Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/RDCmBIslVcvoFNc7x9F50b_U9Tg.roa
File: RDCmBIslVcvoFNc7x9F50b_U9Tg.roa (raw, json)
Hash identifier: 1v3EuilnibAQwjMk2otWleaqCy1x00UIni0nMIrXsLQ=
Subject key identifier: 44:30:A6:04:8B:25:55:CB:E8:14:D7:3B:C7:D1:79:D1:BF:D4:F5:38
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 01856B0A36102EC2AEEEFE40692128ABDF14
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/RDCmBIslVcvoFNc7x9F50b_U9Tg.roa
Signing time: Sun 01 Jan 2023 01:55:09 +0000
ROA not before: Sun 01 Jan 2023 01:55:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49453
IP address blocks: 45.80.104.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 25 Jan 2023 14:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:0a:36:10:2e:c2:ae:ee:fe:40:69:21:28:ab:df:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Jan 1 01:55:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4430a6048b2555cbe814d73bc7d179d1bfd4f538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:70:22:47:62:17:e0:0c:71:25:48:dd:ec:9d:
7f:58:5f:48:d1:a9:9b:4f:23:d2:02:bf:88:d4:ed:
a0:52:29:4c:81:a4:5d:e4:f3:8c:9f:0d:a4:14:3a:
c3:1f:02:ee:7f:49:ce:b5:27:67:6c:d6:14:9d:a0:
09:cb:fc:50:4c:10:d2:a0:d3:1d:eb:26:a7:f5:15:
1b:03:4d:93:e1:ed:f2:87:d7:3c:91:d9:fe:ed:2b:
26:81:53:d5:78:5b:9c:b1:82:3b:8e:52:7b:7d:5b:
95:ca:27:46:ac:95:cb:ca:0e:1a:e5:7c:ed:75:e1:
0c:b9:7d:68:78:9e:64:71:3d:f1:90:b8:e1:88:f5:
b4:bc:cf:7e:1c:ac:4e:5d:60:14:9b:3a:a7:cc:3b:
7b:cc:8b:fe:0e:8e:e3:3c:bc:ca:29:ee:a5:7d:fe:
30:4a:9c:9c:60:7a:4e:25:6b:26:c2:7a:34:48:31:
37:7c:1c:2a:db:4b:82:9c:67:6a:b3:07:20:3a:35:
47:bc:04:1b:bb:25:90:b7:e4:45:63:85:f3:ea:8e:
80:9c:c6:bd:d4:a4:36:63:11:64:ec:44:06:cd:7a:
af:d4:68:50:14:6a:db:59:18:18:16:79:00:1a:4b:
44:22:7b:fd:bb:4a:9e:1c:b6:98:0e:b5:46:a3:89:
23:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:30:A6:04:8B:25:55:CB:E8:14:D7:3B:C7:D1:79:D1:BF:D4:F5:38
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/RDCmBIslVcvoFNc7x9F50b_U9Tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.104.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:37:70:23:f2:fe:9b:4c:38:fb:69:5a:c4:d6:c8:9d:cd:52:
e2:42:cd:cf:e5:ea:83:52:2e:f1:29:97:b5:54:e5:81:a0:a9:
44:95:91:dd:fd:8f:37:c4:e6:15:b3:62:5a:89:4a:0d:80:44:
e8:c2:12:67:6e:e6:f6:b2:6c:c0:a4:cd:0e:d6:8e:33:f8:49:
ef:ef:0e:87:f0:ed:bf:3b:a7:75:d0:d1:16:81:e8:df:8f:02:
2a:8b:8a:c1:0a:8b:e2:56:f8:82:09:ca:2e:01:bf:20:18:b6:
4e:86:5d:24:93:f0:ce:db:77:34:50:fc:5a:93:15:00:ad:9e:
46:0d:17:77:02:11:9e:e6:7a:8d:04:07:de:f4:74:ea:13:20:
8b:36:a7:ad:28:ad:f2:ce:68:64:9d:01:12:61:4a:c1:62:4e:
c0:c4:6c:7e:cf:0a:fe:5c:13:83:98:6c:17:a0:3d:41:5d:39:
2b:97:62:1a:70:7c:d4:f3:69:6b:43:c9:0c:37:f6:e5:f0:ef:
45:99:75:a3:3b:1c:b1:2f:4a:ff:dd:5e:cf:df:cf:c2:7d:d5:
67:43:9a:10:9a:82:6e:16:8d:09:8a:95:79:61:f1:a2:76:88:
db:ec:dd:9c:d8:41:33:df:51:d7:0b:4b:a0:82:96:58:8c:ff:
e4:d7:ec:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:15 2024 by rpki-client on console-ams.rpki-client.org