Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/8_q42j_J9swLaxgL10PM5NO6Jso.roa
File: 8_q42j_J9swLaxgL10PM5NO6Jso.roa (raw, json)
Hash identifier: kDumd6AFxcM8XE6Q0e0uJR322Tcxvi+kwSm+s1jeuTU=
Subject key identifier: F3:FA:B8:DA:3F:C9:F6:CC:0B:6B:18:0B:D7:43:CC:E4:D3:BA:26:CA
Certificate issuer: /CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Certificate serial: 018711C5327D227CE5E69768D20F477D03B6
Authority key identifier: 85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/8_q42j_J9swLaxgL10PM5NO6Jso.roa
Signing time: Fri 24 Mar 2023 03:59:08 +0000
ROA not before: Fri 24 Mar 2023 03:59:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59692
IP address blocks: 45.183.4.0/22 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:11:c5:32:7d:22:7c:e5:e6:97:68:d2:0f:47:7d:03:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Validity
Not Before: Mar 24 03:59:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3fab8da3fc9f6cc0b6b180bd743cce4d3ba26ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:32:27:7b:7a:d6:b9:f5:ab:78:11:25:ee:e1:
d8:ea:68:56:36:b4:10:ef:1c:bd:fb:83:a5:cb:0e:
40:ca:f2:1f:42:0d:7b:90:32:d7:a1:a3:1e:0e:8a:
df:4f:00:d3:3f:78:cc:57:51:54:2f:61:88:ef:29:
2a:7f:ae:ac:2f:aa:6c:4e:9d:ef:f4:31:db:33:ea:
75:02:35:39:f1:57:90:07:0b:82:73:f4:74:20:cd:
7b:90:db:e2:b4:50:06:2c:d3:ed:7b:bf:17:ce:ac:
c2:c3:8b:14:5a:5f:d5:00:dc:60:10:cd:90:f9:3e:
be:79:a8:70:f2:e1:cc:10:c4:6d:ec:a4:ef:a6:aa:
f6:4c:d5:dc:ba:08:72:74:cb:af:b3:c1:49:e3:43:
c7:84:e0:f4:e8:01:25:e9:98:e1:98:9c:82:8d:bb:
8e:a6:7c:60:fc:bb:f0:c9:97:1d:cd:bd:c8:16:20:
af:16:6f:32:53:27:15:6e:0a:2e:a5:35:99:ed:1a:
bd:1b:c3:16:b2:09:db:81:71:e5:da:df:83:ca:e2:
87:42:cf:08:3a:8a:6b:82:8a:9c:9a:f8:21:0f:fe:
75:3e:f0:47:bb:77:ae:10:33:d8:66:cd:e3:77:de:
97:2e:cc:c3:11:fd:f3:62:8a:a4:38:6f:d2:f6:df:
a2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FA:B8:DA:3F:C9:F6:CC:0B:6B:18:0B:D7:43:CC:E4:D3:BA:26:CA
X509v3 Authority Key Identifier:
keyid:85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/8_q42j_J9swLaxgL10PM5NO6Jso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.183.4.0/22
Signature Algorithm: sha256WithRSAEncryption
56:08:f1:22:4f:a5:01:7b:a9:18:27:ba:b4:04:3c:bf:5b:c6:
30:43:e4:da:79:1f:c0:6a:a4:22:b1:52:a6:d6:e9:d7:c5:7e:
31:66:b7:86:63:2c:e7:5b:15:52:a9:a3:cb:1d:78:cc:e4:ca:
dd:7f:91:1c:64:e2:89:b1:c3:c2:2b:13:79:8f:e9:8c:65:eb:
f4:08:d2:cb:aa:ca:69:f0:1b:4c:c3:a6:dd:1c:46:64:89:0b:
aa:e6:21:ea:74:26:47:53:bc:9a:b0:fe:38:49:53:cf:b6:f3:
d2:39:98:f1:a2:43:df:77:0f:97:6e:52:e6:41:ee:1f:6e:05:
c1:9c:1d:52:1b:27:33:1c:7c:50:8a:be:1a:6a:fb:e3:f7:c9:
7c:14:2b:35:14:f3:f3:73:a2:ea:a8:f0:bd:89:64:f7:7b:c2:
73:b7:06:e8:66:8e:b1:98:9a:4c:48:84:9c:35:63:7f:3b:9f:
3e:19:5f:1d:09:e4:e5:23:53:db:5f:ac:70:43:58:9d:c2:23:
65:62:29:4e:1f:ba:0d:bb:6d:c7:db:77:f8:16:d7:24:36:98:
79:07:23:b8:ae:ad:aa:8b:1a:44:96:be:6b:15:cb:ef:1e:d4:
d5:a0:53:07:f5:55:8a:08:71:dc:1d:72:a6:6d:f5:74:dd:6f:
bc:93:5d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 16 03:46:11 2023 by rpki-client on console-fra.rpki-client.org