Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/a6WMxQ3VIeRYB5cpbuXwIKd_KN4.roa
File: a6WMxQ3VIeRYB5cpbuXwIKd_KN4.roa (raw, json)
Hash identifier: T3NP5XC4fsPYACcThYo598kimv20gEBnVlyvgn43HXQ=
Subject key identifier: 6B:A5:8C:C5:0D:D5:21:E4:58:07:97:29:6E:E5:F0:20:A7:7F:28:DE
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 018B21E063EE4AD51D18F409AF49BC88A561
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/a6WMxQ3VIeRYB5cpbuXwIKd_KN4.roa
Signing time: Thu 12 Oct 2023 03:13:55 +0000
ROA not before: Thu 12 Oct 2023 03:13:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212384
IP address blocks: 45.11.188.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:21:e0:63:ee:4a:d5:1d:18:f4:09:af:49:bc:88:a5:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Oct 12 03:13:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ba58cc50dd521e4580797296ee5f020a77f28de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ae:80:4c:d3:73:81:7c:db:55:33:47:20:c4:
19:e9:e2:2d:bb:a3:3e:2d:25:c9:52:73:07:43:e0:
b8:4e:3f:01:c2:07:f8:df:b3:24:fe:e7:3a:f1:d4:
2a:7e:95:2c:e8:28:e6:c1:94:4a:f2:1d:e5:eb:99:
51:3c:15:8e:a7:ba:15:8d:cc:93:bb:43:ba:52:ee:
3d:b4:ca:f4:af:09:31:eb:31:e7:da:b5:ad:8a:5a:
a1:51:e7:96:7e:9f:1d:04:a0:fe:d0:db:76:90:ee:
40:32:bf:19:f1:36:94:60:fc:42:39:7c:f3:d6:ef:
10:85:42:6c:ab:71:04:42:5c:64:8d:16:b7:4e:3a:
f5:98:d9:09:bd:2d:a1:f3:c1:64:4a:ae:8f:4b:7f:
60:fe:13:60:21:cb:7f:5f:dc:57:1d:ba:8e:93:f0:
62:b8:91:6e:70:67:36:d5:2f:e1:fc:7f:e3:e5:20:
5b:25:0e:cc:5a:b5:48:c8:71:43:1c:ae:b2:f4:6f:
e8:de:73:df:f5:b7:2e:52:10:0a:da:be:48:6b:47:
b4:38:35:aa:44:bf:de:29:40:e9:0d:0f:67:11:fa:
46:b4:17:3e:bb:55:fc:fc:4f:e0:9b:9b:7b:3b:81:
00:b3:e4:cf:be:60:93:3a:b5:25:f1:09:30:a9:56:
28:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A5:8C:C5:0D:D5:21:E4:58:07:97:29:6E:E5:F0:20:A7:7F:28:DE
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/a6WMxQ3VIeRYB5cpbuXwIKd_KN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.188.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:15:43:6d:57:c0:95:ad:3a:a4:c6:e3:af:d6:ff:09:f3:81:
1e:09:32:94:0a:77:5d:03:7a:10:c4:ce:8e:4e:7e:47:c9:ac:
37:cd:14:ba:67:03:b5:0e:69:ec:fb:22:33:73:f5:36:08:28:
ac:bf:02:96:dd:7c:f8:c1:94:92:de:ae:63:96:f9:72:ee:01:
4d:f6:9e:02:5f:0d:3b:80:eb:f7:1a:f9:24:f7:5a:ed:61:7e:
30:fb:be:85:33:02:60:2e:b1:c2:8a:e0:d1:bf:07:1a:ec:e9:
0d:2e:03:4e:e8:3d:75:0f:7c:e3:64:ce:13:eb:c6:43:5a:44:
6d:29:3a:81:77:7f:c4:69:de:e1:d6:d1:0d:a3:72:b7:4a:3c:
8a:42:23:98:6f:98:e1:0e:05:b3:13:f1:3f:20:2e:67:3a:fb:
e9:e3:17:7a:38:e6:46:b1:48:66:e5:22:9f:e8:4a:f9:53:a9:
80:8c:d8:01:17:9d:21:3c:da:3e:b1:35:de:06:75:f1:23:8a:
9d:78:e4:79:df:4a:c1:ca:74:86:9e:27:71:54:82:98:08:c6:
f7:aa:b0:26:6a:8a:6f:93:06:b3:de:52:e7:3d:ef:d6:cc:7a:
ae:5f:35:08:ee:cf:b3:98:f0:d1:ad:49:fa:dd:39:bf:fc:0c:
4d:3f:9e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:23 2024 by rpki-client on console-fra.rpki-client.org