Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/8vhhjljX-rJnGYd8vc-hWxxxxQo.roa
File: 8vhhjljX-rJnGYd8vc-hWxxxxQo.roa (raw, json)
Hash identifier: xqC5XSLah7Kxj/aLAQ7E3vzHs9VgyFMtjXMlfxRuNRU=
Subject key identifier: F2:F8:61:8E:58:D7:FA:B2:67:19:87:7C:BD:CF:A1:5B:1C:71:C5:0A
Certificate issuer: /CN=9e42ca46688a837b575234ce6a1a326587d6c204
Certificate serial: 01857315BD92062401B187CA22B68C778E04
Authority key identifier: 9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/8vhhjljX-rJnGYd8vc-hWxxxxQo.roa
Signing time: Mon 02 Jan 2023 15:24:42 +0000
ROA not before: Mon 02 Jan 2023 15:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207790
IP address blocks: 45.13.12.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:bd:92:06:24:01:b1:87:ca:22:b6:8c:77:8e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e42ca46688a837b575234ce6a1a326587d6c204
Validity
Not Before: Jan 2 15:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2f8618e58d7fab26719877cbdcfa15b1c71c50a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:90:99:4e:13:17:ed:74:df:0f:8d:41:5a:85:
92:1d:c2:4d:4c:fb:cc:28:2a:61:84:f4:5a:6a:8d:
ca:14:9f:a4:cf:ce:a7:2f:4e:a0:b7:06:1a:90:1f:
39:2b:97:5d:d8:d8:42:bf:83:7a:36:5f:13:2b:94:
d9:1a:98:d9:76:d4:34:e7:50:73:c9:12:80:e2:a7:
55:f7:81:8f:1c:37:2e:ab:11:7c:b0:d1:7d:08:16:
ed:f2:87:5d:1d:34:10:67:ff:13:21:66:e4:27:70:
86:a3:df:f5:46:b4:c0:e6:44:10:8b:06:16:2b:85:
17:3c:5d:14:45:43:d1:39:b5:d8:bc:14:ff:3b:d3:
07:96:74:85:6a:ed:6c:f0:69:27:2a:c3:73:ce:5a:
a6:bf:ec:5a:ed:43:78:c5:c9:cd:66:5a:cb:0b:41:
bf:d0:8b:0a:70:57:79:70:b5:d4:6f:12:04:45:9c:
80:35:61:db:a3:40:0c:01:98:b9:c4:b5:54:0b:17:
20:1c:d9:41:4b:e9:36:b4:53:d0:48:4d:f1:d0:18:
f5:7b:74:c4:ab:35:35:e9:7f:3a:7e:e4:f4:61:bd:
10:e5:1e:f7:99:d7:d9:97:e2:5d:65:21:61:30:6e:
9d:9f:cb:4c:21:5b:03:98:36:a3:2a:0e:a2:1a:81:
b9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F8:61:8E:58:D7:FA:B2:67:19:87:7C:BD:CF:A1:5B:1C:71:C5:0A
X509v3 Authority Key Identifier:
keyid:9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/8vhhjljX-rJnGYd8vc-hWxxxxQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.12.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:0b:8a:58:67:0d:b0:32:1c:c6:25:ed:32:51:05:a3:f4:42:
3a:9d:92:36:ca:1a:a3:d2:a4:51:b1:ff:e7:2c:61:53:9c:50:
56:89:71:30:3c:ef:b8:23:6b:59:c6:e6:60:95:8d:1f:8e:40:
ea:fb:a9:9a:27:43:c0:ae:6e:c0:92:64:5d:93:8a:f7:b6:ee:
32:e9:c3:49:35:3b:95:51:5c:32:24:01:17:e9:51:47:84:1c:
d9:dc:55:ad:94:55:45:90:ac:c6:53:e5:44:09:95:6d:fd:7c:
20:e7:24:a7:03:18:57:27:b9:aa:ca:31:8b:54:61:58:7c:92:
2e:fd:68:55:64:8a:73:8a:cc:b9:62:0b:77:db:4c:b4:81:1c:
ea:29:c2:9c:b6:48:96:05:f5:37:99:aa:a4:e2:33:67:3c:5a:
b5:be:af:34:d6:07:47:8a:e8:95:20:3e:2f:c4:14:d5:c9:52:
74:3a:4f:0d:9e:78:99:53:23:b7:6c:fd:b3:8b:d7:3c:d6:6e:
66:ea:1c:91:6b:11:53:ec:4f:bd:bd:40:e4:2f:3d:5b:7a:ee:
8a:35:33:b1:63:84:c6:20:be:33:07:cb:7c:83:ff:df:9c:46:
d0:8b:0d:5c:3c:98:7c:41:8c:9b:07:7b:38:8f:32:94:cb:fd:
18:b3:af:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:06 2024 by rpki-client on console-ams.rpki-client.org