Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/s1ZJDjw3aMqnYGxxbrwvYgf5A3E.roa
File: s1ZJDjw3aMqnYGxxbrwvYgf5A3E.roa (raw, json)
Hash identifier: sqffhSY7Cd+JxdP/38fkeTjIheLoYW3v1CLfmdC1gE8=
Subject key identifier: B3:56:49:0E:3C:37:68:CA:A7:60:6C:71:6E:BC:2F:62:07:F9:03:71
Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad
Certificate serial: 0188A001CA160E17A6CFD22FB698651C944F
Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/s1ZJDjw3aMqnYGxxbrwvYgf5A3E.roa
Signing time: Fri 09 Jun 2023 11:54:11 +0000
ROA not before: Fri 09 Jun 2023 11:54:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.143.11.0/24 maxlen: 24
45.143.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a0:01:ca:16:0e:17:a6:cf:d2:2f:b6:98:65:1c:94:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad
Validity
Not Before: Jun 9 11:54:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b356490e3c3768caa7606c716ebc2f6207f90371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:84:25:c2:8f:3c:4b:8f:66:c0:fa:9e:79:91:
09:d7:b6:52:72:f1:db:d2:26:96:a0:a2:58:bb:10:
22:ef:bf:ec:40:f1:f1:35:34:4a:a5:f3:de:50:79:
8a:f6:62:f9:f1:af:18:b9:57:45:c8:2c:86:62:cb:
a5:00:42:25:c8:42:cd:23:81:7e:d3:97:6e:35:67:
93:b6:b3:64:3f:e9:d3:6d:7e:9c:4f:c5:14:62:01:
eb:7a:98:82:cd:e1:2f:b4:2f:d8:9f:6d:98:69:7e:
67:c0:11:02:c4:41:d8:34:4d:60:a5:49:97:82:fb:
cd:79:5d:e1:02:a2:ce:4a:1c:d0:3c:08:bc:e0:0d:
a1:d5:b7:65:ec:94:0a:9a:93:df:dc:a2:f2:ba:88:
d2:a6:31:be:53:48:a9:f4:bf:6f:52:8f:a1:14:ad:
9f:fb:58:a4:db:ec:9e:90:64:ff:0d:f3:f0:73:8c:
42:92:78:0a:d6:33:dc:86:90:e1:c4:50:0d:b5:f5:
50:d8:84:7f:b9:ad:2b:e4:85:b9:93:34:af:32:29:
10:4c:ef:e7:63:24:11:9d:7c:22:8a:35:2d:ef:c5:
e6:a4:e7:b6:8a:8f:e9:0b:71:3b:c2:ce:0f:ac:3f:
ca:3a:c5:7a:ed:98:ac:79:0e:1e:45:cc:92:3f:98:
8f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:56:49:0E:3C:37:68:CA:A7:60:6C:71:6E:BC:2F:62:07:F9:03:71
X509v3 Authority Key Identifier:
keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/s1ZJDjw3aMqnYGxxbrwvYgf5A3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.9.0/24
45.143.11.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:95:52:d8:1f:a2:9c:cd:4b:e3:f4:ff:d7:8c:44:a2:21:5e:
96:e6:0a:e7:86:7f:14:60:d1:d9:0b:81:60:41:6d:51:17:17:
74:1e:3a:af:99:93:1b:2f:ab:85:f2:66:0d:73:4e:e1:d0:17:
73:bd:f9:57:11:8f:fc:cc:31:80:9e:e6:da:62:63:c4:76:69:
f4:e5:f1:71:22:14:0b:5c:ca:9e:92:0a:58:7b:80:a2:b9:54:
dc:28:21:4b:cd:8a:05:63:b7:3f:e1:d0:cb:86:c7:fc:25:f2:
6f:d7:f3:c3:30:f8:ff:32:75:89:c4:1b:72:0c:a3:d5:33:e8:
47:1c:21:93:ff:11:51:97:e5:65:38:e4:13:30:cd:8e:92:37:
f0:c0:60:19:6f:5f:2c:0f:6a:f5:55:e8:a4:4f:8f:4c:13:df:
2b:39:0c:1d:69:fc:60:5e:93:9c:f8:90:5a:e6:2f:ef:59:60:
c2:43:81:27:4a:c0:5e:57:95:c4:45:31:40:39:98:0f:cb:15:
0f:8e:1f:b4:4b:a7:57:6b:32:69:17:fe:26:b1:5c:80:98:8e:
a6:7e:ba:26:39:e2:24:b9:ec:ab:f1:14:80:c6:6e:5a:a3:3a:
c9:a7:18:fc:db:e0:21:34:36:17:74:04:ae:07:e5:c2:e3:34:
f6:5e:7e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 07:46:16 2023 by rpki-client on console-fra.rpki-client.org