Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/0a3a0f-60f8-4a1c-bba0-7b880c063367/1/l6Ot-5p3y-B3YtEIVPUSvib3k6A.roa
File: l6Ot-5p3y-B3YtEIVPUSvib3k6A.roa (raw, json)
Hash identifier: oIuqGlmlzb4DxekzBZ5oekqX16ftH7bKiqMdHIzFYRs=
Subject key identifier: 97:A3:AD:FB:9A:77:CB:E0:77:62:D1:08:54:F5:12:BE:26:F7:93:A0
Certificate issuer: /CN=3406d2c439ccbcb78a82d5cb2b4c3ff6e9934b96
Certificate serial: 01856C0A29AB5BB90E9C342A1442AF661FB7
Authority key identifier: 34:06:D2:C4:39:CC:BC:B7:8A:82:D5:CB:2B:4C:3F:F6:E9:93:4B:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAbSxDnMvLeKgtXLK0w_9umTS5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/0a3a0f-60f8-4a1c-bba0-7b880c063367/1/l6Ot-5p3y-B3YtEIVPUSvib3k6A.roa
Signing time: Sun 01 Jan 2023 06:34:43 +0000
ROA not before: Sun 01 Jan 2023 06:34:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 45.87.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:0a:29:ab:5b:b9:0e:9c:34:2a:14:42:af:66:1f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3406d2c439ccbcb78a82d5cb2b4c3ff6e9934b96
Validity
Not Before: Jan 1 06:34:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97a3adfb9a77cbe07762d10854f512be26f793a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1d:2a:9d:d1:81:bb:4e:b8:d7:d6:36:49:08:
c4:1b:f6:b5:84:fc:cb:dc:45:07:d7:0d:7a:42:37:
4b:77:53:7d:cb:d3:b0:4e:e5:a3:f2:97:37:f9:6c:
17:a1:52:66:bc:38:0c:e7:60:7a:85:3a:d5:d8:24:
da:a3:f3:3f:d6:b7:cc:71:d4:09:5e:fd:bd:6c:53:
4a:c3:ad:8d:19:50:b7:3c:ba:27:86:86:75:2e:de:
0d:b6:b4:ad:63:53:c2:b7:7a:6e:d3:a1:eb:78:0e:
1c:2c:41:b5:b4:97:82:28:3b:f0:72:bd:27:dd:9d:
78:fc:39:38:34:b4:cf:6f:9a:62:eb:c2:d4:69:19:
14:4e:28:4b:28:e3:4a:3a:44:cf:87:cb:12:b6:2e:
e7:4a:56:6c:97:3b:07:c4:65:09:2b:55:c9:0f:be:
06:45:7c:4d:ba:04:6f:49:8d:a5:4c:41:8f:45:6a:
d2:80:c2:47:8a:be:7a:3e:df:7a:d0:f6:16:7e:a2:
5f:fd:6c:3c:8c:1c:16:9e:33:b2:5e:96:43:c5:f8:
69:c5:2a:f5:f0:97:f2:e7:a1:57:40:eb:e2:69:03:
fe:06:59:10:61:66:d0:7f:ee:74:d0:2f:97:8e:a5:
d5:be:8d:ab:ff:63:ca:74:6a:4f:3e:72:64:12:7e:
53:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A3:AD:FB:9A:77:CB:E0:77:62:D1:08:54:F5:12:BE:26:F7:93:A0
X509v3 Authority Key Identifier:
keyid:34:06:D2:C4:39:CC:BC:B7:8A:82:D5:CB:2B:4C:3F:F6:E9:93:4B:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAbSxDnMvLeKgtXLK0w_9umTS5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/0a3a0f-60f8-4a1c-bba0-7b880c063367/1/l6Ot-5p3y-B3YtEIVPUSvib3k6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/0a3a0f-60f8-4a1c-bba0-7b880c063367/1/NAbSxDnMvLeKgtXLK0w_9umTS5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.61.0/24
Signature Algorithm: sha256WithRSAEncryption
84:6d:72:d3:0d:c6:8d:77:77:be:be:fb:de:9c:e5:13:c6:75:
a5:cc:eb:3b:46:d3:ec:37:8c:d5:af:6b:a4:ea:ce:3d:1d:27:
9b:95:c2:d8:4b:f4:3f:79:8b:07:df:4e:97:67:01:ff:f4:13:
3b:a3:28:ae:f1:c4:7d:8f:23:3e:ea:5e:c8:71:ae:c3:0b:30:
6f:d2:02:d0:32:a1:09:1d:85:3e:72:c7:1a:53:5b:bf:60:f5:
fb:d4:e6:e4:f6:f3:0e:18:63:08:00:36:f9:a1:8f:7c:8f:b5:
a9:ec:37:a7:84:c5:f8:1f:5a:a1:dc:2b:03:b9:86:a7:0f:37:
0f:59:cd:fe:09:03:a1:50:d8:68:6d:fb:7b:30:92:95:97:56:
8b:d0:f4:f4:30:f5:9c:b0:b1:55:0b:64:0e:9f:89:f7:94:4d:
c7:20:56:72:cc:2b:25:25:01:d8:f3:17:83:c2:da:d9:38:17:
47:31:22:68:6b:9d:5c:81:78:6b:b4:fe:5b:fc:96:4b:a0:d1:
52:00:21:2a:02:ac:8d:f6:3c:8c:c8:55:38:b8:bb:4b:3b:a8:
74:c2:f2:e8:44:a2:2c:63:3c:53:77:4a:8f:28:53:32:ad:9a:
82:64:2f:7b:3e:94:5b:6d:78:24:66:97:64:a9:cc:15:5f:fd:
99:10:a6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:33 2024 by rpki-client on console-ams.rpki-client.org