Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/88QJr2KsWg_8bULIvsuU_BdArH8.roa
File: 88QJr2KsWg_8bULIvsuU_BdArH8.roa (raw, json)
Hash identifier: I9Gq3lRTLemWhfkIdsZak/YOcign1ZNdIC2XEW7VjwE=
Subject key identifier: F3:C4:09:AF:62:AC:5A:0F:FC:6D:42:C8:BE:CB:94:FC:17:40:AC:7F
Certificate issuer: /CN=36900183cf08a6e5bc807846294a46062e190e3b
Certificate serial: 018939EEAB8296FDB6893442825EF9A88510
Authority key identifier: 36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/88QJr2KsWg_8bULIvsuU_BdArH8.roa
Signing time: Sun 09 Jul 2023 09:14:50 +0000
ROA not before: Sun 09 Jul 2023 09:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.11.185.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:39:ee:ab:82:96:fd:b6:89:34:42:82:5e:f9:a8:85:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36900183cf08a6e5bc807846294a46062e190e3b
Validity
Not Before: Jul 9 09:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3c409af62ac5a0ffc6d42c8becb94fc1740ac7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cc:d8:3d:8a:ad:c9:8e:7d:d0:c2:ca:0f:9a:
55:53:a1:b5:4e:58:9a:01:6c:2c:6b:de:02:8d:a4:
2a:61:96:8d:de:78:e3:cb:63:49:ac:ce:a8:bd:df:
df:bd:db:75:80:fa:ca:3b:3a:14:23:be:30:b8:76:
09:0e:37:df:b5:b1:f4:47:43:4e:5b:dc:6c:13:bd:
3e:a6:b5:5a:37:9e:8c:e1:69:1e:90:09:ff:61:23:
ea:2b:19:08:40:07:3a:f9:20:c6:d4:d7:9e:89:f6:
e6:10:9b:4b:00:71:57:07:bd:18:80:8f:d8:23:dc:
21:54:bf:39:ef:98:14:bc:da:56:ca:ca:f0:eb:f9:
17:49:82:ff:50:99:f5:57:c1:55:59:d2:13:3f:de:
d7:fc:de:b2:ca:dc:11:aa:13:9f:31:06:71:e9:36:
05:e0:bb:54:7d:91:78:86:02:a0:12:5a:77:16:93:
01:b9:a6:34:c8:b4:a7:30:7a:b6:c2:77:04:40:31:
07:8d:61:d9:b8:de:f6:e4:76:b0:d8:51:20:5c:f7:
97:72:b9:d0:3e:21:3e:7d:0a:2b:12:51:57:90:85:
72:56:5b:e1:31:f3:26:3c:5e:78:c0:77:94:3a:8b:
eb:56:00:52:97:13:9a:61:11:e7:e8:c7:9e:08:f1:
f6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C4:09:AF:62:AC:5A:0F:FC:6D:42:C8:BE:CB:94:FC:17:40:AC:7F
X509v3 Authority Key Identifier:
keyid:36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/88QJr2KsWg_8bULIvsuU_BdArH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.185.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:57:07:51:76:fa:09:09:47:e3:a7:6c:1e:a5:23:2f:43:e8:
1a:67:4c:b7:5e:26:a0:d6:63:51:03:ba:a5:87:25:c7:a9:37:
e0:8a:bb:d8:1d:e3:0e:a3:7f:02:5c:d5:37:3c:1e:99:52:23:
4a:26:09:2a:98:78:1a:39:da:77:f4:5a:4d:9a:d3:e2:55:01:
6b:db:cb:80:e4:62:48:5a:56:4a:5c:58:05:59:42:b0:e4:0f:
9d:9c:d5:29:b4:da:cc:e5:e9:b2:db:ab:db:68:8f:5a:f4:02:
a5:7b:b8:3f:4f:42:20:eb:c2:7d:48:5a:3f:22:83:d6:ce:69:
db:a7:02:d4:03:08:a2:bd:0b:0b:aa:93:fa:88:e1:88:f7:08:
50:79:3f:2a:21:bf:5a:cd:a9:0d:f9:4c:bb:f5:bb:63:2f:7f:
60:00:70:45:aa:93:fb:c5:a7:c3:10:b5:65:33:9b:d6:46:aa:
0f:0f:33:41:98:c9:29:de:44:a4:58:92:8f:78:b8:49:2d:d6:
fa:09:bf:7a:23:44:7a:9a:77:0f:14:dd:af:c1:96:b4:95:f2:
4e:78:61:2b:08:e9:ad:c6:63:93:6a:d7:26:b0:b8:b6:88:48:
3b:ed:bb:95:90:cd:54:29:17:2f:2e:cc:e2:b1:79:11:75:25:
e5:68:be:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:58 2023 by rpki-client on console-ams.rpki-client.org