Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/FgB6BVuF3a6R8ArRQFAl2nOqCc4.roa
File: FgB6BVuF3a6R8ArRQFAl2nOqCc4.roa (raw, json)
Hash identifier: eQpSKG41KWdRLyMXbfIq/MNGTAPl2jK9HKvidd5rpSc=
Subject key identifier: 16:00:7A:05:5B:85:DD:AE:91:F0:0A:D1:40:50:25:DA:73:AA:09:CE
Certificate issuer: /CN=1f65ccef140ff30e4d7da9bf70516a03f3cc0801
Certificate serial: 01856DAF65ED1A7EF07193DA88A9915477B6
Authority key identifier: 1F:65:CC:EF:14:0F:F3:0E:4D:7D:A9:BF:70:51:6A:03:F3:CC:08:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/FgB6BVuF3a6R8ArRQFAl2nOqCc4.roa
Signing time: Sun 01 Jan 2023 14:14:49 +0000
ROA not before: Sun 01 Jan 2023 14:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209047
IP address blocks: 45.9.33.0/24 maxlen: 24
45.9.32.0/24 maxlen: 24
45.9.35.0/24 maxlen: 24
45.9.32.0/22 maxlen: 22
45.9.34.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:af:65:ed:1a:7e:f0:71:93:da:88:a9:91:54:77:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f65ccef140ff30e4d7da9bf70516a03f3cc0801
Validity
Not Before: Jan 1 14:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16007a055b85ddae91f00ad1405025da73aa09ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:16:35:04:e4:fe:b9:45:fa:ac:b8:4a:bb:d9:
8b:a1:83:19:e6:30:b7:54:c0:c4:74:de:48:23:e5:
9a:c1:8d:7e:c3:96:ca:13:17:89:b9:a6:f0:4b:0b:
9b:5e:ed:db:b2:fa:27:39:a0:02:89:9b:43:80:8d:
c1:a6:7d:53:1f:4e:71:a2:6f:c4:15:94:25:30:74:
3e:1a:40:3b:20:b5:b1:14:93:4d:07:ca:58:1f:90:
11:08:24:1c:3a:38:a1:82:5c:08:60:f1:60:7c:01:
aa:5f:31:43:7e:6e:b4:58:59:40:33:0a:e9:a9:a6:
1c:70:5d:a6:74:9d:1a:a2:e5:4a:a4:34:d3:62:f1:
e3:3a:58:66:ca:86:c0:5e:63:46:73:6b:5e:d2:dc:
28:11:0a:64:c2:86:c3:93:cf:22:b6:3e:b6:62:f2:
63:b0:e1:82:50:31:65:33:2a:1f:23:70:0d:8a:cd:
af:6d:09:17:6a:dc:0b:6a:7b:d4:b1:c6:1d:3c:46:
10:ba:2f:8d:02:64:9e:0d:ff:6a:79:d6:44:b1:bb:
36:53:c0:38:0c:14:c8:f8:5e:ca:22:9c:0f:aa:74:
27:2e:7d:5a:46:ba:ad:88:33:c7:d4:56:78:f1:a8:
ad:5b:51:64:7b:94:ba:c2:50:ff:ee:4a:76:37:96:
67:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:00:7A:05:5B:85:DD:AE:91:F0:0A:D1:40:50:25:DA:73:AA:09:CE
X509v3 Authority Key Identifier:
keyid:1F:65:CC:EF:14:0F:F3:0E:4D:7D:A9:BF:70:51:6A:03:F3:CC:08:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/FgB6BVuF3a6R8ArRQFAl2nOqCc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.32.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:14:36:b3:83:20:6b:e2:f6:f5:fb:89:35:48:e5:3d:7e:f0:
8b:39:ca:f9:46:59:c9:50:19:bf:fc:d7:01:5b:1d:92:aa:ed:
74:d8:0c:7c:62:be:9f:a3:35:0b:df:91:48:32:35:62:63:19:
a1:16:cc:f8:5d:53:a8:f9:87:fd:6f:09:ff:80:ef:72:08:61:
a0:d3:0a:0b:2f:58:eb:17:56:89:12:c4:94:76:4f:15:0a:1f:
30:c6:4b:ed:40:31:d5:66:2a:80:09:b9:da:7e:11:fe:3e:90:
9a:06:8d:72:c1:89:c0:49:64:d7:9f:a0:5b:74:b8:b1:47:c2:
37:8c:2f:b1:4f:5c:44:bc:4f:a4:f5:79:82:f3:55:0b:59:26:
41:e6:5b:2a:2e:b8:8c:85:d5:a9:11:b1:16:f5:f4:06:eb:cf:
72:14:8c:bb:28:51:58:ee:d0:02:64:d9:0b:2b:d8:65:55:d8:
fb:0c:bb:b1:cb:f9:fc:a4:43:63:1c:de:49:45:36:da:88:14:
37:d0:f9:ae:e2:96:1d:d9:d4:a3:b8:59:ab:79:33:30:15:de:
ac:6b:0d:a9:3a:d2:d2:be:54:db:15:67:f0:d9:f0:27:0f:59:
14:c7:a0:3d:52:a4:c5:1b:cc:b5:e9:fb:29:33:71:48:5f:70:
e2:13:03:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:41:05 2024 by rpki-client on console-ams.rpki-client.org