Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ypOw5x-acgva1TBgc8mcYGjLMPg.roa
File: ypOw5x-acgva1TBgc8mcYGjLMPg.roa (raw, json)
Hash identifier: L0lTenPyN8gN33M45Cd7VcKVQ9L8XrMfD09khH6Sq/o=
Subject key identifier: CA:93:B0:E7:1F:9A:72:0B:DA:D5:30:60:73:C9:9C:60:68:CB:30:F8
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01859C8D3DE57BFF0E65BC62ADCC56B9161A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ypOw5x-acgva1TBgc8mcYGjLMPg.roa
Signing time: Tue 10 Jan 2023 16:39:40 +0000
ROA not before: Tue 10 Jan 2023 16:39:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60446
IP address blocks: 45.14.164.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9c:8d:3d:e5:7b:ff:0e:65:bc:62:ad:cc:56:b9:16:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 10 16:39:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca93b0e71f9a720bdad5306073c99c6068cb30f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:14:41:ba:0d:b2:e8:db:e2:01:3f:23:55:8c:
5f:a1:b8:59:79:d4:92:37:35:03:a4:b8:dd:f8:96:
f1:83:34:ce:aa:58:26:8e:9f:6a:62:ef:8f:de:c8:
3d:00:7b:81:9c:0a:08:06:9d:5a:ed:5f:5f:fe:38:
0e:5b:8f:ac:e7:d5:ea:69:e5:72:bf:78:4f:2a:6d:
3d:d9:07:4e:ce:fc:be:66:8d:1c:9d:1f:ce:d3:62:
0e:64:50:b3:08:bf:9d:e0:c1:80:e9:d9:36:da:c1:
87:7b:0f:ff:19:cb:ad:ee:21:4e:f6:6f:39:43:32:
8e:a4:45:c6:61:ae:70:a5:0d:87:68:3d:fb:dd:cb:
03:e3:46:8d:68:b7:07:1d:8c:60:81:d2:05:c1:d0:
41:d6:e0:b3:8b:2e:14:9f:9a:31:63:d1:d6:0b:87:
96:c2:56:6d:0c:36:0e:05:15:af:2b:14:6d:37:19:
e8:a4:2c:cf:77:74:d5:3e:30:1e:c3:c9:dd:98:bc:
07:3b:fe:0c:79:ba:a1:b6:02:5e:e3:6e:78:e7:90:
97:0b:51:0e:6e:b9:4c:fe:6c:6f:72:39:e6:e9:51:
1a:e3:43:e3:45:98:53:e3:78:ef:a2:39:81:7b:76:
f2:b7:bf:11:ee:f3:3b:d4:2c:d1:73:0b:f6:31:b6:
5c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:93:B0:E7:1F:9A:72:0B:DA:D5:30:60:73:C9:9C:60:68:CB:30:F8
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ypOw5x-acgva1TBgc8mcYGjLMPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.164.0/24
Signature Algorithm: sha256WithRSAEncryption
20:8f:e9:ec:d5:b3:49:30:fa:45:cb:a6:6c:39:14:89:59:d3:
05:1c:78:39:bd:4a:91:f7:84:e0:4e:80:fd:99:45:1d:7c:ff:
dc:2e:58:d5:74:4a:d9:3f:c8:c1:51:f1:30:69:69:71:83:79:
91:21:bf:76:33:c0:a4:ed:2d:47:26:35:04:d2:ae:8a:0a:60:
b4:0d:f1:4d:6a:5b:b5:5c:8d:8e:61:87:99:4f:e3:91:03:2c:
66:70:e3:ee:42:06:25:58:a7:26:7a:21:d4:b8:c2:f5:21:02:
0b:41:3a:19:94:72:3c:ec:a6:3d:dd:08:fd:35:cb:e8:2d:b0:
e8:a1:1e:c3:a3:f1:39:7f:ed:2e:3e:05:e4:31:e6:e3:74:18:
3a:d1:e3:86:0c:2d:f2:cd:c3:18:b7:bf:84:d8:5c:b8:50:58:
a2:02:4b:46:e8:00:ca:1c:82:a6:45:c1:28:73:d0:52:1f:e4:
b2:9e:f4:51:cb:9b:80:67:21:67:4d:78:ae:97:68:b1:af:e7:
cc:db:5b:b0:6b:ab:3d:e9:90:49:4b:3f:88:f9:a6:0e:06:5e:
f3:85:43:e0:13:dc:1c:a1:96:f5:96:8f:9e:46:ff:35:e3:d3:
11:44:e2:c0:15:b3:f7:0a:38:77:3d:33:04:3e:75:24:be:41:
e2:18:6d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:44 2023 by rpki-client on console-ams.rpki-client.org