Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/V2h17zBDVFbYfPCBc7dOLp-sweE.roa
File: V2h17zBDVFbYfPCBc7dOLp-sweE.roa (raw, json)
Hash identifier: ooY/nz+Nk6z2+FTS4BO7F+hznGYM5Rk6BOCyV5Uymmw=
Subject key identifier: 57:68:75:EF:30:43:54:56:D8:7C:F0:81:73:B7:4E:2E:9F:AC:C1:E1
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 0189B31E05FF8D75EED240E2A12EAF510C83
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/V2h17zBDVFbYfPCBc7dOLp-sweE.roa
Signing time: Tue 01 Aug 2023 22:00:36 +0000
ROA not before: Tue 01 Aug 2023 22:00:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.89.28.0/24 maxlen: 24
193.160.102.0/24 maxlen: 24
193.160.130.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b3:1e:05:ff:8d:75:ee:d2:40:e2:a1:2e:af:51:0c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Aug 1 22:00:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=576875ef30435456d87cf08173b74e2e9facc1e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7b:aa:57:0e:76:28:65:9e:56:cd:a9:b2:06:
ff:60:7a:08:95:ef:6c:07:80:e0:95:ba:0a:dd:fa:
09:ae:66:d4:fb:3d:42:9e:8f:1e:88:7d:6f:ad:fc:
ef:4c:6f:d0:39:e6:c3:14:be:0b:ea:f5:e3:98:b5:
1f:4b:dd:1e:83:57:e8:35:cc:85:3b:80:45:9d:3e:
f4:d7:f3:fb:3e:e4:28:e5:69:d3:57:86:6b:f1:c1:
96:cc:91:5a:c1:94:31:a0:f2:12:69:fa:66:ca:d2:
5a:e3:c0:60:d7:fb:b2:f2:a2:4f:13:f4:bd:ea:54:
dc:14:b1:88:50:85:57:91:87:36:82:c5:91:13:08:
26:5f:7c:dd:46:01:8a:90:c5:fb:9d:cf:95:c5:6f:
36:b4:38:c4:52:bf:86:7d:9d:19:b6:d1:bb:7b:92:
8c:e7:00:ae:02:cc:5c:2b:2b:3e:a1:a3:ac:46:30:
1c:a0:ee:89:1e:fa:b0:22:fc:54:db:08:20:30:4d:
b2:78:c3:f3:8b:4e:13:dd:59:4c:ad:da:43:1b:f2:
09:38:0e:35:1c:8a:d3:db:7a:3a:12:8c:dc:29:3e:
e3:d4:81:5f:b2:0a:3f:2e:ab:b0:f1:99:da:45:96:
e2:0e:c5:4b:69:38:41:32:e8:80:f1:23:58:7d:6d:
5a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:68:75:EF:30:43:54:56:D8:7C:F0:81:73:B7:4E:2E:9F:AC:C1:E1
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/V2h17zBDVFbYfPCBc7dOLp-sweE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.28.0/24
193.160.102.0/24
193.160.130.0/24
Signature Algorithm: sha256WithRSAEncryption
99:d3:77:f2:59:d4:d1:72:1d:b7:f3:00:ec:3e:f5:bc:ec:ff:
f6:d7:c8:30:f1:a9:5a:6a:71:74:72:08:5c:8a:89:b8:0f:d1:
e5:c6:59:d2:d5:ca:5f:b9:dd:a5:cb:28:98:95:29:c8:4b:bb:
a6:74:9f:bb:23:73:2b:35:57:3e:43:27:63:cb:c0:4b:b9:ab:
83:07:d3:d8:ad:5e:bc:c2:dd:6c:6b:3c:c1:30:eb:d0:88:f7:
88:fa:cf:76:62:d4:bd:8d:e5:7c:00:98:4f:e8:e0:1f:bd:19:
69:32:25:69:c2:05:9d:24:8b:1f:ec:a7:21:4b:9c:93:b7:c2:
13:ef:98:eb:0a:e7:57:47:3a:c8:61:5a:93:b5:08:f7:1f:5f:
ce:52:f5:c4:57:fe:e5:a6:4e:d7:7d:ee:c6:b5:1b:e9:c5:e3:
b0:47:ef:77:a2:3e:19:29:48:ae:f8:e7:fb:0d:2c:0d:94:23:
20:40:97:7a:11:85:b4:3c:f1:a3:18:52:3c:35:32:7e:b9:a7:
7f:94:fb:ab:f7:6b:b7:f0:72:7c:42:2e:fd:ee:46:3c:fc:3c:
c3:3e:30:f6:2b:c7:db:17:61:68:d1:a8:3b:7f:62:15:97:39:
3b:05:09:29:2b:1c:28:15:ba:5d:eb:34:b7:9d:8e:aa:38:42:
4e:1a:94:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 6 15:00:16 2023 by rpki-client on console-ams.rpki-client.org