Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/XwzlHPz_sYjxh6MZ0U9C2jhryw0.roa
File: XwzlHPz_sYjxh6MZ0U9C2jhryw0.roa (raw, json)
Hash identifier: 61z5088Jy/ivuBbKFtzDUpmIrEVqRuBcQhPhp1VV0fo=
Subject key identifier: 5F:0C:E5:1C:FC:FF:B1:88:F1:87:A3:19:D1:4F:42:DA:38:6B:CB:0D
Certificate issuer: /CN=16d31b2d899d6eb2bcb7a4d78cc3100dce30c90c
Certificate serial: 0187061F9904B8EFC7F757E931C74CF32DF3
Authority key identifier: 16:D3:1B:2D:89:9D:6E:B2:BC:B7:A4:D7:8C:C3:10:0D:CE:30:C9:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/XwzlHPz_sYjxh6MZ0U9C2jhryw0.roa
Signing time: Tue 21 Mar 2023 21:42:26 +0000
ROA not before: Tue 21 Mar 2023 21:42:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208600
IP address blocks: 45.93.88.0/23 maxlen: 23
185.48.147.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:06:1f:99:04:b8:ef:c7:f7:57:e9:31:c7:4c:f3:2d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d31b2d899d6eb2bcb7a4d78cc3100dce30c90c
Validity
Not Before: Mar 21 21:42:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f0ce51cfcffb188f187a319d14f42da386bcb0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:21:48:9c:73:bf:57:d5:82:25:d0:f9:23:48:
ff:42:4f:d3:76:b9:e6:9e:e0:4e:66:23:3c:11:af:
f3:21:37:8c:74:71:8c:47:65:c9:0e:6b:f4:e0:8a:
9a:a0:94:92:3a:eb:10:2c:97:0b:3d:d1:92:3b:c0:
81:6a:d9:54:9a:44:bd:53:19:fb:e1:ef:cb:f2:7f:
a4:f8:d3:d8:7f:d2:75:00:08:d5:96:7a:54:14:5e:
6b:e5:37:b3:f9:6d:59:db:e7:40:a9:18:44:fc:3c:
aa:d7:bb:37:3e:e8:ef:49:60:02:94:40:dd:b5:0d:
76:3b:15:0c:30:7c:fc:0a:0c:0b:a6:eb:80:3b:53:
99:ec:46:39:cf:07:24:ef:b5:f3:bc:f7:a0:82:9c:
70:d5:d4:de:3b:88:5a:91:95:45:ad:b9:85:bb:c9:
80:5b:40:50:27:51:20:5b:98:d8:24:e0:19:1f:85:
4f:7d:3d:a7:1d:79:09:35:53:38:bc:89:95:25:49:
f4:b3:6f:34:dd:8e:33:d7:77:23:5f:97:63:cd:4e:
62:d4:6c:a6:09:fd:3a:f1:ef:40:be:7a:37:fe:0f:
52:dd:ab:4c:47:d4:56:ca:a2:7a:6a:d4:38:f8:c7:
b2:6c:bd:72:60:81:3d:23:35:96:3c:24:77:4f:69:
ea:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0C:E5:1C:FC:FF:B1:88:F1:87:A3:19:D1:4F:42:DA:38:6B:CB:0D
X509v3 Authority Key Identifier:
keyid:16:D3:1B:2D:89:9D:6E:B2:BC:B7:A4:D7:8C:C3:10:0D:CE:30:C9:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/XwzlHPz_sYjxh6MZ0U9C2jhryw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.88.0/23
185.48.147.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:7b:45:4a:75:76:2a:30:31:b0:ca:a7:42:ee:9d:41:4e:36:
c7:37:9a:53:d8:bc:5b:c0:94:d3:f6:1e:0f:60:3e:eb:61:3a:
5c:b0:75:d8:16:51:40:a1:56:8c:f5:d8:2b:d9:36:2b:99:63:
d4:64:1e:42:ad:80:b3:83:61:31:c9:c0:3c:7d:a3:25:5f:ed:
97:67:e9:2c:b3:2d:b8:d5:d4:ce:d3:68:b8:c0:ff:cf:b6:33:
0e:7a:8a:ed:a4:73:26:9c:8a:ae:09:47:9e:26:ca:65:cb:b4:
fb:3b:49:38:0c:26:58:a6:64:85:60:fa:f0:29:2c:ad:2a:dd:
a8:56:c7:0a:73:35:e6:f8:2b:ad:0c:74:b2:dc:44:c0:8b:1c:
02:09:86:7c:ad:91:75:31:14:51:ce:47:57:b6:39:7f:9d:3b:
74:04:56:59:97:a1:e2:2b:44:d5:fc:b3:74:3e:60:0a:57:80:
b1:b2:51:4e:e6:ed:02:fc:d5:07:63:ed:70:5f:1b:c7:7c:ec:
8d:d5:c0:d0:70:8c:3d:7a:2d:37:68:5b:83:ea:b3:e8:10:b5:
43:df:a7:bf:67:64:c2:d9:c5:35:84:d8:e0:f7:2d:95:da:8f:
ea:b3:16:34:af:b6:af:10:5e:10:26:5b:07:87:00:2d:a2:0c:
dc:76:b7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 4 13:01:19 2023 by rpki-client on console-fra.rpki-client.org