Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/HDNyEZ9mjt2dVP_oDe35Uzzd43E.roa
File: HDNyEZ9mjt2dVP_oDe35Uzzd43E.roa (raw, json)
Hash identifier: uEJVWJH+IoMIIxqskSP9I4ag99tRE/p0/jiQgxDva+4=
Subject key identifier: 1C:33:72:11:9F:66:8E:DD:9D:54:FF:E8:0D:ED:F9:53:3C:DD:E3:71
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018571A7B063DB2EFDDD67DED8FCA7DF968A
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/HDNyEZ9mjt2dVP_oDe35Uzzd43E.roa
Signing time: Mon 02 Jan 2023 08:44:53 +0000
ROA not before: Mon 02 Jan 2023 08:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203950
IP address blocks: 45.128.20.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:b0:63:db:2e:fd:dd:67:de:d8:fc:a7:df:96:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 2 08:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c3372119f668edd9d54ffe80dedf9533cdde371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:62:b6:5f:89:2e:21:d8:d1:a4:dd:c0:93:c7:
03:07:fe:05:df:db:eb:8e:a8:e2:b2:41:2a:2c:e2:
b8:e9:03:36:f2:0a:7f:a7:8f:c2:f9:10:2e:64:3b:
72:e4:14:c2:8b:a7:6a:f0:5c:d4:a2:5b:98:92:42:
e4:1a:97:fd:65:57:43:d6:1e:5c:95:4f:ca:7c:c3:
95:3a:d7:76:fa:3b:a9:cc:9d:48:87:a1:bd:bb:40:
7f:77:7c:ad:8a:5b:15:6a:95:96:15:1c:39:69:a7:
80:00:22:16:37:c5:91:e4:09:ff:35:65:5f:33:ab:
b0:8d:92:af:25:71:3c:a6:e5:0d:6e:07:81:43:80:
75:a3:81:86:ef:d9:87:60:11:5e:68:01:6a:78:31:
0e:24:2e:d0:f4:4f:bb:88:12:7c:f4:e1:ef:e7:de:
6a:4c:fa:df:f5:fc:4a:13:3d:8a:52:21:a9:d7:e2:
e4:a3:d4:2b:5e:ce:ae:8f:66:89:70:41:5f:bf:04:
7f:dd:38:7b:22:0e:ea:84:c7:fd:36:fc:1a:f5:58:
b1:d7:80:25:b0:56:bf:aa:a8:86:f7:a4:16:38:9e:
7e:b9:e6:94:af:f9:81:9d:16:05:e7:93:12:e9:2a:
55:db:76:6b:9c:8b:da:41:41:e0:37:8a:34:cc:f3:
c7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:33:72:11:9F:66:8E:DD:9D:54:FF:E8:0D:ED:F9:53:3C:DD:E3:71
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/HDNyEZ9mjt2dVP_oDe35Uzzd43E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.20.0/22
Signature Algorithm: sha256WithRSAEncryption
16:04:6d:55:d9:d8:26:82:04:a6:38:ca:4f:9e:9f:e8:66:58:
d8:8f:fe:a5:d0:b2:f5:bd:ec:1a:2d:e7:56:cf:fb:bd:1b:75:
35:56:b7:a2:5e:b7:b7:88:a1:1d:5c:48:4d:98:1f:e2:26:c3:
32:0b:07:c8:c2:c1:ab:9f:b5:2f:96:33:03:e5:e7:a0:ae:3c:
19:ff:8b:4a:a7:0c:7c:95:3f:f4:f5:a6:9f:97:0c:4a:a7:c4:
b0:d0:3b:ee:5a:ee:97:fe:98:b9:4c:b1:7c:26:78:3a:e6:c0:
ba:09:d2:ed:0f:e0:e4:e4:08:85:f1:9d:ff:3a:6f:c6:e4:9f:
ef:bc:27:46:a1:f1:37:e7:e3:8c:59:29:10:9b:3c:d0:fb:7a:
d8:8d:88:30:83:a2:d2:c7:25:d9:3b:ac:8c:00:e6:06:25:4a:
61:62:f6:03:1b:7b:5c:de:17:5b:bd:41:2e:9c:f1:e5:46:de:
ed:d2:87:f5:d7:45:91:45:f2:49:a0:53:49:40:4d:17:63:7a:
a5:60:13:28:ea:83:2c:93:cc:75:55:90:1f:7a:17:e7:96:8c:
96:a3:e1:9b:b1:81:ea:a7:95:62:f1:49:55:b4:a5:2e:5e:c4:
06:91:71:f5:47:ba:88:56:ac:ba:57:5e:2c:c7:ce:24:f1:97:
4e:71:ed:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:21 2024 by rpki-client on console-fra.rpki-client.org