Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/jNN7SmZ5DUBNlIHgS_6a1D8Sx4U.roa
File: jNN7SmZ5DUBNlIHgS_6a1D8Sx4U.roa (raw, json)
Hash identifier: k8X6fQyMb81b/gU+/p3ZaoFMGIhv8XM38wNnZLGw/N4=
Subject key identifier: 8C:D3:7B:4A:66:79:0D:40:4D:94:81:E0:4B:FE:9A:D4:3F:12:C7:85
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 0185729EC5090ADD183B9556718646F52653
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/jNN7SmZ5DUBNlIHgS_6a1D8Sx4U.roa
Signing time: Mon 02 Jan 2023 13:14:45 +0000
ROA not before: Mon 02 Jan 2023 13:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56582
IP address blocks: 45.133.39.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:c5:09:0a:dd:18:3b:95:56:71:86:46:f5:26:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Jan 2 13:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8cd37b4a66790d404d9481e04bfe9ad43f12c785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4a:93:3e:fd:53:f7:85:67:ba:26:39:92:10:
f9:59:21:97:45:68:38:60:4f:1e:15:cd:b1:45:d5:
97:bf:ba:55:f9:a6:46:52:bd:01:4a:aa:5b:9e:d6:
d0:da:c0:88:d6:2e:43:65:2a:f6:6b:67:af:ae:e5:
67:81:0d:9d:22:0e:7f:85:23:64:e8:28:cf:8c:91:
06:5b:aa:90:ac:b1:34:45:83:fd:57:6b:27:72:fb:
b9:53:9b:8b:a3:18:ec:03:c9:fe:64:b7:3e:9d:b7:
08:4a:01:49:48:04:a2:62:99:65:4f:de:0d:e6:49:
ec:94:3b:8d:f1:8d:72:bd:91:f7:dc:24:2a:a7:1e:
ae:66:b4:65:bd:35:5d:03:d7:2f:3f:37:a0:da:98:
ae:89:f2:ac:c0:fc:94:26:13:13:0a:be:0d:45:62:
a7:43:3a:ee:35:96:a1:a0:61:00:9f:9b:2a:32:cc:
e3:14:72:99:8d:6f:2d:81:d6:21:2d:02:c2:d7:2f:
ea:02:90:eb:94:39:12:05:78:c4:74:9f:ae:7b:6d:
33:3a:02:30:db:1b:31:19:72:e5:16:c6:82:d1:a9:
c4:eb:d0:a5:94:9a:f2:3c:19:b6:36:0f:ac:da:be:
9b:9b:b3:86:11:21:09:0a:39:43:61:eb:a0:c9:2d:
e4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D3:7B:4A:66:79:0D:40:4D:94:81:E0:4B:FE:9A:D4:3F:12:C7:85
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/jNN7SmZ5DUBNlIHgS_6a1D8Sx4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.39.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:2f:bf:97:36:84:51:4e:dc:68:09:6b:bb:26:69:e5:d8:3c:
da:c7:d0:48:70:50:fa:27:c1:97:cd:03:6c:41:d4:5e:46:4e:
1a:e9:74:2c:e1:c9:05:65:4f:c3:45:79:00:2d:b4:b4:dc:02:
95:25:ce:b8:b2:bd:11:37:53:3f:b1:4e:ec:c5:9b:0a:11:92:
27:cf:78:a4:f1:78:f4:72:e6:e0:3c:24:0a:af:5e:26:cc:66:
4a:49:f5:1b:0b:78:a2:e6:15:f5:81:53:20:6d:d6:3c:63:a6:
d0:77:af:d6:cf:7a:1b:32:f7:9e:d2:54:f1:df:bd:da:80:1d:
72:0d:f9:46:50:86:45:22:85:b8:82:7c:6d:dd:70:60:87:e8:
41:e2:f4:42:ea:68:84:b7:96:b8:ee:90:1d:5a:69:c2:7d:c7:
0d:83:83:1f:ef:05:4e:7f:71:90:03:32:4f:98:8b:bb:13:ac:
3b:77:34:ee:1a:60:f1:63:a5:4c:1c:43:a0:58:07:62:c9:42:
71:c0:c8:75:d2:37:b0:02:80:4f:86:2a:42:5d:9e:13:6e:73:
2f:60:58:7f:39:51:b5:7a:db:3f:a8:a2:1e:e8:99:ec:f5:34:
9f:9f:93:1f:4f:9a:94:64:51:e7:5b:55:26:85:25:65:e5:fa:
c9:11:26:56
-----BEGIN CERTIFICATE-----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Generated at Wed Oct 25 20:17:47 2023 by rpki-client on console-ams.rpki-client.org