Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/RYzkU5KAIAn_wTazUw7eBLbWMOA.roa
File: RYzkU5KAIAn_wTazUw7eBLbWMOA.roa (raw, json)
Hash identifier: CqtknnM/gpEp0I+FJFBsybwnJtoPYCtvDlXZKlG/Yn8=
Subject key identifier: 45:8C:E4:53:92:80:20:09:FF:C1:36:B3:53:0E:DE:04:B6:D6:30:E0
Certificate issuer: /CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
Certificate serial: 018CAB0E6C4224E2E60FEDB1E03A9C2C7440
Authority key identifier: 6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/RYzkU5KAIAn_wTazUw7eBLbWMOA.roa
Signing time: Wed 27 Dec 2023 11:34:58 +0000
ROA not before: Wed 27 Dec 2023 11:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204451
IP address blocks: 45.14.175.0/24 maxlen: 24
45.14.173.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ab:0e:6c:42:24:e2:e6:0f:ed:b1:e0:3a:9c:2c:74:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
Validity
Not Before: Dec 27 11:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=458ce45392802009ffc136b3530ede04b6d630e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:26:42:7f:4b:a1:99:81:f1:0a:f0:ae:30:ac:
ae:d9:26:ac:99:96:7c:89:0e:20:0c:29:af:ef:cf:
b9:b7:53:de:93:a5:5e:53:b0:3e:30:cf:51:7e:88:
77:8f:c9:19:a2:b9:9c:9b:0f:ed:df:54:52:4b:28:
54:5e:77:a0:38:e8:79:2c:ba:c7:65:87:38:2d:ed:
5d:14:9d:3a:12:19:ca:03:cb:40:e8:80:7b:89:0d:
9f:16:f1:66:bb:47:d7:6d:15:40:e5:d9:fc:ff:d1:
2e:5b:25:05:66:89:7e:70:57:51:53:5a:c3:f3:80:
3d:37:ca:d8:d8:33:e3:6f:8a:d3:d2:19:86:55:1b:
6e:89:e4:4d:ba:01:6e:67:78:22:56:06:de:80:7c:
f9:cf:39:39:62:49:51:55:9b:da:e2:6d:f2:1e:10:
f8:50:6b:87:1e:1d:93:3c:cd:cb:84:da:cd:ed:dc:
be:3e:a6:47:25:f6:b8:2a:78:8b:f8:93:3a:1b:4f:
d4:75:1e:c9:33:44:68:7d:98:11:c7:97:08:34:c5:
2e:f9:7f:58:c7:51:38:0c:35:29:11:06:e6:f6:1e:
9d:a8:58:51:f2:55:66:58:1b:1b:15:9f:e1:d6:a6:
18:af:e7:2a:b9:c8:09:8f:2a:82:ac:3a:40:d6:45:
fd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:8C:E4:53:92:80:20:09:FF:C1:36:B3:53:0E:DE:04:B6:D6:30:E0
X509v3 Authority Key Identifier:
keyid:6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/RYzkU5KAIAn_wTazUw7eBLbWMOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.173.0/24
45.14.175.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:2e:ae:4c:18:60:44:a6:ab:34:76:24:67:67:f9:23:87:4c:
b9:e1:9d:2e:aa:66:3a:9a:f9:e1:d8:59:80:1c:40:23:1a:55:
15:f2:b5:02:f7:e4:6e:0c:7e:6d:9a:e4:8c:23:9c:51:c4:99:
f4:f8:a2:77:83:5b:5a:d4:25:de:d5:ad:03:22:3b:e5:97:ed:
f0:9c:a2:17:83:07:fc:c8:d0:77:85:9d:f1:d7:c3:ed:b3:0e:
3c:ae:dc:48:05:99:44:24:74:51:78:80:de:b8:f3:22:cf:0f:
4d:10:3c:1e:f4:72:9e:69:c0:1b:bf:4c:02:77:76:c2:52:bc:
52:18:07:b8:83:27:eb:1d:37:8f:23:05:2e:bd:e0:37:94:32:
18:7c:90:cc:8f:ff:c9:5a:95:3c:85:dd:3d:86:ca:79:ec:28:
55:27:c9:ce:24:65:f2:2e:0c:99:17:bf:f1:79:19:28:72:9e:
bb:02:bb:d6:2d:3e:29:ed:54:c1:8f:33:a3:2f:0e:85:68:4b:
08:c9:98:f3:c7:fc:db:94:77:94:b6:16:d0:f2:97:06:b8:da:
a0:08:5a:96:73:5a:9a:42:7a:b2:db:1a:7b:e8:96:9e:8e:ab:
4a:c9:fe:6d:d3:ef:10:72:a6:1c:a3:78:4f:95:62:3a:06:b3:
e5:d1:d1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:28 2024 by rpki-client on console-fra.rpki-client.org