Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Tt9VEkSw8el34aeQuHztAseY3lA.roa
File: Tt9VEkSw8el34aeQuHztAseY3lA.roa (raw, json)
Hash identifier: sIbqSoyRHez/vS0lUHdIXdcPWTWPO9tYm8WJraV/krc=
Subject key identifier: 4E:DF:55:12:44:B0:F1:E9:77:E1:A7:90:B8:7C:ED:02:C7:98:DE:50
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 018B27EF4B83F1C9EED5B1B28B6D64514A37
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Tt9VEkSw8el34aeQuHztAseY3lA.roa
Signing time: Fri 13 Oct 2023 07:27:55 +0000
ROA not before: Fri 13 Oct 2023 07:27:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.89.31.0/24 maxlen: 24
45.89.28.0/24 maxlen: 24
45.89.29.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:27:ef:4b:83:f1:c9:ee:d5:b1:b2:8b:6d:64:51:4a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Oct 13 07:27:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4edf551244b0f1e977e1a790b87ced02c798de50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8d:41:ba:14:47:df:b0:39:5d:f3:86:86:63:
2d:e2:e0:2c:4e:7a:dc:7d:8b:ef:61:7b:b4:83:f9:
56:b7:bd:04:dc:9a:28:c8:9a:92:80:0d:08:ac:3e:
55:62:c7:bc:67:e2:03:02:10:29:d0:5e:3a:d9:e7:
18:83:27:b8:de:ee:0c:9e:2e:0d:0b:1d:9c:d4:9a:
23:c1:70:55:0d:e3:75:c4:4e:60:57:63:16:ad:25:
46:39:61:fc:1c:bd:98:3c:3c:16:ca:bf:9a:f7:22:
cf:40:f4:cf:37:9c:16:30:3e:0e:48:d7:de:56:fe:
fa:22:1a:f7:f0:ef:ed:d2:e6:1c:03:11:6c:7c:d9:
70:2e:8d:94:a8:df:d8:23:f2:23:9d:94:5e:9f:7a:
d1:fa:ec:4d:cf:bf:e8:b3:93:67:11:5f:58:b8:d6:
d6:8d:e7:fa:b8:40:df:d0:6a:70:a2:ec:32:7a:1d:
21:8f:87:a5:c0:02:e0:ab:e7:30:48:00:2a:12:a9:
87:78:73:ac:25:f3:17:9c:c8:ad:62:a8:9f:55:c8:
db:c6:0c:7a:56:a8:d7:fa:34:47:5f:3e:7b:f7:43:
5e:8a:03:d7:c5:83:52:8c:66:cc:ca:bc:7c:4d:4c:
fa:27:5a:e7:a6:2d:58:11:11:5b:15:ae:34:ed:f3:
52:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DF:55:12:44:B0:F1:E9:77:E1:A7:90:B8:7C:ED:02:C7:98:DE:50
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Tt9VEkSw8el34aeQuHztAseY3lA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.28.0/23
45.89.31.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:b6:bf:e4:b0:49:c3:02:6b:d1:e8:f9:90:89:94:eb:ed:3f:
25:a4:39:22:65:ce:48:1a:49:27:a6:24:5e:b2:bd:2a:69:71:
9d:d4:2d:3b:64:5e:60:c9:99:8d:09:ca:99:03:ad:f3:cd:9d:
4b:b2:c5:ab:7d:0c:c1:a1:2c:f7:e3:8f:33:d9:ec:c3:9c:e4:
61:66:67:8a:46:69:16:65:74:d6:e4:be:31:b9:7c:c1:ac:a4:
67:83:6c:88:54:92:38:9b:4a:ee:43:55:e4:73:4e:3b:20:26:
18:b4:9c:48:cd:32:65:17:83:f3:35:a8:42:b4:12:8a:82:c1:
fd:54:dd:30:ff:0d:b2:50:b0:9d:29:b0:36:e6:f3:cd:61:d3:
95:0f:89:33:f2:fc:04:8d:f5:0b:d2:63:6e:87:56:f1:98:bc:
f5:0a:51:7e:bd:88:5f:51:1e:ef:36:06:36:4d:d3:03:ce:60:
1e:e9:72:f6:4e:68:ed:0b:ea:9a:97:ff:27:58:01:c2:e4:75:
a8:6a:1d:0c:60:66:3d:59:94:03:79:d3:bb:2a:c2:e8:37:71:
f6:a1:de:e9:5f:c2:2c:98:11:e2:ef:2b:65:70:4c:69:3d:0d:
2f:a9:a7:3f:f8:71:d0:08:37:ae:c6:13:6f:7f:88:be:56:b9:
52:5f:a4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 17 08:00:53 2023 by rpki-client on console-ams.rpki-client.org