Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/JIxjWh-KQBo4Ohmuyu1wwHMx8xY.roa
File: JIxjWh-KQBo4Ohmuyu1wwHMx8xY.roa (raw, json)
Hash identifier: K23m/jvLvnXkBburZPx3PBL8YghtYNlLcK2JJLQF+2g=
Subject key identifier: 24:8C:63:5A:1F:8A:40:1A:38:3A:19:AE:CA:ED:70:C0:73:31:F3:16
Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a
Certificate serial: 018BB0BED2520040F24D522901059DFE7EF2
Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/JIxjWh-KQBo4Ohmuyu1wwHMx8xY.roa
Signing time: Wed 08 Nov 2023 21:02:57 +0000
ROA not before: Wed 08 Nov 2023 21:02:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203105
IP address blocks: 45.92.42.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b0:be:d2:52:00:40:f2:4d:52:29:01:05:9d:fe:7e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a
Validity
Not Before: Nov 8 21:02:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=248c635a1f8a401a383a19aecaed70c07331f316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:83:db:9b:ca:95:ab:3b:51:9f:3c:18:61:ac:
ea:d6:05:05:21:0f:54:bc:06:86:6d:55:70:5c:00:
e0:31:67:38:b0:3f:b8:e1:f2:63:f9:e8:37:8b:a5:
71:68:7b:e4:d8:0d:c3:74:77:99:de:6f:68:f2:ef:
10:68:5d:52:0d:4e:b8:d0:4b:89:e6:e5:83:8e:ac:
00:19:af:d1:7d:c1:29:85:aa:0b:34:2a:1a:5e:a0:
92:63:bc:b6:d3:72:20:b8:da:1a:87:94:f4:48:67:
20:87:15:f1:d9:23:5f:e9:51:45:f8:f7:6d:c9:89:
6a:f7:22:0b:73:9a:41:c8:a6:aa:1f:cd:f2:b6:94:
f7:38:11:18:ba:d9:0a:ed:83:83:ef:5f:a4:9d:33:
72:e0:5d:79:bf:60:fa:ce:b8:98:33:cc:d1:08:c6:
d8:c3:0c:16:aa:b2:b9:c2:2c:26:29:1f:4b:4d:f2:
50:73:15:aa:f4:97:78:06:a0:9d:2c:1e:fc:41:a2:
36:f4:00:4f:83:9e:4b:35:b1:69:8d:c3:d1:4b:2c:
bf:b9:ca:13:ea:52:ce:61:fc:12:7c:a4:64:2a:77:
a7:dd:09:dd:8e:b5:7f:fc:2e:db:bb:00:5d:f9:ce:
93:3d:9e:35:61:11:02:d2:49:86:38:cc:75:f4:de:
d8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:8C:63:5A:1F:8A:40:1A:38:3A:19:AE:CA:ED:70:C0:73:31:F3:16
X509v3 Authority Key Identifier:
keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/JIxjWh-KQBo4Ohmuyu1wwHMx8xY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.42.0/24
Signature Algorithm: sha256WithRSAEncryption
17:60:70:6a:db:c6:1c:49:3e:8d:c0:fe:15:53:3e:e4:24:d6:
b8:4c:09:2a:6b:0a:a2:a5:75:50:1b:5c:69:20:56:11:58:09:
96:1c:a4:5a:87:29:d9:c6:b7:5b:d0:63:82:44:2c:51:75:4f:
a1:64:77:69:ef:31:71:ac:c9:a5:b0:6e:24:fc:9d:c4:71:a9:
81:06:38:16:bf:cc:34:ab:a2:65:9b:b6:0d:91:f4:eb:90:5b:
a5:03:9b:c0:6a:2c:0c:e7:5c:24:7b:79:ea:51:fd:dc:5f:b7:
91:2d:e2:42:83:e4:15:98:28:62:92:b7:53:79:03:49:ea:6a:
c2:e4:47:c4:2b:e9:d4:1d:37:6b:0d:1f:e9:80:95:5b:fb:1b:
3c:3d:52:2d:ac:53:41:f4:e4:29:62:ce:bf:7b:31:93:b8:06:
65:a2:92:2b:54:81:aa:d1:b1:c6:33:24:0a:6f:b6:82:14:79:
67:4c:be:26:58:8d:57:a1:45:54:da:bd:5e:5b:8c:74:93:40:
20:07:9a:dd:19:29:e2:d9:0f:31:ce:38:db:c7:4c:3c:7b:85:
bc:43:82:2e:2e:d1:b0:04:1c:08:40:1d:5e:e2:0e:e6:60:bb:
45:bb:5f:1a:5c:c6:e1:f8:b5:16:c8:84:e6:33:b6:0a:a0:e8:
4c:45:58:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:40 2024 by rpki-client on console-ams.rpki-client.org