Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qcbgJl7pXSifbKujiAIlm8MV8Ew.roa
File: qcbgJl7pXSifbKujiAIlm8MV8Ew.roa (raw, json)
Hash identifier: 9ZB41UBRPPp/O9Sw+lKXs1EIlTsYHGLQeyDPMlePIRc=
Subject key identifier: A9:C6:E0:26:5E:E9:5D:28:9F:6C:AB:A3:88:02:25:9B:C3:15:F0:4C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018829EBBBB2F99AD4CEEE409FB65C23C428
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qcbgJl7pXSifbKujiAIlm8MV8Ew.roa
Signing time: Wed 17 May 2023 13:34:54 +0000
ROA not before: Wed 17 May 2023 13:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60446
IP address blocks: 45.14.164.0/24 maxlen: 24
45.9.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:29:eb:bb:b2:f9:9a:d4:ce:ee:40:9f:b6:5c:23:c4:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 17 13:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9c6e0265ee95d289f6caba38802259bc315f04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:13:f0:8d:5b:12:8b:a2:67:88:93:e0:ab:2a:
fc:c9:ea:50:7c:3c:24:1d:7e:bf:0b:cc:41:6f:69:
ac:bc:50:3b:46:bd:6c:62:ce:b7:f1:c9:2f:1e:d6:
8c:11:74:f3:74:1f:eb:1b:f4:24:e5:b8:28:59:6d:
04:72:47:a8:80:a8:f4:ab:6a:1b:81:45:08:97:24:
32:78:22:a3:c7:2c:ff:61:ca:58:3d:a0:68:8e:a5:
b4:5a:b6:fa:33:99:64:3b:19:4c:b9:32:e1:f9:1c:
c2:31:58:6b:b6:8c:36:29:fa:c7:36:06:6d:b6:f4:
50:b7:5a:5c:1b:e6:2c:2b:42:ae:cc:73:88:51:bd:
e9:4c:d6:1d:2e:61:45:91:ad:3c:c1:c6:47:a3:e9:
13:0c:d1:be:7e:77:fb:fd:ae:71:ab:e9:fe:df:0b:
7d:0b:03:37:16:62:18:b1:42:3d:9e:b0:14:b9:a6:
7a:9e:42:33:d4:69:c9:62:cb:8f:6e:a6:f7:d5:b8:
ec:ed:41:1f:31:e1:41:8a:38:c4:9e:75:d7:8d:14:
4c:74:63:cf:c2:e7:20:72:b3:9a:85:8a:53:6a:d5:
1e:9e:71:93:6a:ed:95:10:1f:20:6a:93:d7:88:23:
53:40:ad:1b:24:68:57:4b:10:7c:ff:36:34:fe:37:
a7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C6:E0:26:5E:E9:5D:28:9F:6C:AB:A3:88:02:25:9B:C3:15:F0:4C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qcbgJl7pXSifbKujiAIlm8MV8Ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.157.0/24
45.14.164.0/24
Signature Algorithm: sha256WithRSAEncryption
70:ce:e5:47:02:3f:d6:38:5f:36:e7:fd:23:36:c4:db:7d:f2:
a3:1d:56:9c:da:e6:f3:e5:87:ab:f3:45:f6:fd:1b:32:cb:d9:
0b:b3:b6:6c:34:30:dd:33:4a:ad:4e:d7:37:47:35:b1:9c:5d:
1a:af:f6:09:c9:3a:e7:b9:19:db:d4:f0:72:5a:5f:49:ba:08:
3f:64:44:5d:f7:26:ac:f2:16:61:56:f5:bd:e9:03:07:d1:d0:
01:82:15:d1:ab:f3:81:91:d1:7c:cf:ab:70:2b:85:33:af:ba:
4b:83:4d:67:ff:dc:94:a1:99:fa:c2:2b:2b:4a:fd:69:c0:09:
e6:44:6e:3e:f9:d6:ac:99:8b:b3:22:04:69:20:0c:a5:af:0b:
aa:5d:13:ea:f0:90:38:f7:11:20:58:a4:ff:dc:6d:b1:dc:30:
f3:f0:bd:a7:8f:86:b2:53:50:70:d5:ce:60:34:95:97:66:59:
11:46:13:03:77:e7:d6:64:23:4c:9b:a9:5d:02:b4:1e:34:25:
17:01:0b:3a:92:3b:83:b1:6e:32:58:ce:97:fd:8d:55:f6:59:
40:0e:43:85:2c:20:e4:bd:83:5d:53:b7:ac:32:3b:65:0d:7f:
3a:1f:4b:a8:6a:2e:65:2e:68:2e:18:f1:41:33:12:e1:7e:0e:
9a:df:15:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:42 2023 by rpki-client on console-ams.rpki-client.org