Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/N2QVTc0gB0SbF4nCnhAv8WbkWf0.roa
File: N2QVTc0gB0SbF4nCnhAv8WbkWf0.roa (raw, json)
Hash identifier: 1cqzIUSn46tCPlB3WrY0YiOW2u0TW4dmK7xDcgGV8M4=
Subject key identifier: 37:64:15:4D:CD:20:07:44:9B:17:89:C2:9E:10:2F:F1:66:E4:59:FD
Certificate issuer: /CN=f6057e74aad21abcf13374f5915b1a7e827d4ea1
Certificate serial: 01856CE6223A352BAF5D343AA60BB95258FA
Authority key identifier: F6:05:7E:74:AA:D2:1A:BC:F1:33:74:F5:91:5B:1A:7E:82:7D:4E:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gV-dKrSGrzxM3T1kVsafoJ9TqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/N2QVTc0gB0SbF4nCnhAv8WbkWf0.roa
Signing time: Sun 01 Jan 2023 10:34:59 +0000
ROA not before: Sun 01 Jan 2023 10:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212530
IP address blocks: 45.13.112.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:22:3a:35:2b:af:5d:34:3a:a6:0b:b9:52:58:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6057e74aad21abcf13374f5915b1a7e827d4ea1
Validity
Not Before: Jan 1 10:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3764154dcd2007449b1789c29e102ff166e459fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c4:c3:8f:1b:5d:fa:51:4f:fb:c6:20:14:23:
c5:85:78:62:c4:15:3f:6b:c4:3c:c0:da:ba:99:aa:
c8:cd:23:df:65:36:3f:7f:7e:45:8a:d2:91:48:73:
c7:4c:11:4e:a1:58:97:1e:26:dd:29:07:e0:f8:41:
92:57:9a:e4:5a:a3:be:a8:76:7c:26:9e:83:ea:7a:
c3:49:4e:8e:91:a3:4e:0f:9d:63:55:84:f1:9c:d8:
e8:88:d1:90:d8:8f:94:c0:15:1c:b3:48:b4:d4:b7:
47:b0:08:4f:32:75:16:80:72:6b:4f:46:6f:58:d4:
0b:e2:a5:ef:eb:33:98:f9:27:4b:d7:20:94:89:1d:
e4:99:c3:5b:28:d5:9a:75:3e:fc:07:a1:9b:7d:09:
7c:e0:95:b5:5a:33:7d:5f:6b:3d:61:ea:93:50:5a:
90:c8:8c:12:c1:7c:ba:8a:1a:8c:c0:15:db:3e:8d:
8b:be:c4:29:96:42:cc:61:3e:3f:43:35:47:a9:e9:
87:15:cb:41:64:bc:86:2f:bf:ef:f5:2c:47:94:68:
f6:25:03:1b:6b:31:c0:dd:2b:a7:a7:a7:1a:43:83:
b2:a5:39:f3:ba:13:0d:be:58:5f:98:22:b8:6a:1e:
cc:ba:b1:74:a2:a3:10:99:12:df:5c:1f:19:24:02:
f5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:64:15:4D:CD:20:07:44:9B:17:89:C2:9E:10:2F:F1:66:E4:59:FD
X509v3 Authority Key Identifier:
keyid:F6:05:7E:74:AA:D2:1A:BC:F1:33:74:F5:91:5B:1A:7E:82:7D:4E:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gV-dKrSGrzxM3T1kVsafoJ9TqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/N2QVTc0gB0SbF4nCnhAv8WbkWf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.112.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:6a:05:d1:54:58:8e:b0:70:ea:ca:f5:98:14:5b:64:bc:db:
a1:25:b9:53:6a:30:d5:a6:6c:4b:65:ae:21:39:2a:24:13:34:
29:33:55:cb:df:10:df:94:57:12:99:02:ba:69:a4:0e:84:06:
dc:7a:0a:b5:7b:e2:38:c4:4f:52:7f:92:4c:d6:9f:19:35:e2:
a2:1c:72:be:11:20:6c:98:bf:51:92:6c:36:c9:eb:bb:7a:11:
36:e6:07:5e:4e:7d:e0:09:1a:58:dc:85:89:c9:86:ec:a9:fd:
90:cb:89:51:8f:6f:29:e5:17:31:26:41:ee:09:f4:e5:1b:37:
11:fd:69:5a:14:46:06:33:36:aa:6b:a2:6c:b5:5a:a6:01:11:
51:fc:40:8c:64:c8:66:bb:dd:be:2d:6c:8c:f2:9c:9e:de:22:
e9:b9:98:eb:fb:2d:f2:67:c2:b1:95:73:c2:ae:a3:51:ff:c1:
74:d9:c5:d6:b4:d9:89:20:5d:7e:d1:22:8c:a8:ea:87:d0:71:
a6:5c:40:28:10:e5:f6:52:9f:bf:0b:e5:96:34:c5:00:a8:67:
a0:8b:df:d4:cb:89:5f:52:5b:82:c9:a5:a5:76:ea:3a:51:6c:
36:4a:7c:7e:65:5d:68:f6:1f:0c:5b:97:ea:45:a6:8f:97:9b:
22:2b:1d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:34:29 2024 by rpki-client on console-ams.rpki-client.org