Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/qCiQuqXOTLsypqJ745_AYl4VcT0.roa
File: qCiQuqXOTLsypqJ745_AYl4VcT0.roa (raw, json)
Hash identifier: fUOLkmXKWNoFUlgD0NiSK6Z1evt41YyhjcKF1w8l+PQ=
Subject key identifier: A8:28:90:BA:A5:CE:4C:BB:32:A6:A2:7B:E3:9F:C0:62:5E:15:71:3D
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 018AAC409D1D32532AAB6193A30609E432FE
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/qCiQuqXOTLsypqJ745_AYl4VcT0.roa
Signing time: Tue 19 Sep 2023 07:03:50 +0000
ROA not before: Tue 19 Sep 2023 07:03:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20668
IP address blocks: 45.91.4.0/24 maxlen: 24
45.91.6.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ac:40:9d:1d:32:53:2a:ab:61:93:a3:06:09:e4:32:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Sep 19 07:03:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a82890baa5ce4cbb32a6a27be39fc0625e15713d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ba:5a:ca:46:a3:31:98:0f:df:7f:07:55:82:
b0:9c:01:a1:47:0d:39:ef:9f:90:e7:a8:62:12:a3:
e3:0d:7a:7b:c0:6d:e4:26:ff:b3:e7:20:f0:d4:b9:
40:ac:4e:bf:ba:ab:0f:e5:c4:c2:56:9d:99:2d:89:
25:88:27:08:f5:af:b8:56:10:0a:3c:62:6a:2c:09:
12:ed:cc:13:82:58:5d:34:2b:8b:d3:08:28:a4:5e:
6d:bb:d2:cd:ac:d8:58:c9:49:3e:a8:e0:00:0a:7c:
93:ff:c1:14:cf:9e:e9:f9:ae:95:e8:f5:3c:62:c2:
41:30:5c:2c:b7:29:e6:b7:b7:b4:93:75:7d:5d:9d:
f7:3f:de:71:a1:ec:00:c6:72:6f:e5:57:99:95:05:
65:a4:78:1d:05:9a:20:e9:8d:a5:e3:33:07:02:91:
f4:0e:eb:eb:2b:e3:98:94:7d:86:6d:04:d7:f8:d1:
69:6c:db:77:cd:31:03:49:4f:1e:83:e0:74:01:62:
c1:e3:fe:1e:49:c4:41:67:a5:ce:05:1f:1f:46:e3:
d8:18:ef:e8:a8:6d:b2:83:73:aa:74:1a:92:b5:51:
bf:b0:f8:b6:19:dc:25:8b:01:a3:f0:03:cd:fc:6a:
cf:39:88:2e:92:39:9d:7e:4f:b4:1e:62:23:58:2d:
80:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:28:90:BA:A5:CE:4C:BB:32:A6:A2:7B:E3:9F:C0:62:5E:15:71:3D
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/qCiQuqXOTLsypqJ745_AYl4VcT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.4.0/24
45.91.6.0/24
Signature Algorithm: sha256WithRSAEncryption
59:9b:db:dd:4c:d3:b6:b6:d9:58:6c:04:c2:7d:86:12:c0:4f:
64:e4:f7:32:c1:4c:12:4f:c8:2b:2b:5b:0e:bb:2e:26:65:08:
d1:9c:18:38:ef:f8:5e:8a:6c:fd:83:44:bf:24:66:af:a1:39:
34:dc:fa:13:eb:33:0c:41:a5:b8:bf:de:77:ce:a8:00:c9:f5:
6f:d4:e4:fd:61:2d:5c:89:73:a3:ed:21:6a:f2:fd:58:d6:1d:
47:d0:18:ec:5e:cc:b4:a6:d3:e4:b7:a2:4a:0e:b9:c0:ef:98:
ca:57:44:79:8e:86:9f:67:cf:07:1d:f4:46:fb:8f:fe:46:a0:
a3:8e:bd:61:02:7e:ba:49:aa:25:b3:09:c5:52:ef:ca:c6:58:
fc:e8:0b:67:80:f1:7c:7f:a4:24:d1:7b:9b:b1:7e:a9:18:58:
25:74:2f:b7:11:7d:8b:48:1c:a7:35:49:5b:c6:6a:be:b3:70:
0a:26:9a:1a:c4:06:8e:c0:74:9f:01:48:ca:e9:99:8f:9b:a3:
29:14:fa:87:4b:28:00:0d:e3:f9:70:31:3a:ff:14:d5:b4:89:
b6:4d:de:a7:c8:d2:de:17:07:37:ea:b1:bb:48:29:ea:58:e9:
4e:d7:58:85:77:f1:24:88:55:a9:f1:5d:70:e6:82:2e:0f:a6:
61:00:68:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 19 07:56:35 2023 by rpki-client on console-fra.rpki-client.org