Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/SXoC_eZJw21sgDc44fGKl9WOo50.roa
File: SXoC_eZJw21sgDc44fGKl9WOo50.roa (raw, json)
Hash identifier: 2ExZYJejemw6lWx+ELlq+5DXTnDdIk1Hx3YLPkHktnw=
Subject key identifier: 49:7A:02:FD:E6:49:C3:6D:6C:80:37:38:E1:F1:8A:97:D5:8E:A3:9D
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01856F79750E172B62BD766AFAF061698438
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/SXoC_eZJw21sgDc44fGKl9WOo50.roa
Signing time: Sun 01 Jan 2023 22:35:08 +0000
ROA not before: Sun 01 Jan 2023 22:35:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9335
IP address blocks: 45.144.164.0/22 maxlen: 24
45.91.132.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:75:0e:17:2b:62:bd:76:6a:fa:f0:61:69:84:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 22:35:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=497a02fde649c36d6c803738e1f18a97d58ea39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:16:f0:e9:dd:d7:64:ff:84:8a:32:b2:5d:91:
71:50:98:04:2f:4d:b8:0d:5a:70:83:60:de:7a:e2:
f0:60:0c:1a:2c:10:af:cd:8d:86:61:a9:13:60:f2:
3f:aa:78:24:06:a3:5f:81:22:39:1a:92:f1:34:38:
cb:aa:69:36:98:7e:16:13:36:76:a9:b8:76:ef:72:
fa:8d:1e:43:55:50:bf:6d:f4:c3:0d:33:8f:15:e3:
f9:24:16:c2:f9:26:07:d6:57:f6:44:8e:f4:cc:1f:
1d:f0:43:75:4c:a9:8c:5d:0f:5c:f0:f8:3e:9b:97:
70:40:52:51:f1:a7:52:ae:21:b8:76:6e:5c:a7:7c:
31:1f:ea:ae:d3:28:fe:bc:ec:6e:10:79:a5:86:f5:
74:c7:db:b2:74:55:f9:1e:27:a1:c9:ee:08:58:da:
20:c8:b3:7f:79:b1:2f:e0:8a:04:ec:66:44:2b:34:
f8:cc:21:4d:97:1e:b0:4c:0a:10:c1:66:67:67:69:
00:2f:b4:01:f9:88:7c:95:18:50:4e:ea:bf:d4:f3:
8a:82:55:2e:bf:b1:9c:43:48:2b:96:07:56:98:2d:
cd:95:df:68:a3:ff:e8:d1:27:8f:b0:9c:a1:29:f5:
fd:ca:ee:1c:69:8c:ae:e4:38:18:cc:bc:59:ad:53:
49:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7A:02:FD:E6:49:C3:6D:6C:80:37:38:E1:F1:8A:97:D5:8E:A3:9D
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/SXoC_eZJw21sgDc44fGKl9WOo50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.132.0/24
45.144.164.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:4f:5b:15:7d:70:90:ea:41:ca:5d:b8:47:7f:bc:e4:ef:2c:
e8:50:ed:54:59:49:7a:b0:18:3b:50:c5:58:f8:a3:68:87:05:
22:02:17:bc:8c:bc:ce:23:1d:0a:74:de:03:ae:46:05:15:e8:
d7:4d:64:51:64:36:73:6b:1c:b6:64:ba:70:3f:22:a3:aa:46:
d8:11:34:16:de:16:ea:14:dc:64:6b:52:83:c9:8e:87:2e:25:
4d:c2:b9:37:92:62:d3:0b:6d:3c:f2:1d:ed:d5:5c:a2:86:94:
37:43:49:aa:36:ce:e7:e8:58:af:53:cf:87:7c:de:ab:a2:53:
31:93:b8:67:32:6f:41:c6:b8:57:c7:f4:7d:55:ed:08:e4:7f:
46:1c:7d:30:39:6a:09:41:a5:91:f9:f8:54:7d:0e:cf:4a:d5:
be:14:a9:9b:40:6b:25:cb:89:be:dd:ff:af:2d:fd:c9:bb:0c:
d9:e1:1d:65:5d:90:5b:e0:4a:48:4c:0c:a6:ce:db:31:27:19:
69:9e:85:31:68:1b:1b:4f:1f:87:51:3c:2a:88:e8:80:b6:50:
6e:95:92:f7:cc:ab:6f:13:02:4e:69:ef:19:a8:55:e7:c6:83:
aa:5b:e2:8f:dd:c7:3b:68:6f:b8:24:cc:22:e9:c3:c9:95:dd:
f5:54:bf:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:43 2024 by rpki-client on console-ams.rpki-client.org