Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ETZpadYFq5EHgEs2mANoIa4Zpp4.roa
File: ETZpadYFq5EHgEs2mANoIa4Zpp4.roa (raw, json)
Hash identifier: DGivFVstg3gDVBh8iCN/2mqs5IwKHaGfzlNKrth6TvU=
Subject key identifier: 11:36:69:69:D6:05:AB:91:07:80:4B:36:98:03:68:21:AE:19:A6:9E
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0185BA6FB7985CFAF427DA55AE57546D935F
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ETZpadYFq5EHgEs2mANoIa4Zpp4.roa
Signing time: Mon 16 Jan 2023 11:56:01 +0000
ROA not before: Mon 16 Jan 2023 11:56:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209242
IP address blocks: 45.94.169.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ba:6f:b7:98:5c:fa:f4:27:da:55:ae:57:54:6d:93:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 16 11:56:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11366969d605ab9107804b3698036821ae19a69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:88:21:86:c5:93:15:93:94:96:00:9d:1b:ea:
8b:11:57:86:e0:2f:1e:42:85:d6:43:df:8d:7e:b1:
4a:08:46:16:54:fb:83:da:13:7c:83:c8:c1:07:3d:
7f:ea:1d:08:5b:9a:0d:05:e7:3f:a2:80:96:36:6e:
88:ac:ac:6c:dc:55:7b:25:dc:df:de:23:da:3d:bf:
7d:ec:b1:b9:01:8d:15:09:2c:2d:d8:3b:36:7f:1d:
0d:9e:16:33:49:ac:d8:88:ea:47:7e:22:0a:e4:23:
7c:4a:ec:a9:dd:98:08:93:ef:4c:bc:af:0f:66:61:
98:7a:25:c0:e8:3e:92:1b:a4:27:bf:de:4f:03:c0:
76:41:37:54:9f:d6:ee:6d:01:99:78:fc:51:31:d9:
1f:1d:58:d2:23:d2:4f:bd:0e:90:f4:94:3c:51:e7:
93:bc:07:3a:ee:9d:9c:96:f6:dc:8b:ac:53:95:65:
04:77:c2:97:8d:00:4b:18:71:78:27:17:31:ca:5a:
b1:13:91:e9:06:7c:cd:ea:ea:fd:ba:eb:3b:03:11:
4c:52:49:f1:47:bf:94:c0:a8:65:81:7b:b0:f5:6d:
ef:67:ab:7a:18:a8:61:9c:a0:57:a4:8e:ca:cd:33:
b5:db:53:91:63:c4:53:c5:a1:82:48:61:85:63:c5:
67:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:36:69:69:D6:05:AB:91:07:80:4B:36:98:03:68:21:AE:19:A6:9E
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ETZpadYFq5EHgEs2mANoIa4Zpp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.169.0/24
Signature Algorithm: sha256WithRSAEncryption
70:f8:ed:9c:94:a0:45:8a:8b:d8:b1:86:31:14:4e:04:fc:c5:
a6:c4:0b:a3:1b:63:0b:2f:3b:3d:a3:82:32:8f:e7:56:a8:b3:
6d:ca:f0:75:ba:df:01:7f:de:38:9c:38:f5:2c:96:b9:0f:9f:
07:16:cf:9c:f8:7a:27:af:56:da:c7:16:bd:93:5e:e4:e3:e3:
7d:76:6c:88:9f:44:b0:2c:4e:07:78:8b:ff:dd:62:13:02:aa:
d5:34:c9:2c:6b:08:75:13:3c:65:6e:cf:82:62:0b:bb:e6:e5:
70:b5:08:09:0a:8b:e3:6a:c6:59:96:cb:62:8b:14:05:25:0c:
d7:b1:82:1d:7d:c1:c8:e2:35:e8:07:9f:88:e4:26:62:74:34:
4f:bd:60:b4:a3:cb:ce:31:54:d4:ea:3b:97:98:b1:19:ba:9b:
40:4f:45:12:86:b2:3b:14:b9:06:a8:9a:99:ce:7d:dc:a5:da:
38:d5:69:58:f9:ef:56:00:29:f3:68:8e:8a:ff:5b:4c:93:6d:
23:d1:36:f5:f4:98:6c:66:d2:bc:78:34:ca:73:14:73:0d:84:
e4:23:56:07:d4:b2:b6:1d:47:d2:57:a3:69:8c:80:0c:c8:40:
da:70:b3:99:8c:ea:78:20:ea:b9:28:ac:83:72:bb:e7:ee:03:
ac:63:51:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:34 2024 by rpki-client on console-ams.rpki-client.org