Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/q3iOOAoU2h-PTHGhGa5E39kN_Cw.roa
File: q3iOOAoU2h-PTHGhGa5E39kN_Cw.roa (raw, json)
Hash identifier: itsXrOSOYmUgbYyPOLeGvO6LaV9VTSGbshXzMmqb1tQ=
Subject key identifier: AB:78:8E:38:0A:14:DA:1F:8F:4C:71:A1:19:AE:44:DF:D9:0D:FC:2C
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 018AA8D7341D1C41FF17C8294F1B8034DAA7
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/q3iOOAoU2h-PTHGhGa5E39kN_Cw.roa
Signing time: Mon 18 Sep 2023 15:09:50 +0000
ROA not before: Mon 18 Sep 2023 15:09:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 265919
IP address blocks: 45.89.30.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a8:d7:34:1d:1c:41:ff:17:c8:29:4f:1b:80:34:da:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Sep 18 15:09:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab788e380a14da1f8f4c71a119ae44dfd90dfc2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4a:c0:73:79:29:38:df:99:8d:8a:53:df:22:
4a:4e:11:c3:7a:91:7a:68:50:b4:f3:02:92:17:4a:
99:ed:4c:26:d8:e9:3c:bd:f4:28:a8:44:93:af:2f:
a3:2a:c6:27:4d:ac:73:4c:89:da:54:23:ac:d4:39:
de:56:da:e0:02:32:b4:c1:68:6a:f2:dc:f1:a2:35:
b7:f4:57:4c:30:7b:72:41:40:80:2d:df:9e:58:6c:
77:2f:8b:19:70:f6:90:42:fc:66:18:70:16:f0:de:
d6:8a:f6:fd:55:9a:1f:00:ea:aa:17:73:1d:d3:2f:
50:f9:d7:cd:9b:2e:70:ac:e5:0b:47:c2:24:76:2a:
bd:95:77:c5:7a:9b:51:2d:8c:58:bb:2e:30:e3:98:
f8:e2:90:fa:1f:4d:dd:ef:50:2d:c3:37:ea:8a:a0:
ee:2d:ac:d4:5d:8f:6c:ba:59:bf:17:98:35:d7:51:
f2:03:a2:62:c2:2f:41:f8:45:a4:29:0b:f6:30:fd:
7e:78:08:95:97:09:53:ce:e3:e0:4d:48:4e:a5:75:
51:9b:aa:f8:46:af:8d:73:85:f4:59:18:23:b2:41:
50:3e:64:32:f5:b8:fd:6a:ac:76:b3:e8:57:1d:be:
c0:08:61:99:81:dc:0b:21:5b:21:f5:22:a3:d5:2d:
2c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:78:8E:38:0A:14:DA:1F:8F:4C:71:A1:19:AE:44:DF:D9:0D:FC:2C
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/q3iOOAoU2h-PTHGhGa5E39kN_Cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.30.0/24
Signature Algorithm: sha256WithRSAEncryption
34:a7:d7:7f:d9:b1:1e:35:4b:f8:5b:7c:89:77:04:0e:9b:c7:
b9:0f:14:50:9f:05:b6:77:ff:36:dc:d7:fb:94:33:67:23:24:
9f:ac:30:70:2b:5c:d2:d8:db:66:75:03:34:e5:aa:b3:fb:c2:
dd:f4:c5:af:26:f1:b7:cf:e5:9b:9a:4b:7c:c7:8e:f2:19:31:
fe:34:ed:84:b1:c5:f6:a9:3b:bb:dd:c4:81:51:65:a3:75:1f:
7d:1c:de:c6:15:be:1a:c2:f4:50:52:0d:24:50:c8:dc:15:9f:
44:38:da:a0:f9:00:82:fc:02:e4:26:f1:a3:4e:15:51:6c:97:
a5:de:28:99:9e:9f:03:cd:90:d4:34:ba:e9:fa:85:f7:c5:49:
15:ac:92:c3:b9:f1:8f:05:8f:b1:5a:3e:cc:03:3d:31:25:92:
ea:50:4b:ce:7a:04:d8:af:bd:a3:5f:ef:9d:7d:a9:c1:84:17:
e6:f2:c5:4d:aa:bb:7e:f0:aa:de:e7:42:7f:cc:e2:08:d1:6c:
4b:6c:28:1d:b8:a3:0a:e8:d7:95:98:64:6c:a6:e9:56:3a:3a:
59:2f:d1:ea:61:0b:02:c4:50:8a:e5:9a:69:a0:f2:2a:aa:d2:
b9:d4:2f:35:e7:dc:01:75:28:a3:ed:22:cb:fc:40:56:6b:11:
f1:4f:74:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:47 2024 by rpki-client on console-fra.rpki-client.org