Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/FbgCYVtfk3OyZi8KBJZiFBHzIzQ.roa
File: FbgCYVtfk3OyZi8KBJZiFBHzIzQ.roa (raw, json)
Hash identifier: C1965hh2OtcW9LBPmIS1C88nVAp0Ee2JcRSMaGSPuAo=
Subject key identifier: 15:B8:02:61:5B:5F:93:73:B2:66:2F:0A:04:96:62:14:11:F3:23:34
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 01856FCBBBF1209717F2E9A88E46330FD3B3
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/FbgCYVtfk3OyZi8KBJZiFBHzIzQ.roa
Signing time: Mon 02 Jan 2023 00:05:00 +0000
ROA not before: Mon 02 Jan 2023 00:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 45.89.28.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:bb:f1:20:97:17:f2:e9:a8:8e:46:33:0f:d3:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Jan 2 00:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15b802615b5f9373b2662f0a0496621411f32334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a9:8f:05:00:01:ae:c1:21:2a:71:59:86:98:
f6:7b:27:7d:89:14:6c:59:28:f0:9a:fc:49:56:b1:
1c:5a:7a:12:c8:f2:18:89:fe:a2:84:f9:a6:71:f7:
d2:e5:03:19:19:6e:df:f8:45:fa:4b:af:f5:c4:e1:
7d:94:e6:02:a4:e7:f4:f5:f9:4d:f3:de:92:df:56:
fe:28:47:84:69:0f:8c:f1:52:f9:92:77:cb:c0:81:
cb:cc:03:24:df:6b:fc:43:d2:7b:84:58:9e:f2:3f:
2b:19:0c:88:d5:3c:df:41:97:b5:3c:88:0b:6b:0c:
ec:80:42:0a:d8:73:e2:6d:3d:97:1a:36:eb:64:89:
8f:b9:17:66:f6:b9:2f:6d:8f:9b:64:af:cb:07:45:
22:29:28:8c:83:be:97:f5:e7:77:12:2d:f7:46:96:
f8:46:90:3b:ff:93:04:c6:bf:dd:69:0f:ad:59:04:
60:09:d6:f1:38:47:c9:9c:bb:55:a5:5f:54:e5:86:
8e:86:22:57:cb:28:72:c0:76:42:8c:2c:03:ae:5f:
81:c2:bf:e3:e1:d7:9c:db:90:1e:84:3a:22:41:06:
1e:5c:38:c6:fd:04:a5:58:14:2d:6a:10:2d:63:6d:
37:5e:66:29:4a:2d:50:72:ed:16:ee:d2:85:5a:b2:
e6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B8:02:61:5B:5F:93:73:B2:66:2F:0A:04:96:62:14:11:F3:23:34
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/FbgCYVtfk3OyZi8KBJZiFBHzIzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.28.0/22
Signature Algorithm: sha256WithRSAEncryption
48:97:52:00:c1:d3:13:16:ed:ec:ab:a2:91:b5:49:88:9a:9f:
39:c3:c5:0e:31:a0:b2:a8:6d:21:a3:37:8d:3e:0d:ba:1b:7d:
95:b1:c4:0a:ea:c4:82:53:d3:3f:2d:da:e5:d7:de:d5:91:fe:
b5:29:9a:5c:b4:85:a0:f9:0f:f4:27:e7:b7:51:3c:34:eb:f7:
a4:7d:0e:cc:a6:5a:af:7c:7c:d1:fb:ba:88:9c:35:95:6b:94:
5f:41:b4:b1:41:6d:91:b3:6c:d6:03:0a:67:47:c5:b4:7f:f3:
3d:27:c6:62:52:ef:13:18:c1:8d:b2:98:9d:3d:63:2a:9a:4e:
8e:04:fc:ec:40:ce:35:51:3a:17:1b:e1:45:5b:5a:ed:4b:4b:
25:82:20:4d:19:d3:2e:06:24:68:1b:b7:ad:f3:c1:4b:db:d4:
d3:9d:97:e6:11:c9:f6:a5:0a:f2:53:60:96:9b:68:4a:98:49:
5d:2f:a9:02:ae:a6:4f:26:23:da:df:6d:ad:cc:f5:7d:ce:30:
b0:3b:48:6a:62:c3:e5:ac:af:04:0c:d5:b9:9c:80:9f:1d:6d:
e9:4b:53:9c:24:21:2a:df:f9:3a:c0:88:9c:37:14:8f:6c:9e:
2c:eb:3a:07:ea:ea:39:f9:3e:a8:03:e2:13:04:37:e4:2a:4e:
de:5b:2c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:07 2023 by rpki-client on console-ams.rpki-client.org