Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/w9kG8q5QVqoD1NfzoXKyOaV4Jj0.roa
File: w9kG8q5QVqoD1NfzoXKyOaV4Jj0.roa (raw, json)
Hash identifier: qDgr2rMF0eZH6X5EVClzv9x17vXA5T9W9zR4JTGsaxM=
Subject key identifier: C3:D9:06:F2:AE:50:56:AA:03:D4:D7:F3:A1:72:B2:39:A5:78:26:3D
Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Certificate serial: 0185BFD7BE169AAAFDC7A3AD17231DA27CE9
Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/w9kG8q5QVqoD1NfzoXKyOaV4Jj0.roa
Signing time: Tue 17 Jan 2023 13:07:45 +0000
ROA not before: Tue 17 Jan 2023 13:07:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 45.81.160.0/24 maxlen: 24
2.56.32.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bf:d7:be:16:9a:aa:fd:c7:a3:ad:17:23:1d:a2:7c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Validity
Not Before: Jan 17 13:07:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3d906f2ae5056aa03d4d7f3a172b239a578263d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c1:7c:00:8a:19:37:9f:3d:60:2a:bb:5d:cf:
64:8c:91:3c:3d:95:7c:11:e1:7c:3c:45:c0:8f:89:
5d:df:93:2a:dd:4e:b3:f1:73:a6:a4:ee:54:7c:7a:
ba:bb:60:23:c5:b6:35:d6:0a:44:ba:16:e3:27:84:
b5:ed:6a:48:7e:33:dc:f3:6d:5a:5b:e7:84:69:a6:
d3:53:6a:7e:5c:86:c6:6f:65:15:2d:53:a1:e7:43:
cf:49:4a:73:7a:9e:1c:ef:5e:05:1e:3e:3c:43:46:
66:f4:2c:74:62:bc:05:25:bc:3b:de:b1:b9:74:61:
70:ed:15:40:86:9d:f4:42:f4:c6:cb:aa:df:6b:7c:
bb:8b:a9:73:21:c3:b7:7e:16:a5:d9:67:ed:83:e7:
61:db:e4:7d:a9:f2:b4:d8:6a:22:b8:5a:d8:3e:1c:
dc:89:f4:ff:6a:8d:37:b8:1d:30:dd:58:89:e5:8a:
e5:51:ac:2f:25:6e:c4:2e:46:4b:a3:42:3c:72:4c:
28:83:71:fb:50:d7:f3:f4:58:80:18:34:e0:a9:42:
b3:5b:1a:72:e6:05:0d:1a:2a:45:a4:e3:90:37:2f:
dd:16:5c:d8:d8:2d:0e:73:a6:41:7c:e0:ce:33:9c:
d4:05:ba:b0:a7:a5:18:f2:6c:d8:6b:47:71:55:58:
5e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D9:06:F2:AE:50:56:AA:03:D4:D7:F3:A1:72:B2:39:A5:78:26:3D
X509v3 Authority Key Identifier:
keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/w9kG8q5QVqoD1NfzoXKyOaV4Jj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.32.0/22
45.81.160.0/24
Signature Algorithm: sha256WithRSAEncryption
22:2f:6e:52:9f:9c:ef:80:c1:2d:8f:b0:a8:2f:c0:6e:da:a1:
c8:7d:14:e8:a8:e1:e7:a6:f3:fe:e4:eb:79:32:8b:08:0e:54:
88:f8:ba:23:ab:14:04:2b:91:65:cf:12:2b:7d:11:57:f1:89:
e3:3c:10:f4:d2:fc:a9:21:02:c9:c1:25:7c:00:97:e7:d4:98:
98:6b:b0:67:2c:b6:16:c3:76:0b:da:7d:15:50:5e:b6:3f:d3:
aa:f5:bc:66:58:0a:5a:3c:34:2e:64:5a:39:e8:98:1d:fc:c1:
7e:a3:af:8f:40:2c:b4:11:5c:bc:d3:77:97:f7:9e:28:d3:e6:
cc:4c:c6:fc:31:cb:fe:0c:91:e7:23:83:02:44:8d:62:55:41:
6d:db:7a:c2:7c:b3:24:46:57:b4:e8:c0:e6:8c:63:8f:f2:37:
66:52:ec:be:9c:46:92:4a:23:be:dc:e5:7b:67:82:6f:0c:7c:
7f:49:65:19:0f:9c:4e:34:a9:11:24:e7:45:76:c1:94:41:1d:
95:f5:4b:85:ee:cd:15:e6:2b:b2:a5:ca:14:51:bc:82:7c:9f:
68:b0:43:8f:f2:ce:c5:7c:fb:46:f9:4c:fe:0f:9e:23:69:5a:
9c:a0:a6:f0:ab:c5:2b:2e:8d:3b:60:6d:2b:d4:66:ce:8e:e3:
ae:03:0d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:39 2023 by rpki-client on console-ams.rpki-client.org