Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/7OKIykF9WputjgXajWvUOl46h4w.roa
File: 7OKIykF9WputjgXajWvUOl46h4w.roa (raw, json)
Hash identifier: i5sm1feL9Eac6Fz5HbLWqKX4HegqoENkp5GJgLuXK9w=
Subject key identifier: EC:E2:88:CA:41:7D:5A:9B:AD:8E:05:DA:8D:6B:D4:3A:5E:3A:87:8C
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018C7778118458666C128D481DE1B28E02E7
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/7OKIykF9WputjgXajWvUOl46h4w.roa
Signing time: Sun 17 Dec 2023 11:10:06 +0000
ROA not before: Sun 17 Dec 2023 11:10:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25369
IP address blocks: 45.8.184.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:77:78:11:84:58:66:6c:12:8d:48:1d:e1:b2:8e:02:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Dec 17 11:10:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ece288ca417d5a9bad8e05da8d6bd43a5e3a878c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8f:86:7c:77:85:be:4c:7e:b8:ea:e1:e4:8c:
b4:e5:c6:6c:5a:aa:0b:d0:70:5e:e4:3e:4c:03:7b:
92:89:90:6b:0d:1c:e1:11:00:3f:51:c6:06:14:f1:
36:97:72:b2:b2:ff:c1:c5:cf:9a:1a:4a:6a:80:40:
e6:6a:f4:81:ce:53:dd:07:7c:a3:f3:3e:38:ac:f6:
15:26:23:6c:3a:2e:18:df:d0:bf:00:a9:f4:4a:da:
08:74:5a:fb:40:9a:c9:e1:35:7a:a8:86:4d:fe:58:
c8:f8:94:28:38:c3:4d:5a:4f:44:88:8e:67:f2:43:
aa:27:37:80:f2:2b:e4:e3:c1:8b:57:85:5c:51:13:
fd:5e:a5:de:85:3b:bc:aa:2d:24:65:22:6b:79:95:
e5:5b:f5:2d:95:6b:2c:dd:19:4e:6e:d1:9b:13:e7:
eb:ca:c9:ff:43:31:ca:cd:df:d4:6c:f3:2f:48:94:
2b:5a:d2:d2:42:b1:a8:0f:6d:0b:f8:3b:2c:a2:bb:
85:c6:12:78:8d:1d:8f:29:66:50:e4:36:42:d5:52:
0c:ef:d7:ef:6b:5a:69:86:dd:04:1c:0a:3c:5e:75:
2d:d5:ba:a0:f2:aa:bb:2b:42:6f:d0:db:97:e5:d7:
40:c1:30:9b:9c:7c:79:f4:19:37:1e:c6:f6:3c:c8:
f3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E2:88:CA:41:7D:5A:9B:AD:8E:05:DA:8D:6B:D4:3A:5E:3A:87:8C
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/7OKIykF9WputjgXajWvUOl46h4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.184.0/24
Signature Algorithm: sha256WithRSAEncryption
41:7e:df:a5:4a:aa:f0:fb:c0:22:46:f0:b3:29:4b:0a:d9:98:
38:c6:72:6b:5c:38:f4:f8:32:5a:f7:0b:1e:b1:a5:40:39:ea:
ac:5f:3c:48:61:1b:2d:d9:33:b5:22:08:61:59:30:50:a3:f7:
eb:8b:6b:8d:40:96:75:7a:b7:3f:39:4d:78:32:82:39:0b:14:
75:4a:e6:12:e8:60:d2:66:b8:a6:4f:41:e9:75:cc:77:93:f3:
1d:9b:05:63:47:16:27:ef:c8:19:c5:46:d3:1c:98:f7:67:79:
34:4b:90:79:c0:89:31:37:1f:61:7a:f3:c1:6f:09:90:1d:ae:
71:56:e9:b1:9b:56:01:55:c4:b4:88:db:38:a2:5f:66:e0:2c:
88:c2:cc:e4:42:50:26:8f:fa:00:cd:92:7c:a8:44:14:60:92:
a1:22:85:0c:2d:ac:09:02:9e:4e:e4:46:5f:d2:f8:53:4b:d7:
50:18:73:48:90:3d:db:20:36:9c:57:ce:71:a4:dd:03:8d:43:
a9:26:23:6f:9a:bd:8f:e6:14:50:e3:29:96:6d:57:ee:a6:11:
b7:90:8f:e9:64:5d:1d:35:c2:63:53:ed:8e:eb:4a:e0:28:2a:
00:1f:03:56:50:e6:0d:02:8c:3a:22:24:2c:fd:e9:a8:b4:0a:
32:40:6a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:20:17 2024 by rpki-client on console-fra.rpki-client.org