Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4b719f-1ec7-4b60-9c23-6cfde55f2752/1/yV8hr8mKLvn9LYP73pS29bR_weY.roa
File: yV8hr8mKLvn9LYP73pS29bR_weY.roa (raw, json)
Hash identifier: RMWJLo6cEiGfqNbpwUMDSE+kK6cFqYVTCrNsxbb4NL4=
Subject key identifier: C9:5F:21:AF:C9:8A:2E:F9:FD:2D:83:FB:DE:94:B6:F5:B4:7F:C1:E6
Certificate issuer: /CN=f98ef904147026acd4e9df789292196ace328ac2
Certificate serial: 01856F9496CDBA26FFA1CFF17A99A0E51236
Authority key identifier: F9:8E:F9:04:14:70:26:AC:D4:E9:DF:78:92:92:19:6A:CE:32:8A:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Y75BBRwJqzU6d94kpIZas4yisI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b719f-1ec7-4b60-9c23-6cfde55f2752/1/yV8hr8mKLvn9LYP73pS29bR_weY.roa
Signing time: Sun 01 Jan 2023 23:04:46 +0000
ROA not before: Sun 01 Jan 2023 23:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34790
IP address blocks: 45.93.112.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:96:cd:ba:26:ff:a1:cf:f1:7a:99:a0:e5:12:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f98ef904147026acd4e9df789292196ace328ac2
Validity
Not Before: Jan 1 23:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c95f21afc98a2ef9fd2d83fbde94b6f5b47fc1e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6a:3c:28:77:ff:41:0a:8a:e8:cd:6f:67:9e:
fd:4d:0f:79:54:6f:e5:aa:09:e6:4f:b4:cb:6f:79:
60:b0:81:bf:69:3d:8c:cc:15:dd:9a:1d:5e:d9:93:
b0:f7:c8:e4:ac:aa:99:83:ec:98:4e:27:42:8e:ff:
f9:9f:43:9f:ff:0f:1b:08:22:c7:75:71:d5:5e:ef:
66:df:29:bc:c0:1e:52:77:50:c0:48:4c:50:29:40:
39:c7:38:c1:4a:c2:73:30:57:15:e7:09:08:a4:64:
6f:88:da:38:f6:f7:1d:23:0c:a0:25:6e:b3:32:8c:
dc:15:73:2c:5a:8e:e9:59:e7:c2:63:ab:a8:49:96:
0d:99:ac:7f:93:63:6a:e2:62:99:7f:d3:80:28:97:
b8:ac:c8:cc:5d:c5:de:6e:86:c2:18:bb:a6:1e:38:
cd:47:ac:f4:35:c9:4c:21:9d:d9:20:bc:a8:02:4b:
f7:56:df:8d:43:56:74:c6:9c:69:01:fe:1d:ef:4a:
a4:10:7f:db:52:07:7f:1a:db:bc:5d:78:85:2f:5c:
e2:5b:28:bc:3e:37:09:6f:87:2a:46:e2:47:8d:86:
74:c3:ce:f0:97:13:c8:8d:d5:24:b0:cb:6a:40:58:
5e:62:b8:05:9e:0c:c5:0b:7c:a9:26:21:93:ab:46:
ce:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5F:21:AF:C9:8A:2E:F9:FD:2D:83:FB:DE:94:B6:F5:B4:7F:C1:E6
X509v3 Authority Key Identifier:
keyid:F9:8E:F9:04:14:70:26:AC:D4:E9:DF:78:92:92:19:6A:CE:32:8A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Y75BBRwJqzU6d94kpIZas4yisI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b719f-1ec7-4b60-9c23-6cfde55f2752/1/yV8hr8mKLvn9LYP73pS29bR_weY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b719f-1ec7-4b60-9c23-6cfde55f2752/1/1-Y75BBRwJqzU6d94kpIZas4yisI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.112.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:b3:f5:3f:0c:75:63:2b:34:cd:0f:f4:de:0e:c1:a8:d3:8d:
3b:12:26:03:c5:18:fc:aa:26:9c:18:66:a0:5a:24:c0:eb:94:
67:d9:e0:f4:99:e5:60:1d:13:cd:2d:56:03:2d:e5:04:da:f3:
c7:7c:52:08:4e:c1:6b:90:5f:f0:eb:1d:91:2a:26:9a:0b:81:
99:09:47:0f:14:7b:1b:db:9c:68:71:7c:b3:de:08:e2:4d:cf:
d4:8f:bc:f8:54:91:8b:13:18:18:bf:92:6b:24:3b:cc:45:f8:
ce:cf:50:58:af:ec:45:2f:ed:0d:97:92:6a:42:a8:03:70:c7:
eb:0c:26:48:1e:20:59:32:34:c3:70:51:75:ea:7d:61:5b:0c:
ea:3b:15:7f:2e:26:17:b0:14:46:7a:78:ae:63:04:f6:c0:b6:
da:84:7b:86:90:96:9d:57:bd:af:21:f9:49:d3:85:3f:b4:26:
56:b4:57:13:06:22:30:a6:95:75:33:ca:45:31:f4:1f:b6:e8:
21:d7:80:3a:78:ef:fb:87:84:99:44:04:78:b7:f5:c3:a5:04:
08:6e:f8:ea:51:b7:e4:ce:e6:dd:ad:61:ff:61:6e:52:34:5e:
35:e7:dd:70:c5:96:ce:91:d9:6c:e2:78:7f:e4:d1:9b:37:0e:
96:f9:5c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:52 2024 by rpki-client on console-ams.rpki-client.org