Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/nD02hUmayX2USpn-DP2rey_4Dcc.roa
File: nD02hUmayX2USpn-DP2rey_4Dcc.roa (raw, json)
Hash identifier: e/ZXPRfRcru+Lg3iZvUGSXgwT9LBgFEGPNSNtqbo0k0=
Subject key identifier: 9C:3D:36:85:49:9A:C9:7D:94:4A:99:FE:0C:FD:AB:7B:2F:F8:0D:C7
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 01896354DAA9A7B2E95E159FE53F82F88491
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/nD02hUmayX2USpn-DP2rey_4Dcc.roa
Signing time: Mon 17 Jul 2023 10:10:52 +0000
ROA not before: Mon 17 Jul 2023 10:10:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58212
IP address blocks: 45.65.113.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:63:54:da:a9:a7:b2:e9:5e:15:9f:e5:3f:82:f8:84:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jul 17 10:10:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c3d3685499ac97d944a99fe0cfdab7b2ff80dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:96:f0:45:58:36:01:29:e9:36:6a:35:a9:3f:
16:2f:fd:e3:b8:61:62:98:3e:9f:3f:38:59:1e:ec:
51:76:70:95:bf:f3:76:b7:98:b5:3f:85:8d:b5:14:
2d:34:bc:3f:4d:06:87:07:8b:9f:0d:27:4f:bb:ae:
eb:44:a2:f3:a4:54:ab:a9:30:e9:cc:9e:18:23:39:
7e:de:54:af:a4:9a:f0:e9:3d:de:8e:25:ed:b0:81:
de:b2:59:9c:02:b5:c9:f9:6a:92:7d:d6:4a:7b:f8:
fb:c5:3f:59:d0:a3:a8:00:37:21:14:10:3c:8a:2d:
d6:1b:c7:4c:eb:a0:66:d9:dd:38:50:fc:ca:ec:52:
d8:b5:69:fa:28:de:dc:04:70:f1:3e:1c:a1:33:ee:
90:f8:06:70:a6:17:5c:12:4c:39:cb:f7:84:b1:43:
7b:a6:f4:f1:c4:17:47:82:5e:8c:f0:70:e4:71:97:
73:95:7b:0f:9b:61:a9:70:46:9b:31:c6:b6:c4:89:
80:8a:69:d2:3c:11:fe:95:56:2e:b9:35:24:13:a6:
94:e0:38:48:52:c9:e5:a7:d9:9c:75:c9:57:78:84:
3a:07:4d:f3:15:48:dc:7f:fc:5b:bb:8a:1a:4d:4a:
03:cf:d3:16:6c:5d:77:f3:42:29:68:c1:d3:65:8d:
73:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3D:36:85:49:9A:C9:7D:94:4A:99:FE:0C:FD:AB:7B:2F:F8:0D:C7
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/nD02hUmayX2USpn-DP2rey_4Dcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.113.0/24
Signature Algorithm: sha256WithRSAEncryption
03:1a:85:e8:c6:59:10:d7:ca:34:94:ed:57:df:b4:ba:30:1e:
02:1c:91:56:fd:b1:6e:65:7f:ab:09:f0:cd:cd:9e:a7:56:24:
70:ba:71:a1:71:4f:cf:da:aa:40:2c:31:d5:7c:4c:54:d4:5f:
ec:94:7e:25:4d:52:e4:c9:ba:4a:e1:45:18:60:02:9f:fa:eb:
c5:53:9d:11:1a:97:4d:76:c8:18:b9:26:e6:f6:a1:49:0b:63:
b8:28:73:20:04:10:10:e0:a0:a9:d0:9a:12:03:89:1e:a6:26:
0e:b7:37:a5:53:8b:f9:33:c6:64:c9:de:40:fa:5b:cc:ea:95:
e7:34:e0:80:55:a4:69:51:c1:97:53:13:1a:60:e6:28:b7:d2:
3a:51:cd:a8:98:76:86:00:a8:78:80:37:46:93:f0:59:38:56:
d3:28:a4:b4:37:85:e3:29:e3:8d:f6:40:36:ad:07:00:58:fe:
99:bd:21:1a:b8:41:c6:36:f6:cf:c3:0f:57:1c:d0:e2:cb:c2:
3b:3f:56:da:01:aa:05:56:59:a7:69:2f:12:fc:e2:02:73:18:
d9:33:b7:e2:db:d7:b0:4d:5c:ab:cc:f0:db:75:5d:44:64:70:
9c:5d:c4:e5:cd:26:9a:76:af:a8:6d:7f:2e:2a:21:9c:0b:94:
15:e1:90:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:59 2023 by rpki-client on console-ams.rpki-client.org