Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/mmH7qKOe6ZGwRheFmbQEJn4nDI8.roa
File: mmH7qKOe6ZGwRheFmbQEJn4nDI8.roa (raw, json)
Hash identifier: QBB2t5ycIORAbhjXBsbdVpnOyUt+sYrs3kRl2OCeSlM=
Subject key identifier: 9A:61:FB:A8:A3:9E:E9:91:B0:46:17:85:99:B4:04:26:7E:27:0C:8F
Certificate issuer: /CN=193743467b4da41c6295e9351153309586ba2399
Certificate serial: 01856F0B5FD0ACF69DD5C8D8DF4C891908A8
Authority key identifier: 19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/mmH7qKOe6ZGwRheFmbQEJn4nDI8.roa
Signing time: Sun 01 Jan 2023 20:34:54 +0000
ROA not before: Sun 01 Jan 2023 20:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59268
IP address blocks: 45.65.70.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:5f:d0:ac:f6:9d:d5:c8:d8:df:4c:89:19:08:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=193743467b4da41c6295e9351153309586ba2399
Validity
Not Before: Jan 1 20:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a61fba8a39ee991b046178599b404267e270c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1a:9b:ea:49:77:2e:05:09:7b:8c:c9:4d:f3:
68:a4:88:9f:70:d4:32:eb:53:73:40:5b:7a:11:de:
bf:86:09:e4:cc:4e:d9:1d:b2:85:56:34:f5:a9:2d:
1d:8d:e2:0f:67:4e:d2:cd:c6:4b:0e:71:ff:1a:0b:
9e:4f:2e:d3:4c:44:e3:3e:32:18:b5:2b:99:8b:4f:
4d:a7:75:1f:20:88:fa:35:c7:d8:01:c2:41:dc:05:
a5:fe:a9:2d:5f:52:8e:82:e6:a5:25:6e:1a:94:20:
b7:80:ca:03:b6:d3:e0:80:5e:80:12:0c:91:b0:b9:
16:06:39:fe:94:0f:12:c2:db:87:55:1e:25:a8:d9:
44:eb:d8:62:b4:0f:44:e5:6c:27:ef:9d:6b:74:5e:
bf:45:f8:eb:d0:5d:50:c3:43:0a:70:91:88:55:98:
f5:59:97:88:2d:26:57:58:4e:e8:eb:1f:2d:2c:0c:
6e:88:48:20:f2:fc:86:6d:4f:aa:ed:13:55:52:91:
b2:d7:68:aa:8a:28:d5:99:0a:95:9f:7b:21:e8:b9:
59:07:17:27:ca:08:f1:6e:e0:81:d9:5f:fb:7a:b5:
a6:fc:c0:c9:28:96:1d:80:16:fc:b0:f0:1e:7e:46:
56:e9:7f:77:ae:0c:de:46:a8:3f:4b:3b:7d:6e:6b:
7a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:61:FB:A8:A3:9E:E9:91:B0:46:17:85:99:B4:04:26:7E:27:0C:8F
X509v3 Authority Key Identifier:
keyid:19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/mmH7qKOe6ZGwRheFmbQEJn4nDI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.70.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:6a:93:05:01:ad:37:87:71:5f:d2:50:8b:8f:b2:38:b3:7b:
f9:0f:9d:50:4a:31:d6:0f:4d:9e:1a:2a:44:ee:3b:6d:bb:3b:
17:30:2e:75:58:e5:67:9d:55:fa:b5:34:ad:af:d8:c6:63:2c:
fb:a4:db:a9:d1:cf:00:4c:ce:0e:4c:fb:ba:93:1c:a7:a4:31:
af:92:00:9d:6e:81:85:2a:25:ca:d8:ed:bd:3a:5f:33:23:07:
6d:33:f2:0f:60:2d:2b:4a:a0:b1:5e:86:45:69:ec:b8:90:5e:
73:1c:7c:f4:72:a0:ac:c1:b6:1d:a6:74:fb:1e:ea:87:e8:f5:
95:1e:00:17:50:d5:8f:54:a0:85:88:92:c8:71:9d:15:1e:da:
aa:27:1e:a3:e5:30:1c:7f:05:13:72:81:dd:af:12:89:a8:1d:
2a:5c:ff:0e:cb:8c:e5:0d:34:8b:ae:f4:e8:87:ea:ec:d1:88:
cc:c3:cc:8f:9f:6b:44:f9:c3:a5:33:3c:2f:50:76:83:87:19:
fa:6f:ba:54:8a:bb:49:ad:24:26:0a:58:fd:d2:13:c1:0e:33:
50:59:a3:f2:c3:58:65:77:e5:03:cf:14:12:67:6d:19:61:ad:
65:13:34:a4:e5:7f:0d:0a:46:33:81:a6:a4:25:bd:98:19:09:
49:07:b8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:14 2024 by rpki-client on console-fra.rpki-client.org