Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/EMEXqlik-GiAEr3eEgSvd3gW24I.roa
File: EMEXqlik-GiAEr3eEgSvd3gW24I.roa (raw, json)
Hash identifier: wfUuhz32euLfLbRUmUvEtv7qRi/kn2sJ7JPVb9Iy1WE=
Subject key identifier: 10:C1:17:AA:58:A4:F8:68:80:12:BD:DE:12:04:AF:77:78:16:DB:82
Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial: 018C50C4BFF4539C8C627A5617F28E876EAB
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/EMEXqlik-GiAEr3eEgSvd3gW24I.roa
Signing time: Sat 09 Dec 2023 22:48:40 +0000
ROA not before: Sat 09 Dec 2023 22:48:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 45.87.162.0/23 maxlen: 23
45.87.160.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:50:c4:bf:f4:53:9c:8c:62:7a:56:17:f2:8e:87:6e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
Validity
Not Before: Dec 9 22:48:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10c117aa58a4f8688012bdde1204af777816db82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5e:1c:79:80:b9:bd:68:e0:a0:66:31:fd:dd:
c0:ba:98:07:d3:42:30:9a:22:31:5e:33:a7:71:41:
cf:01:2e:e0:49:11:e8:44:22:f7:60:3b:7a:bf:9e:
ac:cc:6b:c8:2c:a3:3e:f5:c6:40:25:fc:2c:19:a6:
53:48:02:a5:29:f5:46:a6:cc:3b:0c:00:05:3b:90:
5c:c9:98:9d:d1:99:87:25:7a:6c:24:81:17:5e:c3:
b1:9e:4d:ed:ab:0b:5d:2c:6d:bf:fc:41:88:03:2c:
70:5c:28:cf:7c:66:79:6c:bf:9f:10:bb:19:dc:48:
dd:45:2a:0c:a9:2d:4d:28:00:8a:76:a2:26:8d:b7:
27:7e:e7:83:49:8b:c2:22:af:32:4a:77:98:71:e2:
19:74:64:c5:28:3a:7e:50:1c:ad:20:aa:3d:54:34:
75:5c:1b:9c:37:99:c6:b6:5a:5f:54:7f:67:f4:8b:
6c:94:07:22:6d:5c:21:0f:55:08:c9:47:4f:3a:96:
74:dc:27:b9:0e:0b:e8:1c:1a:dc:da:f9:53:4c:1b:
26:23:d5:e2:bd:29:28:49:35:1c:de:59:a8:97:d2:
88:53:de:06:97:08:50:72:0c:a4:fa:06:7b:bf:2d:
42:f5:b2:95:2f:f3:ca:78:16:cc:a7:16:c6:c8:04:
9e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C1:17:AA:58:A4:F8:68:80:12:BD:DE:12:04:AF:77:78:16:DB:82
X509v3 Authority Key Identifier:
keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/EMEXqlik-GiAEr3eEgSvd3gW24I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.160.0/22
Signature Algorithm: sha256WithRSAEncryption
57:6e:1d:bd:0d:bb:53:48:7b:af:c4:f1:5b:3f:54:99:5a:e0:
55:16:04:88:d1:12:51:d1:19:95:22:60:61:70:72:22:7b:4d:
63:de:20:4e:35:d9:34:8f:02:46:04:77:6f:29:02:2b:62:f0:
d7:7b:13:c9:9f:95:21:6e:e6:51:01:4d:d0:20:22:a7:b4:d1:
7d:1f:b5:cc:58:63:d6:7b:60:0f:ef:c1:32:c4:ef:8b:bc:13:
e2:d0:9d:40:c4:c8:6c:cc:ea:58:0e:11:0b:88:df:98:97:04:
3e:ce:f0:bb:69:e8:ff:be:cb:0e:f1:f6:d4:e0:bb:a5:f6:78:
63:a8:a4:de:de:0c:9f:1b:f1:5f:0c:4b:ec:e7:07:c4:2d:97:
86:b1:21:0d:f3:45:98:bb:16:9d:75:70:b6:e2:fe:5b:79:19:
ff:47:c2:1e:f4:e2:16:50:c2:05:22:b1:aa:44:1d:44:3b:dd:
96:10:fd:8b:72:cf:56:91:3c:56:cd:44:bc:8e:2b:ef:fd:60:
f1:50:78:cc:3a:04:a9:75:69:14:40:f2:bf:32:97:10:7c:d2:
f0:6c:3a:d3:13:d6:2c:77:a4:6e:33:d9:20:6e:d1:c6:48:89:
c0:00:df:b9:4b:70:94:b7:67:de:fd:07:14:ce:28:46:7f:dd:
67:11:01:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:19:20 2024 by rpki-client on console-fra.rpki-client.org