Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/n0sq8916pFLMhyCe5mafoVZxjJs.roa
File: n0sq8916pFLMhyCe5mafoVZxjJs.roa (raw, json)
Hash identifier: x6Sow0HrUE9o9+yfTl9CKN9L0PPAQj49Nkj+Ymvj4pw=
Subject key identifier: 9F:4B:2A:F3:DD:7A:A4:52:CC:87:20:9E:E6:66:9F:A1:56:71:8C:9B
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 0185AA253D24F1508E65B3501C9D411FF5C9
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/n0sq8916pFLMhyCe5mafoVZxjJs.roa
Signing time: Fri 13 Jan 2023 08:00:45 +0000
ROA not before: Fri 13 Jan 2023 08:00:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 45.151.69.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:aa:25:3d:24:f1:50:8e:65:b3:50:1c:9d:41:1f:f5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jan 13 08:00:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f4b2af3dd7aa452cc87209ee6669fa156718c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c5:5e:66:37:cf:00:df:78:f7:18:d2:90:ba:
30:4b:72:6a:73:a9:ff:14:8c:10:16:9a:53:bb:75:
a8:e3:4a:d0:6c:a4:a4:a1:af:5d:95:88:76:b0:bb:
57:64:76:d1:8a:1a:1d:ee:b3:c2:a9:e1:d7:10:da:
68:81:53:56:a9:69:5f:c0:e4:06:d5:1c:11:b6:1b:
24:bb:62:f3:c6:74:12:9d:b7:e0:97:53:4e:37:2f:
56:bc:7d:36:1e:df:0c:79:c6:1a:04:f2:f9:ed:07:
ce:03:f2:bc:55:fa:6d:c5:db:0f:e0:07:de:ba:f0:
ed:45:14:c4:4f:9c:51:76:cc:d9:f7:a8:81:7f:ff:
8b:12:79:20:fc:a0:f2:d7:af:e3:46:ac:90:de:58:
81:b0:cc:f6:3d:5c:6f:56:1a:53:46:6d:7a:e8:2c:
83:4f:ed:bf:18:29:11:33:4b:c9:a2:5e:70:d0:4c:
7d:ab:3f:65:91:e8:94:81:84:a3:cc:e3:2a:a1:a2:
f0:b9:d4:f9:54:78:86:94:1f:fb:bb:ea:8d:7d:c4:
ef:29:ea:0d:ff:6f:8f:e6:38:57:90:12:13:b5:ee:
1b:6c:b3:c9:4d:52:4e:e1:95:5e:20:83:22:94:87:
d2:d3:89:bf:83:33:8b:dd:77:a5:d4:b5:22:b2:b6:
fe:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4B:2A:F3:DD:7A:A4:52:CC:87:20:9E:E6:66:9F:A1:56:71:8C:9B
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/n0sq8916pFLMhyCe5mafoVZxjJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.69.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:5b:48:f7:38:36:ee:3c:da:3f:5f:5a:28:5e:8a:2d:2d:7f:
fd:b7:19:37:51:33:b9:21:db:14:70:cf:58:83:2e:21:7e:e9:
1e:69:bd:33:ed:a2:35:40:e4:9c:fd:1e:69:7c:6c:18:c4:d0:
b6:ba:56:85:75:33:b0:14:13:e0:ba:64:15:37:0e:88:ed:dd:
42:3a:91:3d:bf:0d:1c:28:6e:22:f5:44:56:64:e0:64:89:08:
6b:3c:76:aa:16:91:b3:50:93:59:f8:ae:d4:f3:31:02:7a:2f:
fd:b5:6e:fb:35:91:a6:36:09:c6:3a:26:5c:f6:66:5f:d7:66:
21:88:e8:f4:db:7d:ff:d0:08:e8:dd:84:cf:c6:eb:95:37:c1:
5f:0d:eb:1b:cc:6a:a9:65:99:4d:4c:71:52:1d:c0:50:58:b8:
b0:4e:65:13:fc:56:4c:e2:40:a2:cb:c7:dd:b8:7b:e1:66:02:
01:e8:32:b6:25:d3:f2:ab:0d:65:df:71:89:bf:dd:39:61:9c:
94:0b:b4:5a:64:f1:96:31:9a:de:db:fd:7c:f3:c6:cf:22:00:
41:6b:da:38:9b:69:52:75:b5:7e:ef:14:ec:47:49:33:72:8c:
bf:68:73:01:7e:ec:5c:1d:bd:4d:bc:db:ca:d3:6d:87:f9:ff:
8c:d1:2c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:50 2023 by rpki-client on console-fra.rpki-client.org