Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/CVm0XjQImuUw5UkfO4wFNLQhbX0.roa
File: CVm0XjQImuUw5UkfO4wFNLQhbX0.roa (raw, json)
Hash identifier: IjiJhFJuSyk9lDsN5TfOTX+l8Zq68uGsbeZ8/1QTibM=
Subject key identifier: 09:59:B4:5E:34:08:9A:E5:30:E5:49:1F:3B:8C:05:34:B4:21:6D:7D
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018B0AAC4563273F500385CD835D8BDC00C4
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/CVm0XjQImuUw5UkfO4wFNLQhbX0.roa
Signing time: Sat 07 Oct 2023 15:05:43 +0000
ROA not before: Sat 07 Oct 2023 15:05:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.9.2.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:0a:ac:45:63:27:3f:50:03:85:cd:83:5d:8b:dc:00:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Oct 7 15:05:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0959b45e34089ae530e5491f3b8c0534b4216d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c6:96:ab:81:56:00:1d:d3:af:b6:6c:f2:ce:
bf:ef:bb:8f:36:37:4b:7b:94:c5:02:0d:47:e8:f6:
7a:6d:55:f2:45:c5:67:f4:e6:39:cb:12:d5:8b:12:
25:66:99:21:3f:37:d9:69:d2:d0:4d:ec:46:91:ec:
a8:50:4b:e2:f6:a3:06:9a:d4:b0:28:68:6f:e2:38:
4d:58:86:8d:b7:41:11:a4:dc:51:59:a4:bd:a7:8d:
31:a8:93:31:08:b8:3f:2f:55:db:a8:29:a0:35:3d:
7e:24:c9:11:88:3a:00:b2:e0:89:65:97:34:97:9b:
5d:1a:ff:a9:79:73:29:51:7b:c5:8a:6e:9a:70:fb:
ef:52:f5:0b:91:59:89:72:7d:31:91:94:1a:a3:65:
e1:8a:2a:53:9c:41:a6:30:38:d1:6a:24:4e:19:a6:
ec:18:12:71:d8:4f:e1:c0:1e:c8:8f:5b:01:3c:ee:
66:97:e3:d9:e5:cc:69:f3:52:c1:04:9a:88:dc:5d:
58:f2:88:f4:df:bc:c9:a0:33:92:35:ec:27:b6:ab:
7e:eb:c7:f1:d7:ac:af:58:cd:0b:82:f5:20:0d:fd:
05:ca:21:6b:fb:de:6d:90:af:c6:3d:8a:30:31:ca:
a6:37:3d:c0:fe:aa:d6:d0:ef:bb:e1:e7:28:5f:11:
2c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:59:B4:5E:34:08:9A:E5:30:E5:49:1F:3B:8C:05:34:B4:21:6D:7D
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/CVm0XjQImuUw5UkfO4wFNLQhbX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.2.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:32:51:0a:d3:7a:64:c6:69:15:9e:60:76:1d:ca:9a:ee:40:
bb:70:bf:ac:e0:ff:6a:ef:64:b6:3d:79:d7:fa:53:60:b8:94:
eb:70:85:f6:22:b1:f0:c1:a2:75:ef:fa:8c:bd:7b:63:a0:9a:
95:70:fc:01:0e:e6:3d:9a:2e:ba:9e:67:06:30:5b:69:4b:ff:
00:ad:cb:ec:07:0a:fb:f9:2e:1d:95:7b:1f:a3:13:98:ce:aa:
94:69:95:4c:95:ad:34:e7:5a:20:60:89:86:c8:7b:6c:f7:d3:
ff:ed:f4:06:31:1e:f1:e2:33:89:5f:50:42:ba:6a:e2:c8:78:
65:16:ce:c6:4e:bd:f3:81:db:ee:9e:1f:e3:1b:c5:ba:5e:88:
ea:2b:c1:da:2b:6c:91:38:c8:d8:87:c2:e5:79:d2:bf:d3:f6:
d5:41:3e:37:f6:bc:16:fe:bd:08:44:fe:3d:53:e7:7b:e2:bc:
e2:e2:0f:14:3f:e6:b3:0d:7f:b4:af:7a:da:44:f0:f8:1d:26:
8c:33:6e:7b:39:31:f8:d4:50:6a:5b:53:ad:7e:21:c9:e9:2b:
66:5e:6d:4c:c9:18:e8:02:89:fb:89:6f:5c:14:cd:fe:90:ea:
89:db:cf:36:68:08:c0:5f:50:94:b5:98:8c:32:fc:73:4d:d9:
e4:19:4b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 9 07:53:46 2023 by rpki-client on console-ams.rpki-client.org