Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/nFM-H9WIMrJcneQGVnXWF_fxYkU.roa
File: nFM-H9WIMrJcneQGVnXWF_fxYkU.roa (raw, json)
Hash identifier: PuVbVAUObfrqMmibJXS3oqX6/HaUvZ61PzsSGAPvdLw=
Subject key identifier: 9C:53:3E:1F:D5:88:32:B2:5C:9D:E4:06:56:75:D6:17:F7:F1:62:45
Certificate issuer: /CN=8fd57a75dd7e952bee283935d6df2925d282a070
Certificate serial: 018571D792D7A6E480DA1D9C6247F82EBE9E
Authority key identifier: 8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/nFM-H9WIMrJcneQGVnXWF_fxYkU.roa
Signing time: Mon 02 Jan 2023 09:37:11 +0000
ROA not before: Mon 02 Jan 2023 09:37:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 45.66.80.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:92:d7:a6:e4:80:da:1d:9c:62:47:f8:2e:be:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fd57a75dd7e952bee283935d6df2925d282a070
Validity
Not Before: Jan 2 09:37:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c533e1fd58832b25c9de4065675d617f7f16245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5e:4b:40:3f:b3:85:17:4a:51:e6:70:0c:99:
5d:e8:11:01:9b:db:d1:bc:3a:4c:70:31:61:13:c3:
41:b4:ce:70:97:5e:44:d0:2c:fc:a6:0a:c4:cc:6d:
c8:3a:05:f9:cd:86:04:9e:1f:96:d2:bb:00:f8:35:
c0:bf:14:a2:cc:f7:7c:29:54:e9:33:47:a3:0b:51:
bc:f1:ec:d7:44:7f:36:51:88:cb:95:7f:53:84:69:
fe:8b:7f:c8:9a:20:82:5f:96:84:c1:b5:dc:7c:4d:
3e:a6:59:af:29:4a:22:f9:87:95:ec:c1:cf:47:22:
d3:8a:4d:dd:8e:f7:a7:63:bc:23:85:5e:5c:b7:03:
b4:f4:f1:1e:8a:5b:44:45:c7:9b:ef:2a:32:91:4d:
ea:15:48:a4:d9:e9:13:16:fe:22:2b:97:94:3a:85:
6f:de:66:3c:4f:25:c0:f9:33:ac:32:e5:cf:6d:39:
a1:ce:70:7e:50:69:83:23:d6:ce:66:65:fd:0e:c5:
e5:6a:87:55:2f:82:0d:36:c4:bc:da:83:95:50:f1:
83:ec:cc:8a:a2:b1:1a:3a:c6:fd:59:64:62:3f:48:
e9:51:15:8d:fd:dc:fe:c9:57:78:b6:54:c1:7d:d3:
7b:8f:e0:fc:86:45:fc:1e:7a:15:0c:c1:d0:be:8a:
9f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:53:3E:1F:D5:88:32:B2:5C:9D:E4:06:56:75:D6:17:F7:F1:62:45
X509v3 Authority Key Identifier:
keyid:8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/nFM-H9WIMrJcneQGVnXWF_fxYkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.80.0/24
Signature Algorithm: sha256WithRSAEncryption
49:4a:9a:fb:30:75:72:e3:25:97:a6:78:8d:0e:43:20:ea:ac:
b8:7b:0a:e7:9e:8e:09:67:93:18:c7:24:4a:52:3b:a4:60:49:
3b:45:03:98:df:d2:27:8e:54:10:bf:6e:68:9c:d7:2f:10:6f:
7e:9e:fe:43:12:35:59:0f:56:5e:c2:6c:d4:81:ae:0d:d3:87:
6f:b6:b7:78:eb:d0:4a:6f:35:7a:64:29:18:cf:b6:58:7f:8a:
65:8e:fa:7a:13:19:09:45:9d:40:ee:6e:4a:9b:0e:a7:34:bb:
44:13:54:b2:d4:bf:94:9f:68:52:33:ac:26:84:e8:9b:19:e3:
f9:a8:82:39:df:79:8d:a7:f9:a1:c3:dd:03:ec:9e:8c:34:ee:
8c:48:82:58:be:07:67:87:42:f8:3b:58:56:9b:70:c1:3a:69:
ea:1e:df:91:50:df:97:e6:f7:21:f9:6c:ca:09:9c:5f:cc:cf:
56:1f:d8:b9:d2:4c:c5:61:a4:f1:dc:3c:f0:dc:8c:79:4a:bf:
d0:8a:2f:04:e2:13:7f:1f:25:a6:3a:0f:0f:b7:48:19:cc:a8:
ba:8f:2d:3a:7e:a7:6c:7b:a6:35:3f:65:3a:da:dc:33:6c:44:
48:0b:0b:de:4d:98:46:07:01:0a:f5:62:ae:24:b3:61:7b:60:
26:3f:b5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:30:48 2024 by rpki-client on console-fra.rpki-client.org