Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/B6npM8oP4tqVMJ_cJRLeTlPGOxk.roa
File: B6npM8oP4tqVMJ_cJRLeTlPGOxk.roa (raw, json)
Hash identifier: Ei2rd32aM5n08qxHsyP4PtPoAHosqTOSBwvJOM8WJy4=
Subject key identifier: 07:A9:E9:33:CA:0F:E2:DA:95:30:9F:DC:25:12:DE:4E:53:C6:3B:19
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 01856C6EF5F6A6AFA5D252ADB80F7A79BB14
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/B6npM8oP4tqVMJ_cJRLeTlPGOxk.roa
Signing time: Sun 01 Jan 2023 08:24:49 +0000
ROA not before: Sun 01 Jan 2023 08:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39081
IP address blocks: 45.67.37.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6e:f5:f6:a6:af:a5:d2:52:ad:b8:0f:7a:79:bb:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Jan 1 08:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07a9e933ca0fe2da95309fdc2512de4e53c63b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b6:74:60:e8:a9:29:be:e4:7f:ab:45:1b:ac:
19:7d:cc:0d:f4:f3:05:cb:9d:d2:ea:fd:1f:11:83:
26:25:76:b1:f1:71:bf:81:cb:c9:f6:2a:f7:59:21:
9c:86:58:83:4a:6b:5f:5a:7f:a1:b9:1e:43:de:3b:
e4:46:8b:87:c0:7d:ff:4f:92:0a:88:36:75:c7:ef:
2d:9c:1a:58:46:1f:a5:cd:30:f3:b5:d7:e0:e7:94:
c3:76:7e:59:ba:c8:7f:40:14:7b:bb:4a:1f:8b:35:
9a:d5:78:be:7d:ea:7b:39:6a:76:82:77:d3:32:7a:
f3:38:53:8b:d1:0c:e2:7b:f6:1f:f0:63:d9:a5:0c:
61:7b:e2:8b:71:7e:1c:0c:f1:d0:db:90:00:ef:04:
fb:51:e8:41:95:3f:38:b2:c9:4b:d1:f8:33:ff:77:
d0:4e:03:6a:49:41:f6:eb:9d:96:91:06:28:8a:e0:
e3:2e:ee:89:ae:15:a6:97:1b:2b:d7:e0:56:f1:f6:
11:34:e6:03:cf:88:63:e5:ec:27:15:1f:02:e2:fa:
d2:45:f6:ee:50:e1:1e:96:56:4c:7d:60:9b:dc:02:
ac:22:5e:15:21:bc:1e:48:28:28:d5:61:bb:97:5e:
2e:07:66:75:72:14:7e:74:41:e3:1a:fb:ea:f7:6c:
59:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A9:E9:33:CA:0F:E2:DA:95:30:9F:DC:25:12:DE:4E:53:C6:3B:19
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/B6npM8oP4tqVMJ_cJRLeTlPGOxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.37.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:b8:00:22:ee:67:e9:d9:61:57:8e:32:61:f3:70:74:c1:c4:
05:19:51:3d:59:4a:7a:da:0d:ba:39:58:33:29:6a:bc:73:92:
49:31:0c:43:a2:f9:d4:0a:2b:bd:39:c9:ab:75:22:8f:65:6f:
97:d4:f7:19:c8:38:eb:47:56:9e:5e:87:ad:85:eb:31:0e:ce:
0b:1d:b0:ab:e0:b1:3e:a9:68:15:be:4c:fe:c5:07:ab:36:02:
3f:7a:fe:6d:83:5c:c2:8c:f8:23:30:2f:6a:70:2a:2a:5f:b1:
5d:4b:49:a2:fe:80:fa:66:97:d9:c1:c8:de:4a:ef:bb:51:eb:
47:a5:e2:36:1c:36:2f:2a:a6:cd:3d:33:ba:46:e4:8c:1c:f5:
00:7d:52:1d:3f:b0:03:33:08:40:6c:c9:f4:6c:96:fe:eb:a1:
0b:d5:5d:06:f6:49:c1:cb:74:33:9d:bb:d1:ec:85:cc:4a:cc:
84:f8:47:27:1a:a9:79:ee:0b:97:d6:1a:8c:5f:89:fd:e6:6c:
d0:c0:8f:d4:ec:7a:5e:85:3d:a8:24:1e:e1:58:a6:07:a8:15:
8f:7a:99:7c:12:76:89:3f:cd:ac:fa:b5:1b:1b:77:f9:d3:bb:
e2:59:b0:e5:52:2f:37:21:cb:b8:55:ae:1e:b9:8b:ad:21:4f:
a6:32:73:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:54 2023 by rpki-client on console-ams.rpki-client.org