Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/QsIoS1FlgG4zHXAyoMs2kAImHDA.roa
File: QsIoS1FlgG4zHXAyoMs2kAImHDA.roa (raw, json)
Hash identifier: RwU3O7IgCO2XquGw2AW2vE7m/h0Ld3JdnKo978BvG74=
Subject key identifier: 42:C2:28:4B:51:65:80:6E:33:1D:70:32:A0:CB:36:90:02:26:1C:30
Certificate issuer: /CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7
Certificate serial: 01856C93A44DC94620E9A36FCA767D7CD523
Authority key identifier: 17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/QsIoS1FlgG4zHXAyoMs2kAImHDA.roa
Signing time: Sun 01 Jan 2023 09:04:53 +0000
ROA not before: Sun 01 Jan 2023 09:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202041
IP address blocks: 185.45.158.0/23 maxlen: 23
185.45.156.0/22 maxlen: 22
185.45.156.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:93:a4:4d:c9:46:20:e9:a3:6f:ca:76:7d:7c:d5:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7
Validity
Not Before: Jan 1 09:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42c2284b5165806e331d7032a0cb369002261c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:87:8f:43:d8:10:53:9e:ca:2b:b3:61:91:68:
06:67:f1:2d:90:7f:af:88:16:d0:de:3c:67:20:99:
5b:76:9f:51:f0:21:d7:e0:0b:28:90:50:fe:50:a6:
b1:27:b5:98:3a:f7:29:3b:9e:bc:63:63:de:65:c4:
64:f6:14:e6:b8:3d:57:b9:4c:6d:ff:b5:76:c3:5f:
5b:74:60:d0:bf:d9:0e:2e:02:90:4f:70:31:e4:42:
fa:1a:42:24:24:14:5c:54:82:de:72:1b:94:86:97:
d2:6e:16:e4:90:ef:dd:5e:51:78:5c:4e:29:c2:cc:
0a:f4:ea:96:0d:69:41:13:9f:f4:c8:98:7c:65:38:
db:38:f8:09:07:cf:01:e9:79:35:df:c1:05:84:6a:
a4:8e:ec:b6:a2:35:5a:3e:6d:8d:e8:ab:93:a3:c8:
4d:74:df:89:6b:d5:04:2d:54:35:83:27:49:6a:03:
ac:58:c2:e4:c3:7a:e8:14:10:d6:65:21:2f:8e:06:
0a:f0:95:fe:7a:15:b0:79:87:c8:aa:ba:fd:ba:31:
f8:e9:53:16:07:77:53:a4:16:75:78:b7:3d:25:d2:
25:86:2c:9e:0f:29:ae:51:37:77:59:f3:4e:c1:1b:
dd:b0:e8:35:8e:18:2d:48:8b:27:83:ef:75:27:10:
df:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C2:28:4B:51:65:80:6E:33:1D:70:32:A0:CB:36:90:02:26:1C:30
X509v3 Authority Key Identifier:
keyid:17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/QsIoS1FlgG4zHXAyoMs2kAImHDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.156.0/22
Signature Algorithm: sha256WithRSAEncryption
d0:f0:e5:4e:d6:0f:cc:3e:6e:9a:ba:b8:26:63:d2:2d:a5:2c:
95:07:62:e0:4c:b7:62:e2:51:dd:eb:18:05:8e:46:fb:30:ea:
a6:79:9d:ac:92:34:16:66:9e:84:75:0a:c8:f7:98:a0:d4:27:
a8:ee:31:51:00:22:93:71:ba:a0:90:6d:dd:cc:2b:0d:94:a8:
0f:c8:6b:c6:41:d3:e7:0f:74:68:03:86:b8:1f:ff:31:4f:18:
c1:3e:89:fa:3b:91:89:67:76:fc:6a:fc:bb:39:aa:f5:82:51:
64:41:f3:1a:ca:1d:92:1b:4c:0d:0f:b8:af:15:c6:1b:28:da:
2e:23:62:3f:8c:8a:02:eb:73:ba:1b:97:d6:b9:4c:26:a1:8b:
cc:38:0f:4c:ea:1f:e6:03:c4:6e:0b:dc:dd:0f:e4:6f:4a:4a:
3d:1d:2e:9b:2e:f5:2a:5b:b8:53:a4:fe:51:c9:08:0b:ab:c7:
d6:a6:72:71:5e:88:ab:b7:2b:45:b3:f1:9a:7d:2b:17:b5:69:
25:14:b3:45:ff:76:92:3c:24:93:e0:f6:d1:0c:87:b2:6c:fb:
f1:dc:99:81:2a:03:51:7b:b6:1b:b1:69:99:e1:1d:ea:1d:1d:
4d:cc:6d:90:ab:f6:61:bd:e3:49:d2:20:33:29:68:12:96:bc:
b1:71:49:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:49 2024 by rpki-client on console-ams.rpki-client.org