Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/IcLjf3E8ANUvOs60Y62dGmTajNw.roa
File: IcLjf3E8ANUvOs60Y62dGmTajNw.roa (raw, json)
Hash identifier: kWUInwyzQc6mQeRyRGbaqMd/osLYE6YBynPjMI5mOYs=
Subject key identifier: 21:C2:E3:7F:71:3C:00:D5:2F:3A:CE:B4:63:AD:9D:1A:64:DA:8C:DC
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 018B6ACA78D04A35503BF48AE476A58EE669
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/IcLjf3E8ANUvOs60Y62dGmTajNw.roa
Signing time: Thu 26 Oct 2023 07:02:15 +0000
ROA not before: Thu 26 Oct 2023 07:02:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23470
IP address blocks: 45.88.186.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6a:ca:78:d0:4a:35:50:3b:f4:8a:e4:76:a5:8e:e6:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Oct 26 07:02:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21c2e37f713c00d52f3aceb463ad9d1a64da8cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:84:52:a7:31:fd:c3:f5:6d:c9:49:68:5c:4c:
ec:d3:43:c3:d5:4e:b4:8a:83:03:c1:07:5d:9d:9c:
42:fd:34:10:94:d6:49:70:b5:3e:bf:be:6a:a5:f4:
23:2b:d3:e2:2f:1a:69:27:45:6d:34:d3:a6:57:f7:
fa:7d:96:f1:1c:a1:ca:6c:1c:6b:55:67:3e:4d:3f:
8e:01:cd:ad:be:1f:5e:12:07:0b:2d:b2:9c:76:06:
f5:56:4a:31:a8:36:b2:38:62:28:ee:b2:8f:7e:2f:
19:02:b3:a8:24:84:7c:67:90:5c:92:9d:d6:3c:04:
42:47:f8:f7:f1:9b:4d:94:a7:f7:fb:d9:7f:36:92:
18:c3:c7:7d:67:91:15:18:13:16:95:1e:b3:5e:cb:
80:13:a9:de:6f:6b:0c:dc:33:b5:6b:8b:cf:fe:95:
c3:5e:ac:78:83:3a:09:84:fa:82:97:38:d6:43:26:
54:74:28:f5:02:9a:39:4c:7e:df:e6:a5:92:04:98:
13:3f:01:9e:68:aa:93:d6:49:e2:4e:d0:07:28:42:
70:39:2c:bf:47:ff:2b:cd:09:2f:1b:c0:b9:18:b5:
59:75:8c:2a:c5:2d:32:fc:43:d0:b6:26:f9:f9:29:
7d:cc:4a:3c:68:19:d1:0e:2a:6c:39:6f:d3:76:d6:
c5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C2:E3:7F:71:3C:00:D5:2F:3A:CE:B4:63:AD:9D:1A:64:DA:8C:DC
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/IcLjf3E8ANUvOs60Y62dGmTajNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.186.0/24
Signature Algorithm: sha256WithRSAEncryption
35:42:bd:9a:35:ec:81:f2:4a:28:e8:d4:c0:47:a3:01:34:3c:
18:1e:74:99:08:9d:13:ed:51:af:6d:69:77:04:58:2e:f3:c1:
37:c6:d4:09:f9:88:80:58:e3:1b:f7:e9:d5:43:e0:c1:76:18:
49:db:b1:6b:d7:1c:63:aa:1c:46:65:96:5c:86:2f:d6:ef:a0:
1b:db:6b:df:09:ea:45:ec:fe:e3:7e:44:a8:48:7b:b8:3a:b5:
a7:2b:f1:01:7d:af:48:21:ac:ff:10:87:cf:0b:12:4d:01:74:
e5:8d:53:75:73:d8:20:b5:9e:4b:43:7d:41:82:fa:b7:79:10:
b4:ef:87:72:80:3c:11:71:1e:59:8f:3c:3d:58:12:6d:16:9d:
db:51:3f:97:fe:97:ea:8b:bb:55:f6:e1:94:87:5f:28:4a:76:
9f:30:f2:bc:b5:69:54:c7:b7:ba:97:25:f4:d6:88:cf:91:49:
12:da:d2:66:1f:35:e5:84:a4:79:16:27:c9:0b:6d:32:a2:71:
5e:d4:3e:df:a5:ea:60:64:dc:c9:e6:42:d3:ce:0d:c3:05:4f:
39:d3:93:27:ee:d1:9f:a5:fe:8e:5b:e4:d6:f5:d0:10:52:02:
85:91:61:8f:6a:4f:99:cc:22:8c:a3:a5:49:a0:21:cc:18:af:
23:d0:2f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:44 2024 by rpki-client on console-fra.rpki-client.org