Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/cJCV1NqWgPczGDo6lEfYbLpiz1s.roa
File: cJCV1NqWgPczGDo6lEfYbLpiz1s.roa (raw, json)
Hash identifier: eceymS7rNzrl71Gubi/zykkkD0FCXo1KksPWbddubd0=
Subject key identifier: 70:90:95:D4:DA:96:80:F7:33:18:3A:3A:94:47:D8:6C:BA:62:CF:5B
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01856DE66B38AE307FB0AB289DEAA888899C
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/cJCV1NqWgPczGDo6lEfYbLpiz1s.roa
Signing time: Sun 01 Jan 2023 15:14:55 +0000
ROA not before: Sun 01 Jan 2023 15:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201364
IP address blocks: 45.10.56.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e6:6b:38:ae:30:7f:b0:ab:28:9d:ea:a8:88:89:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Jan 1 15:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=709095d4da9680f733183a3a9447d86cba62cf5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:29:b5:9c:0f:ce:d4:d3:c5:12:b8:c0:48:c3:
d5:4c:b3:c4:d9:c2:20:4d:a1:49:46:cf:2b:49:c2:
cc:ff:0f:e6:0e:c0:94:af:0e:13:e9:1a:fe:08:f3:
66:6d:1e:95:61:43:06:55:5e:b6:36:d9:26:00:ba:
fa:43:37:81:f8:a6:c5:23:26:29:46:14:eb:eb:db:
c8:9e:16:52:a2:b8:c4:9a:fb:4a:f4:0f:90:91:06:
a6:29:9e:67:88:40:c4:d1:7f:54:5b:47:e4:e8:b4:
07:13:81:1a:e9:92:21:cb:84:4b:a8:28:87:a2:fe:
1e:89:47:c1:10:f7:c7:84:45:7f:68:19:90:54:70:
6d:8e:b3:ec:f2:99:91:b6:2d:2f:89:5d:3f:78:bb:
d8:4e:05:50:55:ee:1e:31:b2:00:c4:9e:f9:7c:4b:
09:84:de:66:1a:6f:bb:ff:f8:48:8e:a6:6b:8e:9c:
5d:a2:a6:73:25:bc:70:cb:04:4c:42:8a:4c:cf:55:
19:7e:fb:41:29:de:3c:e6:79:9d:3d:d0:fc:56:a2:
67:6b:32:c1:4a:41:00:c2:6f:48:3f:7c:24:09:37:
db:a1:64:f0:d0:b5:d7:7f:58:28:d1:7d:9b:3c:ff:
69:0d:85:6f:4c:da:cc:95:30:00:b4:6f:36:c8:38:
48:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:90:95:D4:DA:96:80:F7:33:18:3A:3A:94:47:D8:6C:BA:62:CF:5B
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/cJCV1NqWgPczGDo6lEfYbLpiz1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.56.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:f6:82:fd:2d:1c:3d:76:0e:bd:d1:f2:39:2e:ff:21:86:90:
85:aa:b2:00:8a:df:03:5c:de:ed:33:cb:01:9f:79:ed:46:38:
a5:c9:e0:98:08:db:65:d2:3c:e3:95:b1:39:4c:4b:bb:ac:f7:
ad:17:e4:77:69:d8:98:c1:80:0e:25:09:51:b7:69:a4:1f:5e:
a9:5e:ed:fb:7e:b9:39:8a:bd:64:2b:b1:71:35:f0:d2:32:0b:
ea:dd:ed:30:59:9d:6c:09:b4:18:d9:e4:6f:75:fd:2f:5b:fb:
7b:e1:93:82:29:fe:43:c3:10:f7:f0:96:02:c1:a6:a7:30:d5:
f7:f6:ed:fb:4a:99:5d:30:e1:5b:9f:ed:22:3d:53:27:ee:54:
0f:42:57:e0:bd:32:62:9b:6b:18:b4:a4:1e:14:65:25:59:70:
a9:ec:2c:17:ee:cd:6f:73:79:52:a3:f5:93:53:ae:f0:20:e7:
ea:be:65:ba:69:7f:8a:13:d7:80:44:fa:83:71:15:0e:15:0d:
23:c9:8d:29:cc:72:a0:03:9e:a6:f4:b8:28:f1:e4:47:0f:d9:
5c:1c:18:b0:42:ca:a1:77:96:8c:1b:5d:17:cb:cf:bb:4b:df:
7e:f9:4e:b1:75:79:f0:a9:a2:98:b9:9f:0d:b0:e0:c9:27:eb:
80:fc:11:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:42 2023 by rpki-client on console-ams.rpki-client.org