Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/4Eb3XRhAlX3AZFJ6ZJ5ZQo-bqZ8.roa
File: 4Eb3XRhAlX3AZFJ6ZJ5ZQo-bqZ8.roa (raw, json)
Hash identifier: 5Nf1gDVMwjwdb57epOtwFqwDYiUwBpu2pX8gs2y0taQ=
Subject key identifier: E0:46:F7:5D:18:40:95:7D:C0:64:52:7A:64:9E:59:42:8F:9B:A9:9F
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 018ACC050BC7BD7CD4B09F96BD3B006674A1
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/4Eb3XRhAlX3AZFJ6ZJ5ZQo-bqZ8.roa
Signing time: Mon 25 Sep 2023 11:06:37 +0000
ROA not before: Mon 25 Sep 2023 11:06:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57844
IP address blocks: 45.141.208.0/22 maxlen: 24
45.150.8.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cc:05:0b:c7:bd:7c:d4:b0:9f:96:bd:3b:00:66:74:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Sep 25 11:06:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e046f75d1840957dc064527a649e59428f9ba99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3a:00:16:e0:e3:1c:6e:11:3b:9d:b9:77:39:
2c:33:ac:e7:1f:2e:53:23:a2:17:74:e3:75:1d:67:
0f:e0:c0:b7:f6:8c:66:7c:8c:6e:ff:08:16:a4:7a:
65:26:d3:47:e5:a9:24:5f:54:9a:f3:c0:8f:46:39:
0c:28:c4:72:96:8e:99:33:7a:56:b4:b8:63:3b:3d:
36:c5:29:b1:77:c1:9b:c3:f8:d8:ad:29:1d:ec:62:
cb:bd:69:6b:9b:39:08:32:e6:f2:4e:29:15:1f:43:
12:a0:9f:2b:d2:1e:5d:d0:1e:a0:3d:6f:3d:66:b7:
b9:cc:53:d2:58:2e:83:b8:37:98:ac:2a:11:f8:7a:
34:2c:e7:2c:1d:ce:52:aa:06:02:e0:56:23:df:ec:
1b:d8:7c:f8:95:a5:ec:de:a4:e6:a6:6b:d0:b8:6c:
a6:cf:43:d9:97:e8:dd:e0:5a:c5:b1:dd:ec:69:8e:
58:07:c4:44:b9:6d:b8:55:c6:75:26:ef:6d:cf:d9:
9c:b8:4b:0b:16:28:5f:1c:b6:e1:3b:ea:b5:11:05:
2e:ff:36:cd:cb:c4:cd:2f:3d:cd:ee:71:37:c3:d1:
81:57:99:aa:79:35:c2:24:9a:cb:45:d8:83:de:17:
d3:67:c3:75:2d:bb:fc:54:79:ba:b7:67:ea:78:7a:
f6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:46:F7:5D:18:40:95:7D:C0:64:52:7A:64:9E:59:42:8F:9B:A9:9F
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/4Eb3XRhAlX3AZFJ6ZJ5ZQo-bqZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.208.0/22
45.150.8.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:16:8c:11:65:c9:5d:2f:7d:c6:2a:9b:82:a5:6c:fa:14:b2:
a0:af:7d:c2:34:96:fa:47:04:bc:8f:7d:5a:d4:a9:c6:2b:6e:
9c:1e:da:66:d4:09:d5:cb:4b:94:97:08:d2:33:89:c0:3f:e0:
d7:0d:e4:da:02:2b:55:0d:84:8d:17:7a:b4:fd:c5:1c:ab:f3:
be:1d:6f:8e:49:19:a2:34:0e:6b:06:c1:eb:71:c2:d5:c8:0c:
f7:18:a5:ca:f8:fa:cb:f3:3a:67:44:e2:0d:01:ed:0e:4f:57:
29:cf:33:be:af:17:ec:39:f8:7a:71:a3:9b:7e:23:73:c0:14:
36:17:2e:f1:8d:24:bf:80:d4:a2:71:00:a0:16:d6:3c:78:cd:
f3:56:e3:ec:af:5d:e1:78:5b:0f:97:cc:b2:0a:48:ac:9c:7d:
47:39:1d:67:49:97:88:9d:c3:76:14:1c:ee:ff:da:d0:f5:17:
35:9d:3e:d0:4d:b2:19:08:54:89:31:2a:2f:83:05:60:91:39:
47:3d:51:e2:ac:be:95:14:87:7c:ea:93:16:a6:84:b9:dd:ea:
bb:2f:e4:c8:45:69:0f:38:42:f3:17:4d:a0:19:40:e3:0e:32:
dc:43:d3:0a:58:b1:78:e7:4e:ad:96:3c:ed:21:b5:f9:d0:da:
fb:7f:80:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:17 2024 by rpki-client on console-ams.rpki-client.org