Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/ks9cqeUg2mCV_hOhM1QLMhhY6yk.roa
File: ks9cqeUg2mCV_hOhM1QLMhhY6yk.roa (raw, json)
Hash identifier: AjnEHzJTPnzY7vXQVmEARPJM9sIaKzBdxrkFD+3uwAI=
Subject key identifier: 92:CF:5C:A9:E5:20:DA:60:95:FE:13:A1:33:54:0B:32:18:58:EB:29
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 01880E8B9E6319EC21BD7CD1AC577721C3FF
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/ks9cqeUg2mCV_hOhM1QLMhhY6yk.roa
Signing time: Fri 12 May 2023 06:00:11 +0000
ROA not before: Fri 12 May 2023 06:00:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211415
IP address blocks: 45.83.238.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0e:8b:9e:63:19:ec:21:bd:7c:d1:ac:57:77:21:c3:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: May 12 06:00:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92cf5ca9e520da6095fe13a133540b321858eb29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1c:96:35:6e:76:90:b1:ff:0b:81:5f:bd:80:
84:c1:f8:1f:f0:ed:b6:c3:b1:e2:14:75:a6:d7:d8:
7c:84:1c:fc:5a:7f:0e:03:f5:5c:76:4a:1d:1a:95:
04:55:3f:6f:cd:78:57:91:db:90:c8:82:6f:3b:df:
df:41:f9:8f:b4:f5:e8:99:08:db:69:2a:52:7c:1d:
da:f3:53:57:a0:4b:dc:88:1d:68:2a:8b:41:7e:5c:
38:58:20:4e:da:9e:66:9b:f5:84:f7:7f:e8:bd:2e:
03:51:46:16:ee:04:f2:7a:01:c1:a9:ac:70:54:a7:
cf:79:a7:b3:c2:b9:e3:25:d2:c9:70:9e:79:7e:89:
94:a1:9e:54:d2:4f:5a:31:18:7e:fc:30:eb:cc:00:
36:3a:a0:c1:f9:7f:42:75:43:2d:a4:9f:1b:24:e6:
ef:21:8b:c4:4d:27:fa:c3:6b:52:9b:df:e3:ac:92:
8c:4c:07:67:8f:7c:68:37:8c:e9:a9:10:62:d5:99:
ee:fa:60:8c:fe:54:d1:7e:7d:7b:88:52:97:79:f6:
6e:86:ad:db:09:c8:66:9e:59:fd:05:23:89:2f:00:
04:75:f4:fa:32:46:e7:6e:29:29:b2:7e:3d:9a:c4:
e0:14:38:f2:d5:8f:04:a3:1f:37:5d:b4:57:b3:cb:
ab:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CF:5C:A9:E5:20:DA:60:95:FE:13:A1:33:54:0B:32:18:58:EB:29
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/ks9cqeUg2mCV_hOhM1QLMhhY6yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.238.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:90:43:0e:b2:7d:02:5c:b4:d6:4e:7f:b2:b1:e8:ea:91:2a:
bd:60:21:64:14:87:b3:ff:f0:47:8c:98:d1:49:f1:8b:9a:f9:
79:fb:82:d8:a9:ed:5a:ac:d9:f0:85:c7:db:9b:e6:13:60:ab:
6f:24:8a:93:e5:c4:24:97:f1:d9:39:f4:64:e1:27:12:ae:75:
65:3a:37:81:9d:95:c5:57:35:2f:0c:13:be:2e:36:fa:69:d6:
cf:40:77:5c:33:c6:45:d3:8b:92:0b:37:91:da:a5:ff:71:89:
64:d3:f9:10:a2:2e:23:bf:56:f7:6f:62:2c:fa:db:13:b5:db:
94:23:9a:b1:f6:9d:42:ff:32:a2:5c:83:8a:c2:92:f4:50:7e:
05:89:2b:69:81:91:6a:bb:1c:09:e2:d6:34:97:b5:d1:bf:24:
e7:54:67:83:cd:14:7e:f5:3e:44:18:9c:f7:53:01:99:24:f7:
5b:cc:f0:16:25:ca:bd:ee:97:e6:f2:a5:e6:f4:5b:de:ee:96:
f2:41:cd:f0:f5:57:b8:04:06:6f:6f:c6:1d:3b:61:34:c4:f1:
9a:59:65:74:33:fe:c3:68:dd:7c:ba:3e:42:10:84:88:7e:08:
17:7a:53:41:16:ed:6f:dd:ee:bb:76:ad:65:f2:33:84:dc:0d:
54:8a:98:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 17 16:43:40 2023 by rpki-client on console-fra.rpki-client.org