Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Rq9clrGAl6lfkU7hDCUt7HnTjw0.roa
File: Rq9clrGAl6lfkU7hDCUt7HnTjw0.roa (raw, json)
Hash identifier: VRCcAe0oTZ1MSWjy+kxjFRTvYKJ62/8bmoz4pKIsEwo=
Subject key identifier: 46:AF:5C:96:B1:80:97:A9:5F:91:4E:E1:0C:25:2D:EC:79:D3:8F:0D
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018B1420C2CAF8D955EDBA1759B8D0BB9239
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Rq9clrGAl6lfkU7hDCUt7HnTjw0.roa
Signing time: Mon 09 Oct 2023 11:09:33 +0000
ROA not before: Mon 09 Oct 2023 11:09:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.15.177.0/24 maxlen: 24
5.180.82.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:14:20:c2:ca:f8:d9:55:ed:ba:17:59:b8:d0:bb:92:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Oct 9 11:09:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46af5c96b18097a95f914ee10c252dec79d38f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d2:8c:6c:06:9c:73:5e:b9:c0:fc:6d:2f:32:
ea:d7:54:59:5e:55:47:13:69:0f:04:3a:0e:29:b7:
d0:e6:6f:72:41:b0:d3:c7:62:39:60:74:21:63:56:
03:a5:5a:eb:96:50:42:11:00:bc:b2:2d:f9:8c:8e:
80:ff:bf:1c:c7:10:c6:05:6d:fc:67:6a:6c:16:17:
a5:3a:c1:9b:6a:63:47:1f:ad:34:d7:f0:a9:95:22:
c4:6f:da:20:52:57:7a:4a:e2:a3:39:db:33:84:74:
2a:b7:c3:f7:fa:b6:4c:ad:7b:f4:38:db:7d:52:b9:
6e:a8:a0:5a:08:90:84:76:90:de:2f:fb:b5:ba:4d:
21:f4:dd:67:a7:fe:4a:97:9b:80:fa:ce:2f:79:71:
54:b2:bc:26:f5:8a:67:b4:79:c9:11:b6:87:1c:3a:
82:6a:40:91:5c:20:db:ac:c6:73:e7:59:e7:8e:56:
c2:c2:40:99:c2:50:6f:3b:54:bf:fc:2b:9e:20:84:
d6:b5:97:29:5d:ab:ef:a0:f2:4c:52:0e:df:e9:36:
28:9e:b6:7c:77:a3:03:33:ef:7b:09:e0:be:d7:a5:
ac:85:e9:16:40:11:7c:c1:80:52:fd:ea:39:6e:c2:
b4:a8:f9:87:50:b6:d8:65:7c:2e:15:89:a3:72:10:
b3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AF:5C:96:B1:80:97:A9:5F:91:4E:E1:0C:25:2D:EC:79:D3:8F:0D
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Rq9clrGAl6lfkU7hDCUt7HnTjw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.82.0/24
45.15.177.0/24
Signature Algorithm: sha256WithRSAEncryption
61:53:c9:17:64:47:7e:95:9c:bc:80:1a:c3:b1:de:3d:d3:aa:
a6:6e:e6:ab:49:a7:6d:b4:fa:5d:80:3f:d7:aa:fb:25:d2:5b:
73:dc:6c:f7:89:c6:6b:63:6c:f2:b8:fc:56:12:ae:6f:4b:da:
2d:75:2f:ce:d9:c4:d5:8d:69:fd:dc:57:4a:ed:75:b9:c6:f9:
32:23:f8:7b:a8:65:1b:92:8e:23:92:99:64:39:76:23:30:9e:
4b:32:0c:0a:91:a0:23:5f:fb:47:88:47:f6:a5:2a:c8:8f:14:
93:4d:b3:2e:88:3a:ac:12:a4:3e:99:5f:9c:5a:f4:f7:b8:4c:
cc:23:9a:00:98:ec:b6:68:58:1c:34:19:82:ff:19:4c:f0:77:
41:4f:19:63:44:c9:85:c6:eb:ff:d6:e7:da:5b:e6:00:0f:6b:
c0:b2:18:ba:1c:fe:f2:c6:27:0b:5b:76:ec:f4:53:30:d9:6d:
88:14:c2:0f:c7:14:27:26:71:e6:87:69:84:b1:db:92:6b:60:
7b:9a:81:12:36:fd:99:41:72:bd:b1:4c:70:d1:80:61:1f:c1:
e0:d8:f0:bc:a2:ec:09:11:7a:db:1c:dc:cb:8f:6a:b0:7d:7d:
04:ef:3c:75:3b:33:b0:7d:8b:c9:93:06:ab:8e:ce:f6:27:11:
54:4a:1e:20
-----BEGIN CERTIFICATE-----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Generated at Mon Oct 9 17:05:07 2023 by rpki-client on console-fra.rpki-client.org