Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/JlCmPX5NbDnA1OY_fbFYfOCVYs0.roa
File: JlCmPX5NbDnA1OY_fbFYfOCVYs0.roa (raw, json)
Hash identifier: lGOSJVFPjfq5H2XGWQc1blc4tE//Wb4KdQP4naqlBow=
Subject key identifier: 26:50:A6:3D:7E:4D:6C:39:C0:D4:E6:3F:7D:B1:58:7C:E0:95:62:CD
Certificate issuer: /CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Certificate serial: 0185706735483CA08BABC214CA05ED53B055
Authority key identifier: 43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/JlCmPX5NbDnA1OY_fbFYfOCVYs0.roa
Signing time: Mon 02 Jan 2023 02:54:50 +0000
ROA not before: Mon 02 Jan 2023 02:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 45.155.99.0/24 maxlen: 24
2a10:ba00:bee4::/48 maxlen: 48
2a10:ba00:bee2::/48 maxlen: 48
2a10:ba00:bee5::/48 maxlen: 48
2a10:ba00:bee0::/48 maxlen: 48
2a10:ba00:bee3::/48 maxlen: 48
2a10:ba00:bee1::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:35:48:3c:a0:8b:ab:c2:14:ca:05:ed:53:b0:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Validity
Not Before: Jan 2 02:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2650a63d7e4d6c39c0d4e63f7db1587ce09562cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ca:14:38:8a:ea:c5:6a:57:5c:5f:c1:fa:7c:
9e:87:54:76:29:e2:14:c3:23:fd:2d:1e:c7:74:44:
07:33:48:52:43:95:5a:d7:c0:09:1c:f8:8c:4a:f4:
63:4e:cd:3a:a7:1a:da:48:03:66:7d:df:fd:ee:75:
ab:9a:39:63:db:19:c1:e5:ed:5b:e8:a7:89:c4:f9:
91:01:56:f1:1f:2a:ea:75:84:f7:c3:4a:f2:ff:d3:
43:f1:08:81:31:0f:7a:eb:93:66:54:87:b6:48:db:
7e:66:89:03:b3:e8:37:bf:ab:a6:bb:6b:01:bc:02:
f5:9c:47:32:03:47:ef:3c:cf:c6:74:fe:21:04:b3:
c8:ff:4f:ea:73:69:fc:d8:36:97:d7:6f:0b:38:a1:
10:56:0b:13:8b:6d:36:56:d9:65:a6:a3:c8:3d:3e:
8c:99:d7:5a:8d:6c:d5:f0:4a:50:8b:ba:20:ed:c0:
08:c7:1f:e3:ae:9d:41:86:4b:03:b3:51:2a:4e:b0:
2a:2c:5d:35:96:9f:30:de:0b:6f:a2:27:a0:1c:8f:
0c:6f:85:02:77:93:98:65:4b:96:fb:68:a2:3b:10:
61:db:54:38:29:5c:67:45:6e:97:a9:09:3b:80:c7:
af:70:29:6e:ca:0d:e9:a8:67:25:2e:1e:94:bb:fd:
11:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:50:A6:3D:7E:4D:6C:39:C0:D4:E6:3F:7D:B1:58:7C:E0:95:62:CD
X509v3 Authority Key Identifier:
keyid:43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/JlCmPX5NbDnA1OY_fbFYfOCVYs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.99.0/24
IPv6:
2a10:ba00:bee0::-2a10:ba00:bee5:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
16:d1:9c:04:18:5e:4a:7a:b9:d6:c7:f4:7a:d9:40:4e:4d:b1:
f3:16:13:9c:7c:19:d5:f4:ee:29:ae:52:0f:f8:69:2a:01:4a:
21:08:b8:69:3f:8a:c3:5b:3e:fa:00:00:a4:46:89:f5:2e:f2:
a3:e4:2e:6f:a6:7b:aa:a4:87:3c:81:09:99:b5:0f:3a:fa:d5:
5e:0a:ec:ff:d2:ba:fe:3e:48:2a:0b:73:4a:a1:06:4d:d7:57:
d0:d6:ed:ff:05:bc:c5:36:f0:94:20:2d:5b:c8:15:73:f2:f5:
ce:6d:9f:8e:a9:d3:9a:7e:5b:5a:b7:5e:59:3b:7d:75:b4:c6:
40:2b:87:0f:40:e3:a8:54:30:b7:07:1b:e8:c9:f6:6e:cb:7a:
6c:32:4b:45:63:c5:3c:87:e5:f9:8e:59:ab:c7:83:55:24:e5:
be:63:79:d8:4f:30:05:99:17:0a:89:6a:7d:c6:15:29:9d:e4:
d0:ce:b7:23:8e:56:13:9b:bd:eb:8e:96:80:79:56:5d:49:d2:
d6:fb:cb:21:b3:ab:56:7f:eb:ad:2b:08:5d:ac:3d:06:0d:78:
d2:ab:f6:1c:a9:35:30:2d:3a:bb:e8:e5:48:58:ab:d1:45:0d:
c1:03:af:32:5d:6a:4c:88:8a:5a:8b:39:ec:8e:92:2a:72:ce:
fc:b6:fc:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:13 2024 by rpki-client on console-ams.rpki-client.org