Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/sWDx4mzdyuLCLdltFzjpCZeCOaQ.roa
File: sWDx4mzdyuLCLdltFzjpCZeCOaQ.roa (raw, json)
Hash identifier: fKBSma875WnLsNwJP6DjpCN2wE/W/uE2EGHmYuoPo0s=
Subject key identifier: B1:60:F1:E2:6C:DD:CA:E2:C2:2D:D9:6D:17:38:E9:09:97:82:39:A4
Certificate issuer: /CN=17526ccac4f9064e058549b30172c84439787fbc
Certificate serial: 01856E81F30E77FCF058A90E9241EACA9E44
Authority key identifier: 17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/sWDx4mzdyuLCLdltFzjpCZeCOaQ.roa
Signing time: Sun 01 Jan 2023 18:04:48 +0000
ROA not before: Sun 01 Jan 2023 18:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 10010
IP address blocks: 45.90.85.0/24 maxlen: 24
45.90.86.0/24 maxlen: 24
45.90.87.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:81:f3:0e:77:fc:f0:58:a9:0e:92:41:ea:ca:9e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17526ccac4f9064e058549b30172c84439787fbc
Validity
Not Before: Jan 1 18:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b160f1e26cddcae2c22dd96d1738e909978239a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1d:81:cc:aa:98:3a:c0:b2:88:4d:61:35:bc:
1b:29:85:5b:76:af:94:e6:bc:76:bb:24:cd:5a:c6:
4a:22:b2:26:a6:02:5a:89:08:9a:46:69:49:6a:e2:
f6:f0:9a:59:92:99:b8:9d:b9:ee:4e:c4:a6:21:6f:
c7:e0:38:82:47:13:de:33:f8:d6:37:2f:9d:1e:94:
7b:e1:95:b9:39:51:32:27:c6:66:e5:78:af:e5:00:
c2:ec:b4:4f:85:ab:45:ec:f3:ac:09:3f:3e:00:fb:
71:3d:41:37:14:e0:69:16:19:82:10:ef:ed:e8:35:
27:76:89:7b:4a:b6:90:ba:74:8c:3f:6d:12:a0:5d:
2f:ca:28:a8:a4:bc:f5:ff:10:b9:8b:61:f1:0d:65:
10:f2:e8:03:fd:87:1f:95:76:c2:12:2a:46:b8:40:
ac:9e:f5:a0:c7:63:0e:74:e4:74:be:61:e8:89:b7:
43:11:95:50:68:28:cd:9e:35:84:57:7b:c4:5a:c4:
92:0a:25:4d:6f:f4:1b:1a:78:5f:49:04:3d:cc:04:
3d:19:a5:7a:a0:d7:f0:f8:2d:8d:1c:e2:e9:ed:ae:
3d:ae:c9:e5:fa:84:fd:64:b1:25:fd:e3:5b:cd:04:
44:16:7b:9e:c5:ac:33:4b:20:f2:bf:17:b2:4b:44:
8b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:60:F1:E2:6C:DD:CA:E2:C2:2D:D9:6D:17:38:E9:09:97:82:39:A4
X509v3 Authority Key Identifier:
keyid:17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/sWDx4mzdyuLCLdltFzjpCZeCOaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.85.0-45.90.87.255
Signature Algorithm: sha256WithRSAEncryption
bd:b8:8e:99:d3:16:3d:1a:21:a0:ad:89:98:cb:cd:a3:98:66:
b3:a1:10:ab:f2:ee:d7:81:21:f7:3a:19:25:bb:4a:07:cd:25:
8e:a0:47:cf:6b:9a:dc:ca:4b:2a:24:3f:8b:e2:59:73:c2:e5:
f9:ba:84:f3:06:4a:6c:d9:e3:82:01:dc:0e:a4:b0:3f:19:c8:
c3:06:24:20:42:37:76:5c:82:28:af:be:97:5c:31:37:c3:2c:
d1:bd:29:06:75:2c:8f:af:d5:a4:ad:89:d0:28:a1:18:c0:31:
68:51:32:90:91:01:4d:24:c3:cb:0e:8f:ae:66:23:8a:c6:85:
76:c0:16:09:81:43:f9:4e:a9:01:ad:9e:78:25:f2:66:31:43:
41:c1:2b:52:37:58:37:2c:d1:e1:c6:84:52:57:66:a2:87:0f:
9b:5a:3c:cf:a9:c1:85:57:36:0a:01:a4:5a:af:87:dd:8f:bc:
e7:19:50:14:ce:d1:d6:f0:c5:0d:7d:0d:83:d2:28:e1:4b:cd:
77:c5:84:09:bd:f9:9b:cf:4c:6f:36:a6:5b:43:03:0f:b1:6f:
79:45:35:88:ac:6d:1a:69:2e:f4:c6:52:56:13:65:bd:91:1c:
dd:57:04:b7:26:99:49:54:ae:d0:32:4a:74:35:5b:2f:4b:f3:
20:e2:28:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:30 2024 by rpki-client on console-fra.rpki-client.org