Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rlH7Y5i1n24eETBp0iHmBY40T3I.roa
File: rlH7Y5i1n24eETBp0iHmBY40T3I.roa (raw, json)
Hash identifier: OWVG4ar7gCG6SwJNfDCLbJ80lV52nVR68bjX+Yd+jlY=
Subject key identifier: AE:51:FB:63:98:B5:9F:6E:1E:11:30:69:D2:21:E6:05:8E:34:4F:72
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A61004F1E66C88B62D6D356CB9E885CD8
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rlH7Y5i1n24eETBp0iHmBY40T3I.roa
Signing time: Mon 04 Sep 2023 16:22:04 +0000
ROA not before: Mon 04 Sep 2023 16:22:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49581
IP address blocks: 45.88.90.0/24 maxlen: 24
141.98.7.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:61:00:4f:1e:66:c8:8b:62:d6:d3:56:cb:9e:88:5c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 4 16:22:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae51fb6398b59f6e1e113069d221e6058e344f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ba:53:46:89:11:59:55:5c:8a:d6:6f:09:fc:
3b:7f:d1:a0:7b:4a:ab:19:01:7a:aa:22:5f:cf:6d:
0d:b1:91:d2:81:5f:b9:82:a0:ac:41:e2:fb:87:30:
4a:4e:85:12:5d:d4:9a:0d:9b:6a:d4:67:56:7d:28:
03:62:eb:f8:5b:0b:9b:73:6b:17:47:35:8a:99:ac:
e8:35:0e:ff:08:55:30:6b:38:70:c2:17:34:3e:cd:
6d:fd:88:24:5d:0b:c8:ff:8e:ac:66:d9:07:97:a6:
18:69:3c:38:c8:8e:97:32:cb:8f:8f:30:99:7b:13:
e6:e8:d7:5d:81:55:10:1d:2a:8d:26:e5:f5:ba:a3:
9d:07:a4:c5:86:f7:c4:8e:ae:be:0a:3c:f7:46:f7:
39:22:8c:68:fd:45:43:b3:d2:ad:11:d4:91:34:0f:
c9:94:74:00:23:e9:16:cf:3d:d1:8f:b5:0d:0f:d0:
35:1b:32:55:58:04:5a:da:eb:e0:b4:2b:f3:8b:0a:
dc:cd:9f:0a:31:85:dc:09:5f:48:fe:88:b9:c1:6f:
2c:56:1e:74:0d:14:8e:7a:42:bf:c5:41:85:9d:a6:
d6:0b:3e:f1:d1:c8:ff:0e:fb:65:dd:d7:8a:44:94:
03:5d:48:f5:3a:cc:df:56:e8:d7:d6:e6:a4:a9:e2:
66:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:51:FB:63:98:B5:9F:6E:1E:11:30:69:D2:21:E6:05:8E:34:4F:72
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rlH7Y5i1n24eETBp0iHmBY40T3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.90.0/24
141.98.7.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:5f:fc:ec:75:61:43:f5:79:97:01:a7:a8:50:de:ba:ab:7b:
2b:b2:7e:94:1c:00:53:69:26:3c:f1:e1:29:e9:1c:a6:56:bc:
0a:61:23:3c:1b:f1:ef:b1:9f:f7:be:58:5b:19:83:3b:8d:29:
fd:a6:11:ff:c5:38:eb:94:0b:f4:9b:33:23:a5:b5:9d:9e:fa:
55:b0:a9:0d:b0:2a:91:f6:30:83:cf:e3:9e:8c:d5:df:de:e8:
d9:c1:55:d4:21:3d:81:48:fd:72:d1:01:16:8b:df:72:b8:16:
b7:aa:7a:bf:d0:ca:32:d4:c3:6a:c2:82:ac:e0:ac:c7:b9:6b:
e4:53:0a:ea:34:cc:19:74:f3:d5:60:83:29:46:c6:72:6f:ce:
a1:8a:64:99:f3:5c:6d:bd:7d:9c:20:6f:29:2a:f9:7b:d2:21:
54:9a:db:8f:fb:d6:dc:48:9a:ae:96:22:3f:8e:62:53:0a:c6:
12:49:6f:70:59:7d:b1:5f:0b:ce:93:d5:2a:26:6e:57:03:d0:
b8:2f:ea:2d:aa:12:4d:a5:1e:3d:28:41:33:0f:05:64:9f:14:
98:12:d8:8b:ee:ee:2a:17:ef:16:90:35:95:db:0e:58:02:42:
a3:13:e7:72:67:68:b5:99:d7:f2:ac:10:31:d8:3c:92:a3:b3:
82:e9:74:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 16 09:42:26 2023 by rpki-client on console-ams.rpki-client.org