Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/08cda2-bebe-49a7-b46c-0a50803b0fbc/1/1-q7IF0r5A5mZCuJUWrK_GDuBGeY.roa
File: 1-q7IF0r5A5mZCuJUWrK_GDuBGeY.roa (raw, json)
Hash identifier: WomDZ7YxusXgP158YP1C+ohw48eHz2cgYIymxIJuOE0=
Subject key identifier: FA:AE:C8:17:4A:F9:03:99:99:0A:E2:54:5A:B2:BF:18:3B:81:19:E6
Certificate issuer: /CN=30055378b5d7cc0cb7943bc803379015b3485296
Certificate serial: 01857246CE07F82645E7A1D360D4E859355B
Authority key identifier: 30:05:53:78:B5:D7:CC:0C:B7:94:3B:C8:03:37:90:15:B3:48:52:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAVTeLXXzAy3lDvIAzeQFbNIUpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/08cda2-bebe-49a7-b46c-0a50803b0fbc/1/1-q7IF0r5A5mZCuJUWrK_GDuBGeY.roa
Signing time: Mon 02 Jan 2023 11:38:40 +0000
ROA not before: Mon 02 Jan 2023 11:38:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204996
IP address blocks: 45.67.8.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:34:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:ce:07:f8:26:45:e7:a1:d3:60:d4:e8:59:35:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30055378b5d7cc0cb7943bc803379015b3485296
Validity
Not Before: Jan 2 11:38:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=faaec8174af90399990ae2545ab2bf183b8119e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b6:e8:30:8e:0a:d4:45:71:aa:ae:27:8f:fb:
3a:11:f5:da:95:9e:ef:3d:45:5e:5b:15:ab:04:8f:
98:0d:a5:80:66:3b:45:7a:b5:21:2f:31:ac:00:6c:
0a:72:a6:78:ce:ef:d5:b0:5f:62:0a:88:ae:6f:f3:
ba:c7:2d:e4:3e:46:cf:ac:57:a6:15:69:7c:1f:b2:
af:bf:06:d7:c9:b0:81:8b:1d:6b:e6:24:74:0f:72:
15:f9:ea:61:44:c6:fa:f4:f0:bf:57:78:df:b8:35:
43:15:da:43:f7:78:d9:b9:f8:97:72:67:fe:6e:36:
c8:9b:2a:ff:cf:34:49:99:5a:98:86:27:51:1b:71:
41:1a:5b:79:2a:e4:39:53:5a:62:3b:44:3b:75:e2:
42:f5:ae:af:e7:1e:5a:7b:6c:d5:50:30:40:66:61:
b7:32:4c:ce:59:b1:74:60:bc:c5:d7:0f:52:b3:f7:
75:11:e0:43:04:14:d5:1c:cf:2f:ee:61:ff:b6:d9:
08:90:44:85:30:6d:ca:3a:04:9b:bb:0b:1a:12:7b:
b9:f2:f7:17:dd:76:9d:dc:52:30:f8:c7:c2:38:80:
5e:2e:59:81:07:b0:b3:d0:ac:44:0e:cc:66:d4:d5:
8b:0a:87:dd:98:a0:e3:cd:e6:e3:23:20:02:f5:00:
59:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AE:C8:17:4A:F9:03:99:99:0A:E2:54:5A:B2:BF:18:3B:81:19:E6
X509v3 Authority Key Identifier:
keyid:30:05:53:78:B5:D7:CC:0C:B7:94:3B:C8:03:37:90:15:B3:48:52:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAVTeLXXzAy3lDvIAzeQFbNIUpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/08cda2-bebe-49a7-b46c-0a50803b0fbc/1/1-q7IF0r5A5mZCuJUWrK_GDuBGeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/08cda2-bebe-49a7-b46c-0a50803b0fbc/1/MAVTeLXXzAy3lDvIAzeQFbNIUpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.8.0/22
Signature Algorithm: sha256WithRSAEncryption
07:5f:65:56:46:02:3a:0b:79:a2:87:cd:08:57:c6:ca:2d:02:
9f:03:31:79:3a:fa:95:c0:0c:2f:c2:58:2c:2f:6f:af:f8:55:
e8:3b:7c:07:9f:af:dd:6b:01:5e:b8:bf:bd:e0:d9:2d:12:d8:
00:f7:cf:40:94:47:0b:27:16:ae:59:08:65:a1:7d:87:1a:b2:
4f:28:15:6b:4e:12:17:a9:da:0a:09:a3:c4:00:29:3f:59:20:
c3:16:83:57:ea:1a:61:f2:16:99:73:8e:bf:85:5d:53:18:11:
5c:d6:4e:ef:6c:d5:2e:18:e8:aa:35:3d:b4:02:d4:00:2a:7c:
f8:07:24:11:c4:1c:61:fb:a9:ef:7e:95:84:c2:eb:13:36:d0:
d8:d8:51:d7:01:b1:71:9b:d8:cb:77:02:cd:52:9b:29:4b:63:
66:b5:fa:c7:d9:b1:6e:98:9f:11:f8:c1:e9:98:9b:c7:d8:71:
e7:1d:a7:00:97:6e:8b:f7:93:c9:73:7f:8b:b1:4d:48:eb:bb:
1b:54:a1:67:dc:83:31:9f:01:2b:13:ee:cd:8b:33:86:02:af:
20:e2:1f:5f:7d:13:a5:bc:63:c4:fe:2b:79:59:77:36:6d:c4:
ac:b6:d9:8d:dd:fd:81:e5:ff:eb:37:01:ed:00:64:c5:36:d8:
37:6f:3b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:58 2024 by rpki-client on console-ams.rpki-client.org