Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/NF1pqYWOYKcT4eCarVeCGvge-AY.roa
File: NF1pqYWOYKcT4eCarVeCGvge-AY.roa (raw, json)
Hash identifier: n5AoJh9wElMawz3lYca/pe+ZkoWdSGuDmvFsBIU6ZHU=
Subject key identifier: 34:5D:69:A9:85:8E:60:A7:13:E1:E0:9A:AD:57:82:1A:F8:1E:F8:06
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018C7347FD7158CDF3BC45FD2AFAB6AB79F2
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/NF1pqYWOYKcT4eCarVeCGvge-AY.roa
Signing time: Sat 16 Dec 2023 15:39:06 +0000
ROA not before: Sat 16 Dec 2023 15:39:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200131
IP address blocks: 45.8.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:73:47:fd:71:58:cd:f3:bc:45:fd:2a:fa:b6:ab:79:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Dec 16 15:39:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=345d69a9858e60a713e1e09aad57821af81ef806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c6:65:db:db:c5:56:62:64:2f:b3:5a:1c:d7:
f5:cd:b1:91:7c:49:37:c8:36:da:e1:92:90:5d:5e:
8f:cb:14:9d:46:7d:e7:7b:8f:8f:3c:f5:d4:34:d0:
77:0e:56:16:73:ea:31:e6:3d:77:1b:f7:7d:90:b5:
9e:7f:22:da:d4:6f:9f:f1:43:2b:28:16:10:c4:15:
3c:9c:20:37:93:73:d7:f5:26:3b:ec:69:3c:57:9d:
11:5d:42:30:ec:fc:f2:0c:26:8f:d8:23:41:80:e9:
4a:b3:b1:ea:7e:c9:f6:12:d6:88:8c:1a:ed:68:2d:
71:73:9c:4b:e1:90:0d:29:f7:12:b6:21:5b:32:86:
6d:a8:1b:33:2f:8a:5b:51:2c:e9:64:0f:4c:1d:ab:
bd:71:f3:5b:16:15:04:b0:a7:b3:d3:f5:7c:b5:68:
13:3c:2e:e5:ef:56:8d:08:eb:70:2b:82:1c:a9:d0:
3e:53:83:dd:02:a5:e5:37:e4:7a:c3:fc:8d:2c:b7:
3c:55:e9:3a:c0:74:87:d2:7e:2c:47:17:cb:4c:1a:
01:9f:57:e4:c0:26:7e:a9:8c:8c:4f:1a:7b:e8:d2:
2d:c4:62:be:b9:cf:77:97:a8:59:82:6c:db:f1:04:
fe:2a:1c:20:8a:a0:e6:a6:8e:49:e7:98:b2:0c:23:
8c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:5D:69:A9:85:8E:60:A7:13:E1:E0:9A:AD:57:82:1A:F8:1E:F8:06
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/NF1pqYWOYKcT4eCarVeCGvge-AY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.200.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:e1:44:81:33:27:c8:7a:68:8e:72:57:91:fd:58:fa:bf:e7:
23:ad:2d:14:6f:75:b5:1d:9e:3f:37:13:93:71:d0:84:32:10:
eb:01:26:69:87:c3:11:05:d8:81:c1:20:fd:b3:68:15:3b:5e:
36:cf:ed:ee:c3:84:f4:c7:9a:4a:04:ee:77:8a:24:6e:ca:91:
76:3d:21:26:aa:fc:fd:59:50:41:c1:11:b7:43:b2:54:98:75:
51:77:3f:1c:6f:1a:3a:00:26:aa:1b:e5:e8:b9:40:1d:64:86:
64:51:ea:6e:65:4c:22:f7:d3:79:4a:fb:c7:c6:a0:be:4c:9d:
2b:42:d7:70:13:61:e9:b2:dc:dc:37:15:81:96:b1:4b:b6:6c:
89:09:11:52:20:18:e8:ff:05:99:d0:a3:fe:4c:78:ba:c2:fa:
30:96:11:39:d2:90:45:0b:1b:bf:b3:e7:cf:06:2e:cd:0c:c5:
17:ed:00:2f:f8:89:ab:12:01:eb:01:75:82:37:18:bd:fd:bc:
87:b8:8a:bc:04:0c:41:c6:92:34:b7:d2:8c:9e:64:51:25:66:
c3:41:4e:a1:72:cf:ec:f9:25:b4:94:f0:13:9e:25:7e:e8:44:
ef:ab:b5:18:60:93:87:2c:0d:d1:ec:c1:2a:ae:a3:d1:5f:a6:
11:00:ae:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 17 21:47:27 2023 by rpki-client on console-ams.rpki-client.org