Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/eHH8iYUy2Ov8PW6NXVE8FIAkhOA.roa
File: eHH8iYUy2Ov8PW6NXVE8FIAkhOA.roa (raw, json)
Hash identifier: 9F/PbzaWzwrIXLMmKXSnlLNeCTAm3/feWMMmgqGinDo=
Subject key identifier: 78:71:FC:89:85:32:D8:EB:FC:3D:6E:8D:5D:51:3C:14:80:24:84:E0
Certificate issuer: /CN=d643aec22f819cf01f2c6363035d97f8e0e38233
Certificate serial: 01856CCAB20539BF98956952AADD708B12FA
Authority key identifier: D6:43:AE:C2:2F:81:9C:F0:1F:2C:63:63:03:5D:97:F8:E0:E3:82:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/eHH8iYUy2Ov8PW6NXVE8FIAkhOA.roa
Signing time: Sun 01 Jan 2023 10:05:01 +0000
ROA not before: Sun 01 Jan 2023 10:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56851
IP address blocks: 45.94.156.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:b2:05:39:bf:98:95:69:52:aa:dd:70:8b:12:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d643aec22f819cf01f2c6363035d97f8e0e38233
Validity
Not Before: Jan 1 10:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7871fc898532d8ebfc3d6e8d5d513c14802484e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0b:ce:8b:e4:7a:06:bc:18:7d:e2:91:31:78:
d1:31:1f:3b:bb:96:24:20:50:d0:c7:0b:c8:0e:02:
85:25:7d:80:79:f9:16:38:3c:a6:b5:83:54:44:03:
84:8e:05:62:78:fa:6e:08:45:df:b9:46:44:7b:1e:
62:bf:39:45:44:e6:95:11:89:ff:0d:44:f5:2b:57:
3b:f2:49:fc:74:a3:f9:e4:c4:25:84:18:e4:4e:33:
dc:ea:73:46:78:8b:31:7e:33:7c:17:1b:ba:31:86:
0e:74:38:39:d8:82:6a:94:4b:1c:aa:44:6b:7b:e8:
4d:a4:e4:01:6a:4c:3a:ab:38:09:4a:e8:68:65:3f:
06:9f:f8:ea:6a:5a:c6:25:70:f8:f4:6f:b9:27:00:
e3:bf:57:80:b4:31:51:68:19:da:2c:59:41:17:09:
75:67:5f:0a:5f:9d:75:b5:de:f0:a0:a5:d9:5c:36:
d0:ec:99:f5:07:60:e6:11:89:a8:14:e2:91:42:10:
e8:b8:7f:13:cb:16:80:c6:1a:a9:f5:0e:88:3d:d3:
9b:1c:0f:7e:e2:2c:94:da:75:3f:0b:17:da:1a:d5:
ea:d9:ab:80:7b:86:13:7f:ab:05:60:31:09:f7:dc:
8a:3a:c9:67:a7:ef:28:35:b9:45:5d:a7:4d:25:88:
4c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:71:FC:89:85:32:D8:EB:FC:3D:6E:8D:5D:51:3C:14:80:24:84:E0
X509v3 Authority Key Identifier:
keyid:D6:43:AE:C2:2F:81:9C:F0:1F:2C:63:63:03:5D:97:F8:E0:E3:82:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/eHH8iYUy2Ov8PW6NXVE8FIAkhOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.156.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:e9:1e:48:2e:5f:54:16:da:98:c9:61:2d:9a:ae:d6:68:50:
11:f3:32:12:36:48:ce:83:34:d5:dd:76:3b:ef:47:af:60:6d:
74:55:47:12:cd:53:aa:bd:03:8f:c8:23:9b:ab:c1:d1:af:a8:
c7:6d:cc:79:a6:c5:d7:81:8e:3d:27:8e:cb:3e:69:26:dc:d2:
4a:1a:67:c6:27:b4:07:4e:cc:59:ad:d8:99:63:3a:33:4a:64:
88:03:61:b8:04:22:71:b6:bb:34:f8:05:05:ac:a1:a7:ad:67:
02:7f:d5:30:e7:cc:5b:ab:c5:69:d8:86:90:f5:1e:eb:84:3a:
dc:10:1e:97:e4:01:c5:0c:e1:b2:d6:f4:e1:a8:c4:39:25:94:
d9:4e:0d:b8:34:24:e4:14:3c:5e:b2:a7:d8:95:30:e1:84:b5:
12:05:99:5d:52:0c:8d:1a:85:7d:22:6c:ab:0e:cc:ed:a0:74:
19:1c:aa:96:2f:37:8a:53:36:34:a2:a2:8b:a3:1f:99:a8:61:
d0:25:d7:ff:bf:45:52:14:ae:79:1a:58:76:1b:af:8e:82:cf:
88:ba:b5:43:3f:b4:e3:55:a0:c9:6c:da:a3:48:7a:b5:25:e3:
df:d7:1f:77:ad:2c:4c:61:f3:85:fb:9b:f8:eb:3f:a3:f6:bf:
c1:d6:10:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:23 2024 by rpki-client on console-ams.rpki-client.org