Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/xZHP5iJJgZS40RWpLYYoZ08T-Yw.roa
File: xZHP5iJJgZS40RWpLYYoZ08T-Yw.roa (raw, json)
Hash identifier: avTjVOVd/lOZp5+AlhiYgZNe4/9Lh3qTETcF/YonIEs=
Subject key identifier: C5:91:CF:E6:22:49:81:94:B8:D1:15:A9:2D:86:28:67:4F:13:F9:8C
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 0189F84AF0DE67C0CA4C6FBDF0C44BDA1A0F
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/xZHP5iJJgZS40RWpLYYoZ08T-Yw.roa
Signing time: Tue 15 Aug 2023 08:23:28 +0000
ROA not before: Tue 15 Aug 2023 08:23:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 45.149.92.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f8:4a:f0:de:67:c0:ca:4c:6f:bd:f0:c4:4b:da:1a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Aug 15 08:23:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c591cfe622498194b8d115a92d8628674f13f98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d7:a9:d1:88:0c:05:b4:41:4e:d5:e0:e9:da:
ad:46:57:16:36:8f:d6:ef:b6:2a:9f:40:3b:b7:e6:
63:4e:b7:97:47:53:25:6e:ab:df:b6:84:3b:ad:1f:
ff:e5:80:ac:90:ce:ac:8b:43:27:8c:aa:df:e4:a2:
b0:e8:94:6b:d0:d9:d0:34:59:07:58:08:ab:b9:a8:
dd:41:57:91:08:cc:d4:20:78:62:ef:34:53:89:18:
4c:f9:60:21:49:37:9d:1e:79:46:d8:14:81:75:6a:
8f:5b:e0:bb:41:43:45:f5:69:40:e9:26:13:7a:0a:
49:09:e3:ba:5f:e3:0e:c1:72:90:63:b2:83:10:fc:
ed:d8:ba:7f:ce:fa:22:f8:3b:e7:c5:67:2d:e8:f9:
d7:ad:b3:45:7f:cf:78:35:9a:29:d9:df:39:35:e1:
d3:6b:d1:be:7f:76:74:ea:9b:c0:ba:29:8c:f0:e4:
4e:72:01:be:30:05:b7:3e:5b:b8:45:9f:7a:55:51:
de:d2:a3:89:d9:8a:43:b5:78:4f:d1:7d:f9:ae:98:
a4:98:53:0f:60:a7:41:44:0d:5c:0c:3c:7c:64:a0:
9e:44:c2:fc:83:f5:d5:5e:55:bc:f9:d9:09:f3:69:
3b:fa:6e:50:dc:73:1f:66:c8:a6:a1:61:d9:e1:6a:
5d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:91:CF:E6:22:49:81:94:B8:D1:15:A9:2D:86:28:67:4F:13:F9:8C
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/xZHP5iJJgZS40RWpLYYoZ08T-Yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.92.0/23
Signature Algorithm: sha256WithRSAEncryption
48:92:8c:0c:79:b4:2a:d2:21:31:b3:5a:de:cd:ce:3f:31:1c:
58:b0:24:39:4e:a1:c3:52:2a:dc:5d:75:b4:28:02:99:6b:d2:
03:42:65:79:28:80:16:ad:0a:90:ba:fb:01:e8:d7:55:99:b4:
3a:41:70:34:f3:0b:91:1c:a7:dc:57:8a:50:ed:56:b0:d9:51:
b9:7a:91:5c:28:84:a8:30:6e:5a:19:30:1c:3d:f4:ee:63:3f:
ee:ee:12:5c:6f:5b:0f:f2:1e:9b:6b:1c:d9:f5:ba:55:94:bf:
2f:52:2f:b0:3c:d9:33:d6:ab:d0:ca:90:d1:13:9e:94:85:e8:
7d:94:78:39:07:bd:1e:31:bb:07:12:34:38:0c:03:6e:bb:91:
01:f3:53:2e:0f:8f:37:a6:fc:80:ab:b6:9a:fe:9c:33:34:5e:
67:e9:96:8a:25:4e:cf:48:19:84:51:ed:e1:81:14:3a:02:ab:
a3:1c:03:4d:af:66:f2:03:bb:c4:17:6c:86:44:ce:56:00:f7:
0d:9e:3a:1b:ef:4f:c8:46:c4:d8:16:e3:84:99:82:af:3b:5b:
ed:49:45:c0:7e:ea:8a:84:a7:d6:65:00:26:3f:26:03:30:4f:
59:12:9a:a8:af:51:f5:29:5c:17:bb:35:58:99:87:88:04:3b:
62:9b:5c:cf
-----BEGIN CERTIFICATE-----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Generated at Sat Sep 23 18:16:33 2023 by rpki-client on console-fra.rpki-client.org