Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/IqlJam8UALXET0x7UQEjCcBOZlc.roa
File: IqlJam8UALXET0x7UQEjCcBOZlc.roa (raw, json)
Hash identifier: huBY4MibJJVTNMf5r3t9gSX/ahku7pBTK426JKBJKUs=
Subject key identifier: 22:A9:49:6A:6F:14:00:B5:C4:4F:4C:7B:51:01:23:09:C0:4E:66:57
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0185B6B53BDB40A5628A3397A2545F6A0AFB
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/IqlJam8UALXET0x7UQEjCcBOZlc.roa
Signing time: Sun 15 Jan 2023 18:33:28 +0000
ROA not before: Sun 15 Jan 2023 18:33:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400810
IP address blocks: 45.94.168.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b6:b5:3b:db:40:a5:62:8a:33:97:a2:54:5f:6a:0a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 15 18:33:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22a9496a6f1400b5c44f4c7b51012309c04e6657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e1:cb:78:82:15:a2:14:ef:8f:e6:93:5d:26:
ef:61:2e:63:10:fe:43:59:c4:b8:af:2a:b8:f0:e2:
50:d3:eb:9f:47:4b:2d:c1:99:37:dd:47:31:e4:08:
93:5e:b1:34:6c:8d:27:0d:77:f8:71:a8:e2:59:9a:
9e:8a:53:8f:b2:4c:4f:f6:58:c6:e8:0a:d4:3a:a9:
8e:ca:d3:d4:49:3b:71:f6:6c:00:46:8c:e3:94:e8:
11:42:33:64:09:67:35:72:c2:19:ae:08:54:f6:e3:
58:0d:c7:5f:a1:eb:45:05:ce:81:47:dd:4c:41:a5:
d0:d9:f6:30:60:67:43:13:46:b9:e3:ff:ec:6f:e5:
0b:1a:8f:e6:8e:76:80:ca:f3:3b:c8:10:b8:6c:e9:
d6:be:a3:27:67:04:1c:7f:2a:85:e1:64:29:2b:26:
2c:f9:ab:e7:41:98:20:5a:6c:11:61:dd:6e:3e:80:
ca:65:bb:a5:b8:f2:50:8c:5e:8c:59:ca:14:72:eb:
e5:07:69:e6:f3:bb:5f:64:26:57:3c:4a:84:4e:49:
66:86:6c:bf:b7:85:64:9b:a5:e6:50:c8:0e:d3:71:
f8:9f:00:bc:77:14:fd:fa:6c:97:7e:95:73:b3:ee:
64:ed:49:2a:1d:8c:e0:b1:b6:7d:67:44:29:9d:31:
d3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A9:49:6A:6F:14:00:B5:C4:4F:4C:7B:51:01:23:09:C0:4E:66:57
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/IqlJam8UALXET0x7UQEjCcBOZlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.168.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:ac:96:b1:15:f6:f7:b6:20:b7:e8:00:0e:a1:43:a9:49:f1:
33:f1:a7:1a:63:b4:c7:e8:8b:eb:b7:44:90:a1:77:b7:ed:8e:
0b:68:a6:1c:75:e5:a7:f8:15:5e:c8:25:0a:8f:65:74:6b:cd:
de:74:c7:c6:8c:c5:45:ff:7e:5d:da:c1:f0:1e:3f:94:b4:0a:
1b:1e:6b:8b:97:26:16:7a:91:47:74:54:58:93:fc:e6:57:68:
21:72:4d:e3:ba:04:04:af:15:ba:23:8d:3c:ea:17:1d:e7:88:
f3:b8:0f:f4:05:54:d0:c0:68:28:70:8d:4c:07:02:33:6d:32:
4f:b9:75:0a:e8:e5:54:65:b3:3e:03:cd:5b:c2:61:9e:43:f3:
07:62:d5:cd:58:7b:8f:63:a5:1f:ca:76:9f:24:75:17:ac:af:
c7:ca:46:9a:59:a5:87:16:2d:8d:85:36:df:af:43:25:a9:db:
80:77:e6:47:11:5e:19:19:f1:e0:59:33:0b:23:db:b0:97:d4:
d4:b6:50:59:3f:37:6f:c3:37:a4:44:8f:b8:cb:1b:09:5f:77:
80:cd:ff:c0:18:b4:ae:18:df:3d:db:be:87:12:fd:e3:c9:12:
88:83:14:e2:fb:f9:50:9f:74:e3:b0:12:00:89:be:0d:dc:1a:
53:ef:a8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:49:45 2024 by rpki-client on console-fra.rpki-client.org