Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/pISwgB_nnwNF5r3i1DQGj-lJ9_k.roa
File: pISwgB_nnwNF5r3i1DQGj-lJ9_k.roa (raw, json)
Hash identifier: E1Eau9JElmFJMyJnFowJla151LktAI7V1AWw38KCyA0=
Subject key identifier: A4:84:B0:80:1F:E7:9F:03:45:E6:BD:E2:D4:34:06:8F:E9:49:F7:F9
Certificate issuer: /CN=3b39b2382f38512e59ed18ebfaa596c955212910
Certificate serial: 01856B8A13F844DF3AA49C6FCF91F492528D
Authority key identifier: 3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/pISwgB_nnwNF5r3i1DQGj-lJ9_k.roa
Signing time: Sun 01 Jan 2023 04:14:49 +0000
ROA not before: Sun 01 Jan 2023 04:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25540
IP address blocks: 45.92.200.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:8a:13:f8:44:df:3a:a4:9c:6f:cf:91:f4:92:52:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b39b2382f38512e59ed18ebfaa596c955212910
Validity
Not Before: Jan 1 04:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a484b0801fe79f0345e6bde2d434068fe949f7f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ac:81:87:4d:aa:b0:69:04:fb:7c:f2:59:cf:
e5:90:87:f4:df:0c:8b:52:71:d1:f3:20:f2:50:71:
7b:27:e6:7e:f1:34:f0:26:e0:c6:a6:77:40:e8:32:
ad:50:74:50:f6:1e:9b:d3:ae:14:cd:45:a8:18:d0:
6d:38:af:84:da:75:d1:8c:92:05:c8:df:5b:f7:ca:
9a:2d:ff:e4:8b:7c:61:db:e3:ef:c1:b1:2c:c8:bd:
9a:e5:d3:6b:95:aa:f3:f7:06:ef:bc:b0:81:bc:17:
5a:b4:ac:45:ce:81:97:58:a7:ed:80:1f:89:fd:73:
93:12:e5:ff:5a:75:ad:37:23:86:85:c9:0a:cd:a5:
f8:5c:69:84:21:4a:71:aa:5f:f5:f1:1a:7c:fb:59:
34:70:ee:b4:6b:99:9e:1b:50:11:f3:65:2d:8b:5a:
f4:f7:57:00:15:bf:ad:56:a4:d3:32:d1:f4:96:77:
e6:f6:b5:cd:e6:0d:87:f0:bb:32:6e:5b:65:60:53:
6c:35:5c:fe:c7:be:20:b6:e6:f7:8f:ab:bf:25:97:
6e:cf:02:00:29:74:92:d6:ab:3e:cd:e5:a0:0d:8d:
b1:f5:fe:f2:ff:18:e1:a6:7a:c4:c5:ec:5a:c5:4b:
e0:98:09:a7:95:97:1e:60:6d:ef:97:b1:31:59:28:
37:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:84:B0:80:1F:E7:9F:03:45:E6:BD:E2:D4:34:06:8F:E9:49:F7:F9
X509v3 Authority Key Identifier:
keyid:3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/pISwgB_nnwNF5r3i1DQGj-lJ9_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.200.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:c7:34:3a:dd:cb:24:ac:ce:43:42:48:9c:e5:06:f5:6c:b4:
b0:41:ff:7d:48:fc:6d:6c:c4:2f:ea:e7:4c:2e:61:99:31:8b:
c9:6f:29:48:fb:94:f9:10:8c:43:f8:36:8a:5c:af:fb:a2:91:
fa:fb:41:07:eb:c1:a5:2c:be:46:b1:41:8e:58:56:05:13:ca:
56:9a:41:87:f8:50:db:fa:33:10:90:8f:96:ea:6c:42:81:72:
9c:69:be:5d:2c:e2:1c:54:92:60:eb:ec:05:49:af:66:5a:c2:
8d:63:5d:84:59:64:dd:7d:79:76:d0:c4:4e:eb:92:12:7f:4b:
b6:77:ef:c2:d6:32:a7:ac:cb:89:f3:67:97:fa:8d:9d:65:7e:
0e:42:7c:82:a4:41:4f:79:15:69:e6:43:5c:cb:2b:d9:1e:47:
0a:34:06:bf:3f:d1:0d:39:94:a2:4d:0b:30:dc:5d:2a:d5:cd:
77:fb:1b:2e:18:a9:13:43:8e:99:50:37:f6:68:7a:ca:74:61:
9b:39:29:f8:d4:6f:ff:b6:a9:f6:fa:74:2e:eb:7c:f1:2d:b5:
12:7d:93:8e:d1:4b:c3:7f:be:de:d7:42:50:9b:aa:ac:6a:69:
61:7f:99:5a:41:f4:96:0d:08:aa:0b:a1:4a:82:7f:69:5e:5f:
54:f5:4d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:51 2024 by rpki-client on console-ams.rpki-client.org