Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/x5A6RRdACBMC5fCy_A4_OULetCs.roa
File: x5A6RRdACBMC5fCy_A4_OULetCs.roa (raw, json)
Hash identifier: AE9tUyst4m9tYZM5jVkAvxtW1gDNHxDhq/46WtsaNjQ=
Subject key identifier: C7:90:3A:45:17:40:08:13:02:E5:F0:B2:FC:0E:3F:39:42:DE:B4:2B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0185BF6A7FD23A13D2DD84EB9516A3719255
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/x5A6RRdACBMC5fCy_A4_OULetCs.roa
Signing time: Tue 17 Jan 2023 11:08:25 +0000
ROA not before: Tue 17 Jan 2023 11:08:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43607
IP address blocks: 84.54.48.0/24 maxlen: 24
45.8.93.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bf:6a:7f:d2:3a:13:d2:dd:84:eb:95:16:a3:71:92:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 17 11:08:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7903a451740081302e5f0b2fc0e3f3942deb42b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d6:f2:16:3c:9e:e5:51:c7:01:8c:1a:ee:78:
07:01:ad:e1:c6:32:e8:27:9d:d4:6b:12:ec:0c:3d:
b4:6e:40:ad:61:ae:46:54:13:4b:31:5f:dc:9a:8a:
c6:ef:4d:eb:cb:d3:e6:b4:75:d3:4d:61:43:66:40:
c8:a2:b7:1b:44:65:25:3d:59:b6:6e:eb:89:0c:7f:
c2:54:6a:7e:c7:f1:e5:d9:d5:ce:c5:0a:0b:0f:9e:
a3:5d:51:7e:1b:27:0e:9c:38:23:e1:34:c6:4e:09:
46:92:0d:3e:0b:5d:03:c3:2c:e5:aa:17:58:2f:f9:
27:ba:a2:ab:7f:14:84:87:de:45:db:11:6e:da:0f:
70:ca:22:89:cb:06:de:98:a3:4c:27:d6:65:06:cb:
2c:84:22:0f:b8:aa:af:93:ea:5a:71:77:31:9b:e0:
79:f1:19:af:85:44:f2:f7:cd:8a:64:ec:ed:a2:3d:
2e:5b:72:9f:69:f2:c6:9d:e2:f9:ac:76:71:78:94:
c7:40:c0:59:af:60:bf:ea:ea:34:f2:3f:68:14:c4:
2c:13:e0:d3:3f:62:c4:7d:77:f2:5d:5d:0a:f2:0d:
6d:99:a5:4e:94:33:06:ac:ef:5e:ff:64:ea:2a:4e:
35:a3:52:0a:a9:05:73:c5:43:be:2e:8d:09:14:46:
b6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:90:3A:45:17:40:08:13:02:E5:F0:B2:FC:0E:3F:39:42:DE:B4:2B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/x5A6RRdACBMC5fCy_A4_OULetCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.93.0/24
84.54.48.0/24
Signature Algorithm: sha256WithRSAEncryption
83:03:1f:67:12:94:47:60:a6:fd:73:b9:dd:c4:49:35:22:f6:
23:02:32:f9:9c:3c:b1:a7:d1:bd:0d:40:1c:72:e3:c3:60:d1:
4e:01:8d:20:ba:10:02:89:1b:01:3e:7c:c8:79:fe:d7:33:be:
40:bb:31:dc:d8:52:a6:a7:fc:c2:cb:a2:9d:70:9a:0b:86:f6:
bf:da:ac:26:9b:b2:86:65:15:dc:84:c6:96:a1:6d:d6:f9:bb:
28:5b:37:00:8e:6d:fc:e6:5c:68:3b:7c:bc:44:67:02:9b:8c:
ca:81:d0:bd:f0:17:65:43:2f:55:1d:a1:a7:fb:ad:67:53:c3:
ef:4a:92:70:de:7d:64:fa:d0:93:ab:3b:da:6e:c4:e6:bf:15:
42:c2:3a:59:0d:4e:68:b8:09:34:90:e1:8c:2f:d4:fa:d6:ff:
35:fe:5b:2d:41:77:88:6d:10:ca:b8:bc:f5:84:2d:b8:05:f8:
3c:f4:ec:7f:e0:b7:d6:c3:86:08:70:ea:ac:14:a2:ca:cf:42:
90:a2:77:f1:96:aa:fb:c3:cc:c5:4b:b0:d1:72:8a:bd:c8:fc:
1b:47:e6:66:ed:35:c2:65:6f:54:98:e5:49:d6:bd:8a:56:83:
0c:84:e5:1a:57:ac:fc:c8:88:96:c7:db:1f:3e:f5:22:12:68:
e7:a8:d9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:43 2023 by rpki-client on console-ams.rpki-client.org