Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/sJe159b063Kz1vyIbhlnCw3Jlz8.roa
File: sJe159b063Kz1vyIbhlnCw3Jlz8.roa (raw, json)
Hash identifier: fhaeVed0kRcs59Yezn3jkeJbEEvmv6m9JY9hr43SVkE=
Subject key identifier: B0:97:B5:E7:D6:F4:EB:72:B3:D6:FC:88:6E:19:67:0B:0D:C9:97:3F
Certificate issuer: /CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Certificate serial: 018CB0587C5C7C9DF96A7B526210A69D740D
Authority key identifier: 09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/sJe159b063Kz1vyIbhlnCw3Jlz8.roa
Signing time: Thu 28 Dec 2023 12:13:58 +0000
ROA not before: Thu 28 Dec 2023 12:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208663
IP address blocks: 45.91.0.0/22 maxlen: 22
45.91.3.0/24 maxlen: 24
2a0e:840::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b0:58:7c:5c:7c:9d:f9:6a:7b:52:62:10:a6:9d:74:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Validity
Not Before: Dec 28 12:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b097b5e7d6f4eb72b3d6fc886e19670b0dc9973f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:89:d2:31:71:12:52:19:5b:37:6f:55:df:4a:
d5:3a:e0:e9:d7:2d:30:19:b9:0e:bd:82:2f:53:c7:
21:b4:0e:99:b8:a7:f8:4a:8c:84:bf:90:57:18:19:
6f:26:19:2d:36:1e:41:f1:d4:08:61:c5:1d:ad:de:
e8:69:21:71:bc:a6:cf:28:a2:fb:4c:45:eb:7f:6d:
5b:a1:af:17:39:58:14:59:e7:9d:d4:8e:96:6c:fc:
79:86:ea:49:67:70:75:8c:91:df:bf:c6:70:25:9f:
d6:ad:2f:fc:de:42:0d:a1:e5:08:6e:50:87:6a:17:
2e:02:c5:1e:7f:6f:82:4f:3f:5b:08:d7:22:4d:7a:
f4:75:7c:fa:e9:d3:a8:95:9d:a2:61:ec:8d:12:a4:
2e:d7:5f:df:cb:7f:08:4d:39:f6:3a:94:c3:8e:25:
00:9f:5a:db:ef:4e:cb:9e:a8:19:ca:35:86:41:2c:
70:d1:bd:a0:42:01:c3:19:59:5c:d2:a3:08:1b:68:
1b:34:35:c6:a1:4f:8b:1f:11:83:c9:58:74:0d:76:
4b:0e:50:4e:e0:21:57:fd:24:47:89:bb:60:c2:38:
d8:d3:0f:07:65:fc:2d:b7:e8:b9:55:04:71:7f:0f:
f1:22:e9:79:2d:22:e8:d1:53:45:c9:28:6c:e9:2b:
af:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:97:B5:E7:D6:F4:EB:72:B3:D6:FC:88:6E:19:67:0B:0D:C9:97:3F
X509v3 Authority Key Identifier:
keyid:09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/sJe159b063Kz1vyIbhlnCw3Jlz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.0.0/22
IPv6:
2a0e:840::/29
Signature Algorithm: sha256WithRSAEncryption
9f:c6:73:ea:bc:a9:11:03:04:2d:d5:ed:19:00:62:55:58:f8:
2f:18:92:2f:a6:d8:5d:df:09:fd:33:05:b4:8a:32:af:26:b1:
50:42:ce:da:a4:38:e2:e4:fd:45:34:ac:8a:dd:e2:f5:e1:57:
f6:87:86:eb:83:c2:36:11:af:3c:48:39:fe:57:e8:a3:0e:f2:
c8:6e:e8:15:51:07:df:e4:8d:a0:19:84:a5:b2:25:e0:18:40:
bb:9e:29:91:95:a3:99:ae:77:8f:35:30:37:2b:e6:71:bb:5f:
65:d1:fd:74:e9:2d:9c:5e:f2:b7:9d:4a:af:a5:1c:b3:cb:fd:
9f:6b:06:84:49:5f:a8:1c:9f:b1:37:76:e2:be:6b:b2:dd:32:
2f:5f:d9:98:09:9c:0e:3a:b6:d3:14:40:91:48:e4:08:d4:4d:
ec:89:55:4a:b6:33:29:fa:25:20:4f:1d:12:57:c7:12:1d:e1:
29:3b:db:c7:a2:08:60:92:01:37:ff:ff:2c:f4:9a:b2:a8:d1:
10:c2:92:c4:d4:cb:85:f8:b8:c7:8a:5e:4a:bb:3a:2e:1e:c1:
eb:fb:64:17:9e:38:85:c5:84:95:db:22:bc:ac:a4:3a:00:99:
e1:2d:fd:38:fb:d2:ea:66:3f:3b:de:11:1d:2b:76:7a:93:21:
75:c2:ab:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:01 2024 by rpki-client on console-ams.rpki-client.org