Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/7CSjmmWPqe-jOpC5YkdhntfHrjA.roa
File: 7CSjmmWPqe-jOpC5YkdhntfHrjA.roa (raw, json)
Hash identifier: F/AawuIQEeDyB+UPOBZdkT8Fl1ET2V1P6E1neUJbmuM=
Subject key identifier: EC:24:A3:9A:65:8F:A9:EF:A3:3A:90:B9:62:47:61:9E:D7:C7:AE:30
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 01892761399D47FB19398252675E59622C69
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/7CSjmmWPqe-jOpC5YkdhntfHrjA.roa
Signing time: Wed 05 Jul 2023 18:47:10 +0000
ROA not before: Wed 05 Jul 2023 18:47:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397563
IP address blocks: 45.89.29.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:27:61:39:9d:47:fb:19:39:82:52:67:5e:59:62:2c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Jul 5 18:47:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec24a39a658fa9efa33a90b96247619ed7c7ae30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:95:01:0a:2c:bf:3f:4e:dd:af:f2:93:5f:6b:
81:bd:dd:ec:48:12:7b:0a:45:43:df:d9:8c:d4:0a:
d7:a1:7e:dd:19:49:3b:c4:43:dc:30:62:5e:98:d8:
2f:ce:9d:d6:bd:c9:4c:6b:3a:d6:5a:03:2c:59:ec:
f4:8a:b3:10:1e:d6:3e:91:08:8c:dd:59:68:28:d5:
8f:54:6e:68:82:53:d8:23:55:42:84:8f:f3:8b:27:
ed:7c:42:54:56:3e:ad:0b:4d:14:31:71:ef:e6:77:
35:bf:65:ae:7c:5a:f3:a3:5d:2b:3c:86:a8:3c:9b:
74:53:7c:90:ef:34:d6:50:1f:b4:57:26:7f:15:8d:
af:9d:db:a1:2b:d6:8c:ab:57:f5:e3:7b:77:82:dc:
42:f5:33:41:d6:c2:89:a6:1c:71:e7:62:aa:44:bf:
e4:c1:11:51:24:31:c9:e8:80:8f:f3:6e:c6:91:e8:
ff:ec:fc:fc:6d:cb:05:02:e8:92:25:14:09:44:be:
f3:aa:a5:6b:f9:8f:4a:0f:85:4b:ff:af:24:03:78:
cb:98:c6:7d:dd:21:58:9c:8c:71:c6:f8:85:2a:45:
f2:f7:d4:84:d8:70:82:39:64:cd:76:8e:c4:ed:4a:
d1:f4:7d:cc:d2:6a:c1:b8:32:3a:ad:b9:2f:dc:7c:
e7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:24:A3:9A:65:8F:A9:EF:A3:3A:90:B9:62:47:61:9E:D7:C7:AE:30
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/7CSjmmWPqe-jOpC5YkdhntfHrjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.29.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:ab:7c:ec:6c:11:83:f2:01:5b:c8:80:1c:b0:1c:7b:51:17:
b9:7b:8e:69:fc:96:47:70:d7:7d:35:e5:fb:e3:9b:e1:86:ae:
e3:bc:ef:9b:f5:33:f2:75:4c:93:22:f9:aa:fe:d7:09:bb:0f:
ae:ce:ff:3a:56:9e:44:0b:5b:2b:e0:e5:9e:94:fd:75:cb:fc:
2f:85:50:18:f2:8c:9e:e5:0c:1f:16:6c:3e:df:9b:c6:c1:f4:
75:9a:c3:7a:ec:75:7e:70:cf:e3:24:be:fa:97:50:43:33:03:
37:ad:4d:2b:b2:05:99:a9:0e:72:57:a4:b5:66:96:4b:24:d5:
6e:ba:ce:e3:c9:0b:e4:e3:b9:9c:07:4c:ad:95:1e:bf:05:1c:
b5:75:b5:5e:0e:f9:ca:22:d3:2b:10:8d:a4:a8:cc:cc:43:e8:
b7:de:be:ed:de:16:5f:6c:7e:1f:cd:1b:85:e0:36:ea:19:e7:
26:a6:33:2b:de:63:72:63:04:c0:5d:ab:ec:c4:67:35:f5:8e:
63:55:06:c9:d4:74:d9:dd:dd:68:33:68:2f:f6:50:ac:93:4f:
88:8b:3e:cc:4b:00:47:f8:f8:3e:19:6a:14:12:77:5e:94:fc:
3c:4f:5a:00:ff:37:76:fe:7c:71:93:ae:8e:41:c4:fc:12:ea:
75:0e:e5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 6 14:47:41 2023 by rpki-client on console-fra.rpki-client.org