Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/dMQnXSAtrb5zBjstgv0gsYUEyys.roa
File: dMQnXSAtrb5zBjstgv0gsYUEyys.roa (raw, json)
Hash identifier: 2n4LlJqtbeedZqpP1hkbwICr1fIx1G1gZtzSGeFF6H8=
Subject key identifier: 74:C4:27:5D:20:2D:AD:BE:73:06:3B:2D:82:FD:20:B1:85:04:CB:2B
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 018572BA6F7A0D05CC1BFB4E5CE10400D4C6
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/dMQnXSAtrb5zBjstgv0gsYUEyys.roa
Signing time: Mon 02 Jan 2023 13:44:58 +0000
ROA not before: Mon 02 Jan 2023 13:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50250
IP address blocks: 45.159.72.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:6f:7a:0d:05:cc:1b:fb:4e:5c:e1:04:00:d4:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jan 2 13:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74c4275d202dadbe73063b2d82fd20b18504cb2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:15:ae:91:a0:ba:db:77:bd:bd:48:46:da:51:
f6:e5:cb:05:1d:38:24:db:6b:10:82:4f:93:06:df:
b5:a1:d4:01:29:0a:d6:8a:8f:08:da:0f:1b:d1:58:
01:7e:48:56:c7:79:33:18:60:31:a8:28:8c:e8:b4:
39:c9:60:65:94:aa:3f:e0:a5:36:e4:b6:e2:2f:bf:
fa:97:7a:fc:7b:52:54:c4:7c:a6:90:34:7d:eb:52:
4f:f2:9a:61:d5:9a:51:7a:1e:fc:1a:4f:88:90:ea:
d2:32:ad:9f:ef:74:dd:4c:b8:cb:53:b9:41:af:3e:
33:1b:e2:84:29:a7:50:66:69:3b:64:3f:07:56:0d:
48:90:15:a7:70:ff:bf:7d:8f:04:a5:99:f1:0a:15:
c4:57:f9:fa:68:14:e3:d3:ce:89:af:a3:11:0c:d6:
f3:b7:96:1e:e6:ac:bc:cf:04:6f:69:12:7a:f0:bc:
f3:9f:ad:4e:f1:76:70:04:65:d8:22:af:ed:62:9e:
f4:11:32:a5:f3:d4:5c:90:3b:d4:9c:14:a0:30:3a:
bd:0d:ed:90:7e:aa:ba:f6:5e:df:19:bc:ca:c1:4c:
7f:45:2e:bf:4e:15:58:60:a3:a1:b4:2e:cb:ba:9b:
83:02:33:ea:a7:9e:87:ee:6d:9a:57:e7:15:55:10:
eb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C4:27:5D:20:2D:AD:BE:73:06:3B:2D:82:FD:20:B1:85:04:CB:2B
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/dMQnXSAtrb5zBjstgv0gsYUEyys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.72.0/24
Signature Algorithm: sha256WithRSAEncryption
44:5d:e2:d0:0e:9c:e8:98:f2:2b:e1:bc:c7:8f:6e:0e:d3:00:
88:aa:d3:0e:fc:43:20:b9:5e:bf:da:8d:ad:c9:21:7d:26:6b:
6b:54:54:e3:f1:69:e8:4c:73:c7:24:76:e7:c0:06:38:56:fa:
1e:4f:e1:11:ad:83:8b:38:e8:42:f1:16:71:20:84:a8:52:ae:
96:5e:52:f1:54:ba:0a:c4:fd:bb:ee:5d:15:67:e6:d5:d5:43:
b3:75:6d:9f:10:e9:26:82:19:ff:d0:d3:57:37:73:9f:29:2c:
aa:66:6e:33:26:fc:45:af:59:c6:b4:e4:07:c1:c6:b4:54:eb:
cb:e7:d2:79:36:55:08:79:49:39:0c:ce:73:a8:d0:bd:7d:f0:
f3:bf:fd:64:20:84:b0:a8:d1:cc:14:c7:d6:2e:69:a7:63:b0:
e3:8b:d4:73:38:53:01:ab:ba:36:0c:12:0b:bd:cb:05:3b:60:
a5:34:f7:95:56:8e:89:44:9c:a6:91:38:71:92:2f:68:9e:64:
93:52:cd:4b:59:ba:58:e8:78:0e:45:a4:db:47:2b:45:3b:3c:
2c:38:e2:60:54:22:d8:93:7a:2f:b6:22:81:ca:78:71:8c:03:
02:6e:4a:e0:9e:7a:44:36:28:03:9e:1d:7d:c6:ef:77:33:ec:
18:15:fb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:49 2024 by rpki-client on console-fra.rpki-client.org