Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/9oJ4gxjCxxTEbtnrVL-4fVu_r8A.roa
File: 9oJ4gxjCxxTEbtnrVL-4fVu_r8A.roa (raw, json)
Hash identifier: OGtcK1sEKoIgNUeqCcBQ22HS1PDGNtJlfy2s06Df+TY=
Subject key identifier: F6:82:78:83:18:C2:C7:14:C4:6E:D9:EB:54:BF:B8:7D:5B:BF:AF:C0
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 018597DDE6B125703E150376B4C8CACB48B4
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/9oJ4gxjCxxTEbtnrVL-4fVu_r8A.roa
Signing time: Mon 09 Jan 2023 18:49:40 +0000
ROA not before: Mon 09 Jan 2023 18:49:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 45.85.191.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:97:dd:e6:b1:25:70:3e:15:03:76:b4:c8:ca:cb:48:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Jan 9 18:49:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f682788318c2c714c46ed9eb54bfb87d5bbfafc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ef:2b:60:97:63:c4:4f:16:29:1a:60:6e:40:
8c:c1:91:ad:79:04:69:04:42:8a:87:f6:85:f2:c1:
76:02:1f:48:b0:5c:5c:55:ad:2f:87:a6:6c:28:54:
1a:f7:a2:b6:23:a5:46:57:d8:46:f2:58:f6:2c:af:
1a:28:29:63:92:fe:59:c5:c9:bf:3c:6c:e9:16:a5:
f9:6f:f7:2b:ee:33:12:1a:b6:27:68:9c:0b:42:c2:
71:19:b2:b8:27:fe:c6:f2:d4:b1:6f:9e:cd:1e:a6:
ee:fc:9c:35:12:d6:c0:91:11:7b:ff:8b:4a:a8:9f:
2e:a6:ad:08:37:40:d3:80:7c:42:4e:e8:b9:7d:ad:
d6:79:a6:7f:6a:27:72:5f:67:d7:86:7e:15:b2:a7:
84:44:56:31:ff:c5:63:35:91:4a:d1:50:c9:d6:b8:
e5:53:83:e2:37:07:b4:cf:a6:a6:13:80:ac:83:62:
56:36:98:c7:b6:aa:b5:c3:e5:28:aa:05:2d:cd:9c:
a6:42:a4:1a:85:57:85:b1:3f:b5:22:77:d1:49:ea:
28:83:e4:ce:1e:57:d2:71:d0:ce:44:7b:81:be:03:
3f:46:bb:da:51:88:a9:5a:6f:9d:81:3c:f1:24:3e:
7b:df:0a:91:29:17:ac:a7:2e:f2:bc:24:bd:40:14:
38:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:82:78:83:18:C2:C7:14:C4:6E:D9:EB:54:BF:B8:7D:5B:BF:AF:C0
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/9oJ4gxjCxxTEbtnrVL-4fVu_r8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.191.0/24
Signature Algorithm: sha256WithRSAEncryption
41:19:aa:5e:3a:96:99:ec:2b:10:6c:f7:0c:20:5b:29:44:a3:
8b:1b:c7:65:49:41:44:f4:2f:49:cc:cd:96:56:52:42:89:a0:
d7:c2:67:cd:e0:13:86:c4:d7:0b:91:df:cf:76:07:0c:d0:e0:
c1:28:3d:80:b7:85:25:12:6e:5f:b4:26:3e:e6:fc:80:00:e9:
3f:80:36:4f:4a:85:03:bf:7c:1f:93:92:6a:c6:39:52:8e:36:
70:00:d5:49:4f:4c:77:f0:fc:fe:bc:f2:55:05:ba:e0:e7:26:
15:d4:16:b0:d4:fd:77:fa:06:83:ae:a0:5c:1f:98:59:55:61:
92:ea:54:65:fa:fd:ab:69:32:6f:4f:22:2e:50:9d:16:e5:26:
60:72:45:bd:38:a2:c7:c3:ad:8e:67:97:0c:e6:ae:e7:b8:9c:
1f:ff:38:e6:48:c0:d6:52:c0:09:ff:47:47:7e:92:4d:2c:41:
29:b2:06:eb:b4:f0:b1:c4:42:84:63:fc:53:64:ae:4d:d6:2c:
37:59:0b:25:37:c8:17:6b:93:00:20:c2:0a:af:e5:4d:f1:54:
32:39:51:9c:40:0e:df:8a:48:fd:fc:48:15:aa:31:76:b8:13:
e0:68:24:65:ca:12:79:37:d6:27:25:ca:0b:43:d3:4b:1a:b2:
5b:63:09:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:43 2023 by rpki-client on console-ams.rpki-client.org