Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/p9GGd01AE7uRbsLaqo6R7mpKhm4.roa
File: p9GGd01AE7uRbsLaqo6R7mpKhm4.roa (raw, json)
Hash identifier: hR/nVG30pYoxgn5P4Kf6OwMaWhCfbIKsA0//+kyfr08=
Subject key identifier: A7:D1:86:77:4D:40:13:BB:91:6E:C2:DA:AA:8E:91:EE:6A:4A:86:6E
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 0186CC92B99BAB4EFB9413FC9792848CFB92
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/p9GGd01AE7uRbsLaqo6R7mpKhm4.roa
Signing time: Fri 10 Mar 2023 17:30:13 +0000
ROA not before: Fri 10 Mar 2023 17:30:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16321
IP address blocks: 45.156.212.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cc:92:b9:9b:ab:4e:fb:94:13:fc:97:92:84:8c:fb:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Mar 10 17:30:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7d186774d4013bb916ec2daaa8e91ee6a4a866e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0e:ea:f4:0d:85:29:76:f2:d4:aa:ef:20:de:
58:79:69:7c:e1:bf:ce:ce:be:1f:42:ee:ae:58:0f:
78:c2:1d:53:60:6e:aa:f7:f7:72:7c:4f:5a:11:d5:
78:85:df:2f:5d:c1:f9:9f:ec:5d:27:7f:3a:85:c4:
38:38:c4:54:2d:69:67:c2:46:d6:bc:88:02:16:45:
ae:2f:8e:4d:4e:e9:06:e2:26:4e:d4:7c:e4:ea:06:
7c:91:a5:23:ad:56:08:92:88:ec:75:08:94:ac:88:
6d:72:ab:09:8b:72:3c:c1:93:b1:5b:0e:65:c6:9f:
e2:52:b9:e9:f9:38:18:a1:5d:a6:97:f7:b5:2e:5d:
f7:4f:b7:9d:f1:1b:7b:86:68:6a:f7:3a:85:76:00:
81:3a:00:73:7e:58:da:b3:38:5c:36:21:5f:36:08:
3f:12:22:25:02:87:a7:4e:06:da:b5:28:52:65:da:
bc:2d:77:ff:a0:10:66:69:e0:12:ab:70:6b:39:d6:
f9:35:e3:4f:78:36:89:32:a6:96:ba:fd:6f:5f:a4:
3b:49:3e:76:2f:c8:c0:b1:16:ba:d1:dc:74:a4:46:
e3:64:95:70:d1:b0:40:5b:61:ef:1e:7f:8f:35:80:
76:f6:be:0a:77:a9:72:32:3d:a8:f9:fc:0d:b6:e8:
a2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D1:86:77:4D:40:13:BB:91:6E:C2:DA:AA:8E:91:EE:6A:4A:86:6E
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/p9GGd01AE7uRbsLaqo6R7mpKhm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.212.0/22
Signature Algorithm: sha256WithRSAEncryption
58:21:85:15:a7:65:43:ba:0c:c8:42:3c:16:5d:8c:95:7d:fd:
65:7e:30:f1:f7:c0:80:43:48:18:d3:34:1c:80:3a:05:1e:c7:
10:04:00:34:63:06:e1:fe:77:83:0b:09:14:5c:1a:9c:db:d4:
b2:82:b7:01:87:10:fc:65:b1:23:d5:8f:ad:a6:4d:96:49:b1:
bc:2d:dc:4c:a1:3d:58:34:75:c8:00:8b:da:1c:52:b3:a8:bf:
c8:b5:86:c7:59:3c:c8:0c:2e:4f:4d:7d:fa:9c:15:6e:83:9d:
9b:c8:bb:01:ad:93:31:f3:fe:c3:c8:8b:0a:e3:b9:d7:52:17:
9c:98:cb:c2:95:cf:63:ee:99:42:af:89:3e:62:8d:81:f6:da:
c7:71:1a:76:9c:80:7d:de:3c:e5:05:20:62:60:fb:46:3a:d1:
29:bc:ac:9f:4a:05:72:6e:c8:ea:7e:6c:35:36:75:bd:63:9b:
27:8a:c2:d3:7b:63:f6:f9:2f:e2:1f:08:e4:6f:4e:7a:65:5f:
ca:82:72:34:25:42:d4:96:04:e6:90:2e:2a:00:a2:98:6c:f5:
e5:7f:52:33:88:39:e2:4c:be:70:f3:22:1f:58:0b:1a:78:d1:
1a:c2:d8:e9:76:9e:89:78:fc:92:ed:80:e2:2c:82:d6:a5:56:
50:c6:9d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:13:47 2024 by rpki-client on console-ams.rpki-client.org