03:6a:9e:48:58:2c:bc:ba:
bd:bc:d3:e4:1a:cf:d6:dd:2f:39:6e:01:37:ea:98:
06:3d:be:45:45:0a:7d:cf:3c:97:08:f0:15:57:b0:
df:88:ac:77:57:66:21:74:1d:20:ea:59:68:c5:36:
e4:e2:ff:fa:8e:40:af:ca:9a:2f:ac:68:40:04:99:
89:56:56:4d:59:cb:3d:f7:b5:04:27:6f:46:a9:47:
58:b2:3a:a5:df:e7:72:3a:4a:07:db:ee:b7:83:ec:
5d:61:ef:2f:28:72:b5:7c:c1:19:80:74:b9:1b:c4:
02:04:bf:1a:2d:37:97:aa:d9:b1:97:41:49:24:ea:
6e:17:12:35:76:8c:37:da:e2:c8:06:b8:d7:ca:b6:
0d:e7:63:98:c7:c3:38:87:41:7d:3b:82:d3:bb:fa:
3e:5b:c9:8e:0f:42:17:33:0e:92:d8:cb:e7:fd:9f:
3c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:1A:9D:97:3D:3B:F3:86:3A:B6:06:35:86:B4:24:4A:FC:DA:B7:8A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/phqdlz0784Y6tgY1hrQkSvzat4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.91.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:12:d3:3a:f5:87:2b:35:71:79:7c:5e:70:8c:b6:bb:a6:24:
63:7e:4e:72:3d:75:80:ea:76:b6:6c:7f:b3:7a:c5:39:25:29:
d3:97:41:b8:cf:76:cf:85:e5:8c:0c:ec:c2:17:3a:90:44:6d:
9a:06:9d:97:56:fb:51:26:5f:45:8a:62:b1:34:49:ea:43:79:
b8:6a:43:ff:af:bc:a7:83:d7:60:3d:3a:76:48:4a:27:6c:3b:
8c:0d:19:17:82:e2:8a:32:79:cc:08:09:0e:e2:17:e3:72:07:
ae:bc:88:42:d8:d9:6d:98:5c:71:1f:d3:55:17:5a:c5:9d:30:
56:fc:68:e2:73:cb:ef:5e:a9:a5:2d:db:d7:a9:ed:73:42:4e:
34:54:d8:c4:f5:d1:9f:e2:78:4b:03:55:9b:8f:e3:15:9e:a9:
e1:f7:48:bb:49:13:c8:97:1e:5e:8a:e9:06:4e:34:2f:17:21:
72:4e:2a:30:bb:14:7a:45:3a:f4:2e:d1:33:bf:d1:6e:36:36:
97:f2:d8:3d:a9:86:5c:12:48:cd:c8:9d:cb:c6:85:fb:ae:2b:
78:ed:8c:b9:01:fb:02:a0:91:42:9a:ad:ae:92:d5:0e:ce:75:
73:ad:29:ec:d6:f3:b8:3a:c5:f8:42:1b:cc:24:3e:54:e6:ac:
72:1c:8a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 23 07:33:05 2023 by rpki-client on console-fra.rpki-client.org