Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/1-qoiYjtDsUtaziUksypGKEr4MMY.roa
File: 1-qoiYjtDsUtaziUksypGKEr4MMY.roa (raw, json)
Hash identifier: 40S7irXjubLrx43iahjD+AIGeO8M4MWCn6wTs/mDrtI=
Subject key identifier: FA:AA:22:62:3B:43:B1:4B:5A:CE:25:24:B3:2A:46:28:4A:F8:30:C6
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 01856FCBBAD012991A28A4558E30095CA3AD
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/1-qoiYjtDsUtaziUksypGKEr4MMY.roa
Signing time: Mon 02 Jan 2023 00:05:00 +0000
ROA not before: Mon 02 Jan 2023 00:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 45.89.28.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Jun 2023 18:29:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:ba:d0:12:99:1a:28:a4:55:8e:30:09:5c:a3:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Jan 2 00:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=faaa22623b43b14b5ace2524b32a46284af830c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:26:ab:59:b1:46:2d:cc:64:46:47:87:2b:7e:
a5:bd:6f:ce:79:5b:96:0f:69:86:31:64:70:e7:06:
dd:98:35:24:2a:23:b6:6b:20:46:f9:d7:a1:7c:9e:
5f:55:fc:30:04:27:45:7b:5e:95:03:52:7a:42:a5:
7a:2f:f2:74:b3:fa:44:6f:2d:de:93:3f:32:c6:a7:
1e:94:f3:5f:0b:54:b5:49:32:b1:70:b2:cf:58:45:
5a:28:da:28:34:e2:84:6b:77:c7:d2:ea:e3:94:6e:
28:07:c7:e9:20:36:7b:f9:8a:55:68:17:b1:2c:25:
30:da:c4:bd:f4:38:ea:0c:39:3a:11:30:92:94:a8:
5f:8f:22:ae:47:70:b5:fd:34:98:7b:8d:21:01:2e:
fa:4a:24:80:70:9b:35:d0:7d:bd:e2:ec:5d:84:1a:
70:82:76:ac:eb:64:86:fb:22:19:a5:d4:7d:dc:6d:
83:98:90:82:d4:f5:2d:c5:d8:65:0d:af:0b:4d:d7:
fb:0e:85:c6:64:68:a6:f6:9b:77:46:89:83:0a:18:
28:2d:3f:2a:2b:b3:12:0a:e6:ac:4e:28:d6:17:19:
5e:e9:f7:d7:68:cd:99:c0:08:fa:0d:09:e2:5b:a6:
70:29:d4:3b:a2:7b:a4:3b:e9:27:03:45:de:f8:9e:
16:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AA:22:62:3B:43:B1:4B:5A:CE:25:24:B3:2A:46:28:4A:F8:30:C6
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/1-qoiYjtDsUtaziUksypGKEr4MMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.28.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:17:7a:fc:05:3e:a5:1b:92:b2:8b:b9:c6:de:f2:1f:db:98:
f5:59:f0:b7:29:a1:e2:e2:ab:e3:d6:30:3a:a2:29:c1:f6:e8:
2a:2c:0d:4e:86:ab:30:92:84:17:41:7a:46:0a:12:b3:00:12:
5c:96:e9:6f:7a:1c:c7:b5:36:02:93:ae:a4:1f:ab:b0:cd:af:
c4:32:fb:0b:7c:97:a0:c1:b3:f5:d8:08:a0:35:6d:e8:15:0f:
7b:ef:bc:3c:97:5e:67:21:dc:5b:e9:14:15:bf:61:1c:0c:eb:
ef:9a:da:a5:43:2c:6b:81:c1:c8:44:44:f4:0c:1f:df:56:71:
06:43:81:a0:68:ab:1d:d9:48:8e:d0:fb:96:85:9d:fc:36:90:
b4:5a:30:42:ac:ff:1e:d8:f6:fa:d6:ed:bc:62:9e:58:aa:cb:
16:7c:a8:e8:b8:4b:eb:4f:b4:e9:fe:ad:a2:3e:d8:a8:78:4d:
77:18:0b:2f:80:dd:34:6c:53:1b:d7:7a:9a:f1:6d:82:7d:d7:
77:41:d8:e7:fa:0c:df:68:0c:b5:fc:6d:22:66:34:a9:ba:b8:
72:50:02:3a:c3:38:ae:9f:41:4b:09:3f:8d:b5:1d:79:c4:03:
c4:bb:71:41:61:dd:41:2a:e1:33:71:74:f8:0b:5a:c8:d0:a6:
9b:0b:a1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:11 2024 by rpki-client on console-ams.rpki-client.org