Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/Q4wlm_6YxpykNMuDRP0rKtZzgyY.roa
File: Q4wlm_6YxpykNMuDRP0rKtZzgyY.roa (raw, json)
Hash identifier: bgC2znvpkwWoic4HS1q9w5/9SCNuNZv/WlzteGHCJcU=
Subject key identifier: 43:8C:25:9B:FE:98:C6:9C:A4:34:CB:83:44:FD:2B:2A:D6:73:83:26
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 01856DAF6C2E3394C909D04DC6DF4AE9182C
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/Q4wlm_6YxpykNMuDRP0rKtZzgyY.roa
Signing time: Sun 01 Jan 2023 14:14:51 +0000
ROA not before: Sun 01 Jan 2023 14:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206150
IP address blocks: 45.8.16.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:af:6c:2e:33:94:c9:09:d0:4d:c6:df:4a:e9:18:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Jan 1 14:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=438c259bfe98c69ca434cb8344fd2b2ad6738326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4b:44:22:cc:2c:ca:c8:60:5c:5a:9e:41:fa:
95:c9:cc:2f:b0:c3:f2:e2:e2:3e:45:b0:f6:24:ae:
d9:0e:b3:2d:77:1d:d4:4a:21:63:97:58:40:db:03:
1e:a7:50:10:81:c1:91:dc:38:38:dc:f7:71:2d:52:
b6:1e:6d:a5:96:83:e3:05:e6:32:fa:91:e3:d6:3a:
66:46:d7:c7:5e:33:c1:5a:ce:42:c2:cd:a8:ac:26:
f7:04:42:9f:56:fa:1c:6d:0e:d6:03:78:75:ef:fb:
5c:5c:e2:6a:e9:0b:ce:97:d5:2e:d0:d4:e2:cc:3a:
f8:a4:db:b4:3b:52:a1:d2:6e:3e:5f:79:77:10:72:
29:04:3f:89:cb:04:91:c9:45:22:46:f7:ca:99:ff:
3b:6f:14:0b:a9:29:d2:5f:fd:f9:99:e0:e5:9c:e9:
28:85:17:9d:c4:92:ea:97:dc:02:db:d6:d8:70:ec:
fa:3c:ea:7c:64:09:d5:10:2a:36:16:58:bd:9d:0d:
7d:19:ca:96:24:dd:20:9a:80:26:6b:18:2b:51:d4:
c1:8f:ef:37:3d:62:d0:98:39:14:b0:70:93:75:8d:
3c:3c:a2:b7:bd:48:ea:cd:1c:31:b6:52:28:e0:7c:
26:11:e5:dd:1e:d4:b4:e8:0e:81:02:bb:b5:c6:6d:
6b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8C:25:9B:FE:98:C6:9C:A4:34:CB:83:44:FD:2B:2A:D6:73:83:26
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/Q4wlm_6YxpykNMuDRP0rKtZzgyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.16.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:d6:d5:29:1d:52:1f:82:b6:20:f4:b4:37:ff:2a:60:2e:e1:
65:d9:9d:c9:40:c2:0e:6c:7a:89:ab:53:51:64:09:f6:04:7c:
c1:1f:a0:dd:f7:36:b6:5a:1a:4f:5f:50:f1:55:ee:30:29:9b:
25:2d:aa:19:c0:83:f2:03:f4:15:0d:08:d5:28:92:7a:26:48:
0a:58:f1:75:1d:ba:8d:94:79:4d:d4:ce:5e:e0:d0:a3:cc:05:
ba:f8:57:44:e4:73:6c:3e:59:92:2d:a3:b0:e4:5c:ff:36:1a:
69:8e:5e:70:52:10:bb:e5:9a:df:fc:c9:36:a6:0b:c3:04:07:
91:50:b8:6c:76:78:8a:10:e8:df:89:c4:da:0f:68:96:72:5a:
31:2e:2b:af:d2:f6:06:6b:1a:92:84:e4:09:76:f9:de:b3:dc:
49:b2:bb:54:62:b5:fc:66:fc:d0:63:ff:28:96:6c:7f:06:db:
86:5b:2c:a3:df:23:b7:e7:2a:3f:27:8d:94:b5:fa:de:a8:4d:
52:c7:61:54:f5:59:c5:e7:3a:cd:29:f6:bb:cd:7f:da:0e:a3:
30:d4:07:75:f1:f1:16:66:9d:c9:b5:80:6c:c9:ad:e4:b2:2b:
1a:d7:ee:1f:73:f9:88:b5:ee:41:a9:d8:db:0d:3f:a3:26:bb:
c0:fd:19:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:44 2023 by rpki-client on console-ams.rpki-client.org