Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/q8sQ8AZVb0CR-pK94qYGsD3_w8g.roa
File: q8sQ8AZVb0CR-pK94qYGsD3_w8g.roa (raw, json)
Hash identifier: NnLJ/q4WNZ/8FFP4YHAsodan4F0A1VMlW/1xIqJ/3e4=
Subject key identifier: AB:CB:10:F0:06:55:6F:40:91:FA:92:BD:E2:A6:06:B0:3D:FF:C3:C8
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 0185A04BC752EA8976EAB72DD789E29A669E
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/q8sQ8AZVb0CR-pK94qYGsD3_w8g.roa
Signing time: Wed 11 Jan 2023 10:06:38 +0000
ROA not before: Wed 11 Jan 2023 10:06:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59651
IP address blocks: 45.155.164.0/24 maxlen: 24
45.155.165.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a0:4b:c7:52:ea:89:76:ea:b7:2d:d7:89:e2:9a:66:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Jan 11 10:06:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=abcb10f006556f4091fa92bde2a606b03dffc3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:91:dc:80:15:d1:28:e5:42:87:b9:be:4e:c8:
3b:29:17:11:81:a3:71:07:46:9c:39:a3:b6:08:bb:
51:b0:ac:5d:08:75:d6:4b:96:d5:7e:43:af:e5:bf:
ef:de:ab:47:28:bc:95:51:18:e1:7e:36:4d:71:81:
16:c4:dc:b9:00:a2:b5:69:0e:37:55:c4:b3:6d:d9:
de:60:e4:e7:c2:93:37:ee:3e:e3:0d:3c:f8:0e:04:
11:32:e5:ca:31:b5:ae:d5:12:3d:7a:35:f8:21:c4:
20:5a:58:3b:87:25:21:55:98:7e:f1:72:65:f4:c7:
0a:cb:86:4c:de:14:f2:7d:bb:2f:29:e6:4c:66:d6:
c5:fa:9c:d3:a4:5c:a0:3e:9c:6d:de:fe:57:b2:93:
4d:cc:67:4c:a7:dc:ed:b8:62:76:57:d6:d6:bb:43:
d7:27:92:96:ae:72:16:90:ef:1f:98:c6:2e:c8:ca:
24:41:4f:4b:24:41:e3:8f:48:84:cc:a7:70:25:93:
2e:14:c4:09:45:27:13:c6:3e:fb:36:03:9b:34:6c:
f6:a1:c5:94:87:5e:0a:23:57:06:bf:d6:81:c0:31:
ff:ed:69:a5:d8:8e:f5:2d:e8:be:79:4e:50:6d:38:
c9:b9:06:a7:0d:a6:6f:8e:e7:01:2e:74:8a:67:a6:
e3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CB:10:F0:06:55:6F:40:91:FA:92:BD:E2:A6:06:B0:3D:FF:C3:C8
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/q8sQ8AZVb0CR-pK94qYGsD3_w8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.164.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:1f:33:70:92:d1:af:4e:ac:3e:ca:97:6e:cf:3a:53:66:29:
11:01:44:fd:1f:7c:6a:d2:5b:b0:66:71:b5:9b:cf:5b:7f:87:
d7:a2:32:38:5a:7a:c0:d7:b6:fb:05:b7:41:b6:df:3f:a2:44:
8c:0c:f9:d0:4a:e5:6b:23:56:61:30:fc:1c:99:0b:b7:c5:e8:
0f:cc:1d:84:c2:4e:ab:2f:29:d8:d7:a9:1f:5b:58:01:ec:e5:
71:18:d6:55:26:71:9b:d6:fb:13:3b:99:80:10:00:23:8d:66:
37:89:50:57:72:80:8e:79:19:b3:e2:b9:1c:82:44:7f:e4:5e:
43:96:cd:28:2d:45:aa:76:3f:2d:b9:9e:78:9f:b1:92:f7:e1:
32:25:90:b0:4b:32:b3:26:c6:c0:fb:b1:52:ed:a2:0d:94:30:
76:8f:6b:a6:7f:41:39:80:0e:a7:b5:c3:6e:ff:4d:5c:6f:1d:
a3:eb:95:25:a6:e4:4e:a2:be:3c:a6:23:03:5c:da:c4:e8:17:
9b:b3:55:11:ff:c8:08:41:69:d1:28:e0:f5:ff:6d:37:58:ef:
c3:58:40:ce:3a:89:4a:1b:9f:bf:ad:a6:37:e7:29:3f:15:c0:
a8:43:7c:57:d5:bb:d4:2a:c2:fa:7c:e9:d0:b9:66:a6:09:cc:
94:9c:24:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:59 2023 by rpki-client on console-fra.rpki-client.org