Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/4Qz74nyIeF9gHNc5ljtQSD9j8RI.roa
File: 4Qz74nyIeF9gHNc5ljtQSD9j8RI.roa (raw, json)
Hash identifier: 8w0P5eGQ/0k6hAOiMDNAAkKzsBiy0BFTrzlCmVJYzds=
Subject key identifier: E1:0C:FB:E2:7C:88:78:5F:60:1C:D7:39:96:3B:50:48:3F:63:F1:12
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018571A7A9F33BEB1D2F47AE323A80F27690
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/4Qz74nyIeF9gHNc5ljtQSD9j8RI.roa
Signing time: Mon 02 Jan 2023 08:44:51 +0000
ROA not before: Mon 02 Jan 2023 08:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201813
IP address blocks: 45.67.196.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:a9:f3:3b:eb:1d:2f:47:ae:32:3a:80:f2:76:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 2 08:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e10cfbe27c88785f601cd739963b50483f63f112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d2:64:8d:cc:69:1e:a6:83:d3:55:64:b4:54:
7e:33:83:31:cb:63:e9:07:db:0d:88:ec:88:28:d3:
e2:7e:9a:99:58:e4:8c:aa:f0:2e:65:26:ef:fd:1c:
2d:76:ed:8a:c8:1b:6f:41:73:85:7e:b4:82:e9:b9:
41:44:cd:cc:c6:cc:d6:6c:0f:06:e9:82:ff:f8:66:
df:c8:82:38:92:b2:29:5f:71:14:aa:e5:d3:a9:93:
e4:3d:8e:e6:98:70:2c:43:ba:90:70:95:f3:db:c9:
60:b1:be:04:3d:68:69:1e:4d:74:f5:a8:47:8e:df:
01:5d:cb:d4:c4:b6:16:3b:3b:d2:a1:b6:82:d8:be:
66:00:2f:01:54:93:6b:56:0f:14:90:36:eb:93:b9:
b6:18:0a:44:c9:7e:0a:79:7f:02:b3:8e:ab:fe:ce:
6a:fc:c4:ab:5b:f3:5c:fe:4b:c6:65:57:b9:1c:64:
50:2a:07:88:2c:88:83:e4:46:72:9a:05:75:35:80:
91:7f:29:84:71:73:98:88:06:c5:43:d7:f8:b4:01:
29:52:c7:c3:a1:10:fd:27:4e:07:6e:df:13:fa:4c:
0f:c8:44:7a:0a:27:0a:87:9f:5a:0b:4a:d3:8c:56:
ac:1b:f2:f2:00:c8:c3:51:4f:e3:d3:d0:ee:d9:16:
e4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0C:FB:E2:7C:88:78:5F:60:1C:D7:39:96:3B:50:48:3F:63:F1:12
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/4Qz74nyIeF9gHNc5ljtQSD9j8RI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.196.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:bd:58:0b:62:77:12:76:a8:05:92:89:58:8b:fe:2e:42:1f:
91:79:d8:08:57:49:aa:4d:3f:94:23:e5:51:69:e5:25:ab:64:
dd:13:21:9c:c2:87:4d:47:24:ea:d7:b4:fe:d2:99:b0:bf:a3:
35:8b:5b:2c:43:9c:50:93:51:e2:d6:eb:c5:69:6f:f1:56:6e:
64:5a:32:52:6a:e6:b7:9d:d7:3f:e8:8e:9b:bc:0b:e9:56:04:
8c:74:aa:87:e2:67:6d:07:f8:1c:e2:a1:da:d6:7a:da:36:7f:
31:29:21:e7:9d:ce:bc:de:4d:56:eb:a8:7a:bd:92:cb:6c:b8:
2a:77:bd:a5:ac:dd:7d:95:39:e1:28:a8:2b:48:9c:ce:36:c5:
17:3d:b7:ce:42:5b:37:15:64:0d:cf:95:e5:4b:1b:86:81:8a:
ea:ee:83:d6:d8:90:ca:56:b4:3a:82:50:63:fb:1c:e7:a3:42:
6d:19:c9:6b:fa:1e:20:be:5d:c8:57:f3:2a:c3:ce:10:0a:16:
6d:db:60:48:b0:c9:a0:7c:f0:63:98:a0:02:e0:7d:f5:66:bf:
e8:7c:71:0c:14:9b:be:2c:9b:8a:5c:3b:5a:ef:fc:31:5f:1e:
bc:a9:54:91:b3:8c:0a:bf:35:ab:89:78:f5:fc:74:79:c9:10:
a4:b8:8f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 26 14:26:37 2023 by rpki-client on console-fra.rpki-client.org