Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/wAbY_eryd7CpkO4NS42vB-KIbYk.roa
File: wAbY_eryd7CpkO4NS42vB-KIbYk.roa (raw, json)
Hash identifier: kPPXXkm/ObyV7eP3PMXyOF2xSzLr6bNr6RSWNCeeVm8=
Subject key identifier: C0:06:D8:FD:EA:F2:77:B0:A9:90:EE:0D:4B:8D:AF:07:E2:88:6D:89
Certificate issuer: /CN=4e78b6d00614f5565d9d8af8247cc72ea9b8833d
Certificate serial: 018571FA1667565B8F5E2585D402CA1D488A
Authority key identifier: 4E:78:B6:D0:06:14:F5:56:5D:9D:8A:F8:24:7C:C7:2E:A9:B8:83:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/wAbY_eryd7CpkO4NS42vB-KIbYk.roa
Signing time: Mon 02 Jan 2023 10:14:53 +0000
ROA not before: Mon 02 Jan 2023 10:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203976
IP address blocks: 45.88.37.0/24 maxlen: 24
45.88.36.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:16:67:56:5b:8f:5e:25:85:d4:02:ca:1d:48:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e78b6d00614f5565d9d8af8247cc72ea9b8833d
Validity
Not Before: Jan 2 10:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c006d8fdeaf277b0a990ee0d4b8daf07e2886d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bd:06:54:b1:a2:fa:fb:d8:c4:66:11:0b:9e:
cf:20:e4:29:84:80:92:20:21:5d:37:03:dc:9b:42:
01:05:9d:f3:ac:e9:49:45:1d:ca:8a:c8:86:cc:a8:
6c:e4:9f:26:4a:dc:61:f2:b1:f9:0b:03:8f:76:2b:
b3:57:af:5c:a4:ee:fe:11:09:d0:9c:d4:f9:8d:9d:
44:64:19:b4:83:fb:1d:f1:cb:50:8e:58:33:69:03:
e2:0e:d7:b8:74:4c:87:8e:80:f7:a9:54:7c:96:d3:
29:13:e5:e1:ba:c6:d7:10:8f:01:ea:64:f6:b0:a9:
38:e3:30:36:71:a7:e5:e3:23:22:82:ae:12:7e:79:
ce:b7:47:d0:7d:7b:11:c0:f6:bd:8a:a2:16:82:8c:
9c:22:47:bb:1c:c1:95:8e:f3:42:c1:67:90:d9:93:
66:10:74:cd:46:56:fd:49:8c:c6:6f:d0:21:c4:eb:
93:02:ce:62:92:85:85:89:66:a2:fc:98:b3:70:82:
2f:3c:88:d8:05:b7:f5:55:70:96:e4:c7:7d:a6:4d:
ab:8b:94:99:55:ed:60:d6:4b:01:5b:25:c4:51:47:
67:06:8a:19:07:c6:08:b4:ba:7a:e2:3c:93:7d:11:
42:d0:ce:69:30:30:81:33:9d:b1:81:70:62:6c:22:
ee:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:06:D8:FD:EA:F2:77:B0:A9:90:EE:0D:4B:8D:AF:07:E2:88:6D:89
X509v3 Authority Key Identifier:
keyid:4E:78:B6:D0:06:14:F5:56:5D:9D:8A:F8:24:7C:C7:2E:A9:B8:83:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/wAbY_eryd7CpkO4NS42vB-KIbYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.36.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:43:b4:3d:27:30:3d:b7:3a:03:ee:c9:0e:cc:e2:49:99:89:
ed:5f:25:9d:c0:ba:8d:ae:99:66:fe:e8:81:5d:be:98:4a:e0:
6b:58:4c:da:14:22:40:4e:84:92:83:a5:d2:6d:33:ee:7d:d2:
d3:ec:1b:5f:1d:96:38:04:9a:f2:cc:b4:5c:34:24:49:e4:26:
76:94:ad:4a:ca:5a:6d:bf:92:76:80:4c:50:1b:a1:df:00:15:
7d:9e:cc:f7:2d:61:8d:48:c6:bd:e0:a7:4e:10:f5:6d:b3:f3:
37:98:c0:1d:19:39:b4:b5:ae:93:e7:5a:91:70:0a:90:e0:e8:
af:69:57:91:ec:76:ba:7a:af:bc:eb:01:55:c5:e1:9b:c9:91:
42:5e:89:b3:c8:3e:b0:b6:b9:d1:49:da:f0:e5:aa:8f:06:8f:
b3:6d:c2:ca:60:18:65:23:92:41:49:b5:44:85:ea:e5:87:2d:
16:da:48:67:b7:43:b0:77:dc:22:26:8f:7a:d5:e7:19:f6:9b:
b8:c1:fc:75:59:22:e0:5b:74:f0:df:6e:74:20:60:e5:e8:80:
15:63:44:d8:1b:8c:94:24:ab:00:e2:80:5b:75:08:c4:64:38:
24:c2:5a:d8:5a:76:1a:ef:12:3d:b3:1d:18:b0:cf:b9:97:06:
ab:ae:e6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:21 2024 by rpki-client on console-ams.rpki-client.org