Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/xSYjouQEtTPPZKSZ3Z9pd3__z-s.roa
File: xSYjouQEtTPPZKSZ3Z9pd3__z-s.roa (raw, json)
Hash identifier: D2ALQAp6pm262LYYFrEEzLUudYGU5ijEPfvjEPfIEbc=
Subject key identifier: C5:26:23:A2:E4:04:B5:33:CF:64:A4:99:DD:9F:69:77:7F:FF:CF:EB
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01856F798003ADA879203C62BD4D0B67B6B4
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/xSYjouQEtTPPZKSZ3Z9pd3__z-s.roa
Signing time: Sun 01 Jan 2023 22:35:11 +0000
ROA not before: Sun 01 Jan 2023 22:35:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42831
IP address blocks: 45.86.203.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:80:03:ad:a8:79:20:3c:62:bd:4d:0b:67:b6:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 22:35:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c52623a2e404b533cf64a499dd9f69777fffcfeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2f:ab:47:47:0f:d2:27:10:30:0f:c5:c5:bb:
19:76:44:68:14:7b:51:06:ee:76:18:58:6e:0c:41:
5a:85:48:70:26:3d:d2:a1:0e:88:a0:65:94:b5:86:
30:e9:0c:ce:48:27:ee:0d:a9:a0:17:9a:fb:21:e9:
61:a7:a2:04:f0:fe:ad:bb:f9:d0:4f:9f:09:af:90:
e9:38:01:ef:e8:f1:78:13:e8:6d:45:f2:e2:54:85:
91:4a:2c:2a:f7:bb:a5:80:7d:c4:fd:1a:d7:d2:d1:
58:60:65:ca:9a:c5:3d:bc:a5:17:3b:d2:89:36:b2:
1d:1d:75:ff:3f:58:16:e9:63:13:24:c7:3f:82:f7:
95:cb:2f:d8:a7:d2:6f:71:d2:6b:75:f5:d9:a1:f4:
93:b7:a8:5e:6e:86:78:10:ff:bd:ec:52:f6:90:52:
da:a1:2d:f9:24:42:ac:d4:04:ea:99:97:bf:c1:c1:
e3:0c:9a:4c:73:4e:fd:d6:87:e2:bb:30:55:43:0c:
1b:19:5c:ba:99:e3:dc:e4:1c:c0:86:6f:c3:e4:90:
49:26:ba:ed:59:40:cd:3b:83:d8:44:6c:a8:c5:89:
02:f6:21:d2:e6:d2:24:9e:65:d8:69:d8:16:9e:ad:
b9:f0:bb:ea:1e:af:6e:77:e1:cb:45:55:c6:1b:45:
e1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:26:23:A2:E4:04:B5:33:CF:64:A4:99:DD:9F:69:77:7F:FF:CF:EB
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/xSYjouQEtTPPZKSZ3Z9pd3__z-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.203.0/24
Signature Algorithm: sha256WithRSAEncryption
77:71:56:d8:92:ea:27:ba:99:dd:c3:e5:40:35:c1:d4:34:1d:
14:fc:12:b4:ce:d9:76:58:43:b4:cd:f6:de:24:76:19:f4:53:
3f:bd:62:c4:14:58:c2:bd:2c:28:ed:19:5b:17:6d:42:bb:7a:
89:ae:41:a0:b3:b7:dd:46:3d:77:66:98:18:7a:2c:43:57:af:
d9:bf:d8:8f:23:89:7b:7b:5f:03:21:fa:6c:f9:1e:41:f3:d5:
cb:ea:b7:ea:87:c9:e5:41:52:2c:14:ff:eb:98:36:75:b0:9a:
b7:e8:ba:11:d3:b7:92:27:15:74:f5:4d:3b:21:71:31:48:76:
34:a0:49:37:d9:12:88:1b:7b:fa:1b:3c:c6:1e:ec:4b:3f:2b:
6b:00:1e:ae:bf:0b:5a:1f:13:73:34:06:45:e0:f8:f1:14:c9:
6b:69:78:ad:95:73:8e:37:81:49:7a:e3:38:6d:45:e0:bc:ec:
da:0c:36:7c:d7:d8:72:87:0e:26:db:f7:a0:0e:65:38:09:ab:
07:78:e8:e4:7c:be:d9:76:d1:44:39:40:35:46:3e:59:6e:7d:
5b:56:4b:17:c4:b9:10:fa:06:a3:99:6e:cb:75:c0:ff:d8:d6:
46:6a:f6:95:38:39:1d:48:e2:0b:25:fb:48:6b:2a:4e:1e:0c:
e1:7c:64:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:43 2024 by rpki-client on console-ams.rpki-client.org