Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/Y83EKhTPkxeaHmj4xA65wCRx9dY.roa
File: Y83EKhTPkxeaHmj4xA65wCRx9dY.roa (raw, json)
Hash identifier: SafoBxcOGrU1vuqSuYukmH3we64DdpXOqtcZ/5zy+l4=
Subject key identifier: 63:CD:C4:2A:14:CF:93:17:9A:1E:68:F8:C4:0E:B9:C0:24:71:F5:D6
Certificate issuer: /CN=28c6800d74bc4105b40e77ea085ba026dbeec35f
Certificate serial: 0185700288CB789E0BBE9DA9283F3EC8E31D
Authority key identifier: 28:C6:80:0D:74:BC:41:05:B4:0E:77:EA:08:5B:A0:26:DB:EE:C3:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/Y83EKhTPkxeaHmj4xA65wCRx9dY.roa
Signing time: Mon 02 Jan 2023 01:04:52 +0000
ROA not before: Mon 02 Jan 2023 01:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 45.145.232.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:88:cb:78:9e:0b:be:9d:a9:28:3f:3e:c8:e3:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28c6800d74bc4105b40e77ea085ba026dbeec35f
Validity
Not Before: Jan 2 01:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63cdc42a14cf93179a1e68f8c40eb9c02471f5d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:43:29:1b:a1:2b:e4:cb:b6:98:ec:5a:b6:b5:
1d:2f:d3:58:ef:4a:6d:fd:6e:cf:5a:0a:4e:da:71:
3b:54:93:10:00:72:9c:52:a2:3a:a1:fe:58:50:51:
01:c6:27:2b:5d:d9:cb:a3:72:42:2a:6e:29:b1:c1:
11:69:13:79:f8:87:5e:4d:0a:d4:8f:70:6e:87:b0:
2b:a4:a1:65:32:69:1b:91:32:f7:6c:9f:05:75:47:
26:7a:df:44:b9:7c:14:13:0d:78:8b:78:26:bd:d0:
eb:9d:7c:9c:96:c8:70:cb:99:4d:18:70:20:de:25:
9b:cd:a6:0d:90:6d:fe:a0:23:fc:5a:92:87:fb:ce:
7c:22:ea:f0:39:4b:a1:1c:03:ff:74:81:5a:28:2e:
71:01:34:ab:1d:b9:44:cc:5b:72:5b:35:72:81:c1:
1f:49:3a:19:74:7b:3c:77:fc:08:e2:ab:5e:ee:62:
be:fb:f9:61:20:58:cb:0d:df:8b:8c:7d:bb:a7:65:
df:a5:37:c0:b7:67:35:cf:78:ef:80:0c:d6:4c:84:
de:70:a1:fc:00:e7:37:6a:cb:30:be:6e:14:50:6a:
12:7f:f3:33:83:75:8d:5f:ae:74:ce:27:4e:c1:0f:
68:13:92:f2:ba:b7:ca:a7:4c:46:ab:56:ac:10:b1:
9e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CD:C4:2A:14:CF:93:17:9A:1E:68:F8:C4:0E:B9:C0:24:71:F5:D6
X509v3 Authority Key Identifier:
keyid:28:C6:80:0D:74:BC:41:05:B4:0E:77:EA:08:5B:A0:26:DB:EE:C3:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/Y83EKhTPkxeaHmj4xA65wCRx9dY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.232.0/22
Signature Algorithm: sha256WithRSAEncryption
88:ab:ac:87:ea:e8:ca:b6:8a:0b:50:d5:39:25:90:c2:3b:1a:
45:cc:20:8c:9c:b9:69:7c:0f:d4:d5:cf:3b:f8:db:41:24:0f:
59:86:c6:57:6c:46:61:8c:89:b4:ec:9f:02:8d:d5:de:8e:ac:
04:51:8a:aa:a7:8b:50:3b:3e:31:9d:52:b1:4c:57:d6:26:d0:
37:aa:5c:1c:8b:a7:4f:af:1e:a6:a0:da:02:ca:44:d7:46:f6:
0c:96:74:b2:95:b7:a0:2b:30:d4:85:90:12:19:18:0f:65:7d:
63:1e:f1:35:60:cd:4d:31:a2:0f:a0:94:60:e2:56:68:47:aa:
a0:42:eb:9e:ed:a7:c1:39:e4:7c:8c:3c:c6:4f:a5:8f:9e:03:
de:f0:d8:4d:b5:f2:eb:fa:9b:97:7a:6c:f9:84:0c:ff:d4:a1:
b2:d0:f3:30:c5:ac:72:85:db:e7:12:81:23:1e:6e:7e:4f:0d:
16:d3:a4:a5:7e:4c:a5:96:60:8d:7d:dc:b2:42:74:99:a6:05:
f8:8f:2e:6d:61:60:23:85:3e:1b:f6:63:b4:d2:24:92:50:02:
09:fe:0f:57:b7:35:16:ee:a4:cc:ed:83:37:e3:0d:a7:bc:8f:
ff:09:c8:fd:3e:c0:39:56:12:21:f0:65:7a:a9:c8:5c:16:0e:
ca:7d:09:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:26 2023 by rpki-client on console-fra.rpki-client.org