Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/9IxfsWAtQcR7VqIcprqizOx5_Og.roa
File: 9IxfsWAtQcR7VqIcprqizOx5_Og.roa (raw, json)
Hash identifier: Y1DZNLbq5iMrE9odf6jezzQMXGg//0ZSqJE+U7wTi8g=
Subject key identifier: F4:8C:5F:B1:60:2D:41:C4:7B:56:A2:1C:A6:BA:A2:CC:EC:79:FC:E8
Certificate issuer: /CN=21f10e34421baff174d60678f32fa5e35cdf957e
Certificate serial: 01856F7956A7C0D7DD0A9BB4680E111F8BA8
Authority key identifier: 21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/9IxfsWAtQcR7VqIcprqizOx5_Og.roa
Signing time: Sun 01 Jan 2023 22:35:01 +0000
ROA not before: Sun 01 Jan 2023 22:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208594
IP address blocks: 45.94.151.0/24 maxlen: 24
45.94.148.0/22 maxlen: 24
45.94.148.0/24 maxlen: 24
45.94.149.0/24 maxlen: 24
45.94.150.0/24 maxlen: 24
2a0e:2ec0::/29 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:56:a7:c0:d7:dd:0a:9b:b4:68:0e:11:1f:8b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21f10e34421baff174d60678f32fa5e35cdf957e
Validity
Not Before: Jan 1 22:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f48c5fb1602d41c47b56a21ca6baa2ccec79fce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:64:83:b6:43:b7:46:7e:42:01:dd:3e:2e:e5:
92:a4:91:bb:93:16:a8:ed:9b:52:5e:16:e0:eb:98:
06:4d:8a:49:66:b9:c5:6e:b0:c2:f4:8a:51:a6:49:
e2:1c:29:14:37:02:e6:6a:29:39:1b:e2:e4:d9:1c:
14:99:2d:15:e8:6d:d2:21:3d:7c:cd:bf:08:56:9c:
27:f6:d0:bd:cc:1d:96:e8:9e:7c:f0:3e:9e:24:1b:
8f:77:ff:53:d3:1d:79:91:fc:3f:ba:26:7f:a2:8b:
41:a2:6d:82:be:81:3a:03:6c:49:39:92:f0:03:6c:
f9:20:3f:9b:6d:3f:1a:50:da:3b:bd:b8:28:fb:91:
37:d3:7d:e3:e7:f0:39:a8:8c:0d:37:73:c8:48:ac:
66:4d:f2:df:8a:c0:b4:53:e9:a5:9c:b0:61:61:75:
bb:75:9a:6f:b8:c2:a4:25:a3:10:e3:0a:15:8c:63:
bb:1f:17:76:3a:82:04:5f:92:24:a9:29:b0:50:76:
f8:45:68:7f:1c:d0:49:0f:92:c9:3e:2e:26:cd:f5:
21:27:2c:69:9f:b0:01:ef:b9:e7:56:8c:97:f9:24:
b2:26:9f:0a:97:29:01:35:66:0a:e0:e2:a2:c9:47:
2b:96:6f:68:26:c2:bc:ee:98:dd:5f:44:e6:dc:1d:
ea:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8C:5F:B1:60:2D:41:C4:7B:56:A2:1C:A6:BA:A2:CC:EC:79:FC:E8
X509v3 Authority Key Identifier:
keyid:21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/9IxfsWAtQcR7VqIcprqizOx5_Og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.148.0/22
IPv6:
2a0e:2ec0::/29
Signature Algorithm: sha256WithRSAEncryption
b3:16:92:1b:85:0f:c4:4f:8f:5b:35:ad:af:46:33:32:be:c2:
84:33:5a:24:1c:48:a6:7b:48:8e:66:6b:25:8d:14:8d:c9:7d:
53:1a:85:95:ce:00:ad:00:84:36:61:9b:08:22:b3:91:9f:60:
2b:67:70:b4:8a:ac:8a:4d:d5:79:ea:5b:c1:fb:32:a7:31:cc:
8e:bf:fb:de:41:16:cd:7c:a8:9d:c9:40:07:ce:14:b1:4e:6c:
3b:06:f5:49:0f:e8:bd:8f:7e:ee:b5:c2:7f:e4:d2:07:64:bb:
7e:4d:7f:d7:61:00:b1:26:c3:fe:2d:3d:cc:9f:78:42:a7:1e:
37:3e:37:03:30:df:c3:df:8f:71:dc:22:16:f2:85:2f:3e:37:
6d:ac:12:c0:c9:6d:ef:03:fe:dc:b1:c5:ec:b1:26:4b:46:a4:
8d:54:8a:e6:46:f2:b4:fb:48:25:1b:5c:06:b6:6b:9c:b5:60:
ee:f0:92:1c:90:34:5e:ba:44:d5:4d:ac:8c:4a:85:73:d7:15:
9c:10:4a:b4:eb:09:16:4c:0b:e3:80:51:39:6d:40:06:84:e9:
b6:80:f5:c5:49:30:54:c1:22:fc:bf:04:72:fc:3f:fc:49:6c:
a4:76:94:4e:d3:cd:c2:75:23:05:7e:db:d5:a8:08:9a:b9:06:
bb:6d:80:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:25 2024 by rpki-client on console-fra.rpki-client.org