Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/jFai9H4UNo40pK7PT8I1fts3adI.roa
File: jFai9H4UNo40pK7PT8I1fts3adI.roa (raw, json)
Hash identifier: 1uuy5cYNFuCW/PNNM+mYgRryA/2Xpz4vIrCKr9JNs6k=
Subject key identifier: 8C:56:A2:F4:7E:14:36:8E:34:A4:AE:CF:4F:C2:35:7E:DB:37:69:D2
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 01862B5C86EB093D073EC8D4E7FE6E1318C4
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/jFai9H4UNo40pK7PT8I1fts3adI.roa
Signing time: Tue 07 Feb 2023 10:12:09 +0000
ROA not before: Tue 07 Feb 2023 10:12:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51102
IP address blocks: 45.86.242.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2b:5c:86:eb:09:3d:07:3e:c8:d4:e7:fe:6e:13:18:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Feb 7 10:12:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c56a2f47e14368e34a4aecf4fc2357edb3769d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6f:b3:a1:21:75:0e:e2:c2:47:2a:4c:45:74:
5c:0e:e4:ea:9c:16:46:40:72:23:95:a8:8c:af:4b:
aa:bb:35:74:a1:f6:d0:fb:cc:32:6f:b6:4a:af:4a:
7d:d2:a8:e5:c5:82:9b:19:e2:3b:6f:18:3c:0a:16:
f3:dc:79:df:3d:61:3e:45:ae:5d:09:ee:da:79:34:
45:72:cd:53:ae:64:5e:75:7e:8f:77:2b:cf:32:ea:
de:31:99:03:b3:6b:c9:7e:23:5c:3c:83:90:42:a9:
a3:04:0b:93:56:9f:a5:54:37:4b:ea:c7:51:e8:1e:
7b:de:dc:59:0a:75:9c:0c:5e:5b:48:fe:08:fb:c3:
9f:18:7c:31:ed:a2:58:4a:fa:dc:4b:d4:56:3f:dc:
2a:d8:aa:04:b1:2c:d3:69:b7:02:f2:9e:7f:86:87:
76:f8:bd:85:ca:b5:b6:12:91:a4:af:a6:68:27:52:
fe:81:52:cf:4d:88:77:d1:3a:ab:69:6f:8f:2f:16:
d9:14:20:1d:ca:5f:52:02:b0:c4:ad:0a:78:1d:9f:
ef:c2:00:2d:df:69:0c:e7:fe:51:8a:0c:94:cc:b0:
33:f6:5e:5f:0c:44:96:b9:2f:dd:9f:9f:6b:98:0f:
64:26:24:9c:ce:ee:70:54:9a:bb:47:d8:a3:30:e4:
7f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:56:A2:F4:7E:14:36:8E:34:A4:AE:CF:4F:C2:35:7E:DB:37:69:D2
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/jFai9H4UNo40pK7PT8I1fts3adI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.242.0/23
Signature Algorithm: sha256WithRSAEncryption
be:ae:13:5c:08:f6:27:de:34:69:b2:32:86:fe:c7:a8:af:31:
ce:94:8c:35:e5:11:62:e7:9a:0a:e6:db:e9:38:b2:8c:05:1d:
92:a5:73:4e:d4:26:97:02:e2:54:c0:15:e8:c9:63:cd:e8:a5:
bc:43:be:03:f6:2a:c0:09:41:69:aa:6d:6a:af:31:fb:19:93:
b8:7b:8c:22:43:3b:e5:15:ca:f6:65:16:e6:15:7c:01:42:13:
5f:54:6d:b6:84:39:9f:1f:4d:b4:8a:61:7b:86:6b:88:c4:0a:
12:ff:e8:24:d9:33:e8:5a:c4:37:21:3e:10:77:0a:bc:1a:f1:
94:19:c5:12:bc:af:ea:47:fd:a0:d8:40:b5:6f:b1:64:2b:41:
29:bc:37:bb:2e:8b:27:ed:e9:63:61:fb:ac:82:24:20:73:b8:
90:06:8f:d0:34:fc:4b:48:79:69:ae:ea:31:09:7b:43:b3:eb:
fd:ba:5a:37:af:c1:73:b6:50:51:c0:c6:f9:bf:03:83:e6:6e:
6f:0d:c7:6b:cf:9b:b9:93:33:de:f6:d1:50:65:24:81:3b:62:
f7:10:25:f6:11:fc:fc:79:d3:97:56:8c:f9:03:b5:47:5f:4c:
08:6b:aa:02:f0:dd:2e:06:03:27:1a:56:f5:36:fc:82:24:d9:
cf:74:9c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:47 2024 by rpki-client on console-ams.rpki-client.org