Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/fM3MG90REzM4UAtK9NTPvoRbtyo.roa
File: fM3MG90REzM4UAtK9NTPvoRbtyo.roa (raw, json)
Hash identifier: Y80sdBH42HH741OKdcIf6Yizy8VSEzk7oQHyWoCKmvo=
Subject key identifier: 7C:CD:CC:1B:DD:11:13:33:38:50:0B:4A:F4:D4:CF:BE:84:5B:B7:2A
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 018BAA3BF536775CFBBC4C1189E9951C2A73
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/fM3MG90REzM4UAtK9NTPvoRbtyo.roa
Signing time: Tue 07 Nov 2023 14:42:17 +0000
ROA not before: Tue 07 Nov 2023 14:42:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44103
IP address blocks: 45.94.53.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:aa:3b:f5:36:77:5c:fb:bc:4c:11:89:e9:95:1c:2a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Nov 7 14:42:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ccdcc1bdd11133338500b4af4d4cfbe845bb72a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:42:e9:5f:a7:7b:56:6e:5e:9b:38:49:b1:03:
44:38:0a:54:19:7b:98:9c:a6:da:da:b1:29:6e:1f:
b5:f0:61:75:5b:26:9a:79:02:08:9d:4d:c1:cf:61:
70:dc:74:ee:35:7c:0d:b4:e6:87:12:d5:b5:1c:10:
ec:6b:84:bb:19:26:f8:1b:1e:5d:34:b4:8f:9b:4f:
2e:73:29:89:3b:77:7b:27:1c:4d:52:b1:0e:96:96:
77:dc:f8:db:88:78:3a:68:89:4f:51:e4:e7:e3:1e:
ae:a0:f0:dc:40:2d:f2:6b:01:07:da:7e:99:d2:aa:
b5:15:b7:5b:be:30:fa:41:03:2c:cc:02:59:d0:52:
29:c8:32:5c:12:34:8f:ad:52:68:77:87:26:51:f4:
1d:da:a7:62:bc:a1:8e:a5:fd:e3:75:2d:db:a1:68:
03:8e:af:bc:09:b9:e4:f9:f7:6f:b2:1c:bc:18:de:
08:fa:d3:49:a7:d7:93:b1:1d:8c:5c:a4:79:e5:2f:
5f:05:44:09:59:25:b3:43:73:ec:b9:d2:46:5c:e6:
7d:b6:3d:75:c0:a5:75:56:21:40:31:27:0a:94:66:
85:83:8b:b8:1c:c8:f6:d4:d5:45:29:81:63:0b:04:
41:ea:16:2a:6b:c8:ec:54:77:cb:b7:09:f4:2c:56:
98:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CD:CC:1B:DD:11:13:33:38:50:0B:4A:F4:D4:CF:BE:84:5B:B7:2A
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/fM3MG90REzM4UAtK9NTPvoRbtyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.53.0/24
Signature Algorithm: sha256WithRSAEncryption
41:5f:32:d7:b9:ae:1e:f7:83:68:46:c2:51:67:98:e2:1c:9a:
b9:af:7f:ee:ce:72:43:9f:8f:3a:e1:82:7d:fe:e8:49:b1:55:
de:f7:ad:a1:1f:c7:2f:76:14:a3:76:4e:f5:e5:bd:dd:ad:08:
af:df:a2:8c:96:f6:70:d9:31:06:e8:e0:ab:3f:ed:bf:c0:23:
00:c7:33:5b:9c:94:3b:b6:03:6e:9b:b7:2a:0a:dd:b5:41:33:
81:d5:30:66:ed:c1:3f:78:35:2a:27:0e:9c:2d:cd:87:32:51:
34:4e:11:e9:64:e8:8a:11:ea:c4:3a:73:45:e9:3b:24:1d:ee:
fa:2c:4d:ff:74:6d:a2:ad:ce:41:f6:73:14:dd:84:3a:b0:af:
4c:de:c1:aa:8c:cf:f3:ba:6d:a8:b4:94:b0:90:c8:a6:94:bb:
cc:8c:50:26:b4:4c:d3:99:ed:c3:b9:c3:08:cb:a8:13:3b:d2:
d5:7b:ad:43:cd:a5:06:11:92:1e:ca:14:a5:f1:f1:62:3a:02:
ca:37:81:60:c4:a2:46:65:af:66:d9:98:53:4b:ce:ed:d0:82:
59:21:5e:25:54:6f:9b:da:7f:d6:bd:3b:6d:1e:8a:58:20:02:
38:af:cf:01:81:17:f9:f1:d9:f3:0e:b9:85:12:70:ea:7f:e8:
34:c4:7a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 8 19:34:02 2023 by rpki-client on console-fra.rpki-client.org