Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/t4k_AX6QkxQkFuv8e-uVz1bSyyc.roa
File: t4k_AX6QkxQkFuv8e-uVz1bSyyc.roa (raw, json)
Hash identifier: uPz++Uo1tMFv7H3WqpnoENvMgHqmMz4/mlpH3Dzu9zM=
Subject key identifier: B7:89:3F:01:7E:90:93:14:24:16:EB:FC:7B:EB:95:CF:56:D2:CB:27
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0185FEAE8413FBD12F60F0F5F63F65B4F9C5
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/t4k_AX6QkxQkFuv8e-uVz1bSyyc.roa
Signing time: Sun 29 Jan 2023 17:58:47 +0000
ROA not before: Sun 29 Jan 2023 17:58:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48357
IP address blocks: 45.89.97.0/24 maxlen: 24
45.89.99.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:fe:ae:84:13:fb:d1:2f:60:f0:f5:f6:3f:65:b4:f9:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 29 17:58:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7893f017e9093142416ebfc7beb95cf56d2cb27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:08:db:11:11:46:87:04:a6:6f:14:0e:b5:3e:
6a:1f:ca:ae:5e:e0:70:e4:a2:1f:7c:83:52:bb:a6:
72:21:02:cc:8a:79:63:32:38:f8:b5:2a:69:8e:00:
44:53:8c:df:b8:75:ae:a6:91:e6:1a:86:c5:8b:84:
84:d5:8c:96:0a:9f:2f:4e:d8:9f:09:15:9f:7e:a0:
da:8c:fe:1d:6d:f8:f7:d1:b2:a1:71:7a:8e:f5:e0:
c2:bf:13:04:ec:a3:78:c5:77:ee:6d:04:86:73:50:
a6:ab:18:71:a9:22:cc:f4:fe:ae:dd:81:c8:42:d4:
f5:42:df:81:a0:fc:aa:06:d4:35:e3:8e:8a:c4:49:
bb:11:28:b1:9c:c9:93:1e:0f:92:47:ac:28:e5:4f:
69:2d:01:04:ed:dd:2b:99:72:f3:d7:8d:b2:f7:5e:
da:37:cc:b3:9a:11:5b:31:ee:83:c7:55:b5:1c:a2:
38:52:be:bb:49:14:8a:f4:25:83:45:6e:95:88:6d:
89:f4:b3:30:b7:a2:75:ea:82:91:d6:f0:68:1d:44:
87:5e:95:82:e4:8d:32:b0:5c:9d:54:11:2e:45:81:
2d:20:f1:d3:10:8c:58:8b:fe:f7:fd:d9:1d:82:6a:
7c:2c:b3:2f:a0:2d:6e:5b:39:80:0d:41:97:fa:bf:
95:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:89:3F:01:7E:90:93:14:24:16:EB:FC:7B:EB:95:CF:56:D2:CB:27
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/t4k_AX6QkxQkFuv8e-uVz1bSyyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.97.0/24
45.89.99.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:50:8a:0e:d6:b9:1d:cd:2f:19:71:6e:73:ce:b6:ee:ad:ae:
f4:c6:39:91:62:c2:c1:b0:c1:1a:ac:ac:5b:ee:23:32:a0:4e:
de:07:b9:7e:97:54:a5:2a:bc:be:ed:23:73:f0:1c:d2:87:27:
44:8c:69:ba:fc:54:9f:47:d0:ec:01:ed:1d:8d:10:82:c8:66:
ee:7c:e0:7e:26:e4:9f:1f:4a:f5:6f:d3:1f:a6:a6:51:89:29:
e5:79:09:66:dc:1c:06:f2:06:47:98:f5:c4:da:53:6a:f8:9a:
94:c0:65:7f:48:de:5d:44:69:42:00:ac:bd:dc:64:bd:0f:c9:
a4:24:ea:06:29:3f:17:a3:a4:a5:b0:97:61:f4:b2:14:66:99:
0c:a1:19:9a:43:4a:f9:ab:a7:48:43:f4:20:6a:02:27:39:2d:
d2:ef:48:24:79:e0:7f:b6:c1:ee:8b:9b:47:b7:7a:07:fd:24:
d5:00:af:0e:e9:58:65:50:52:7d:89:a2:5e:f7:98:6a:b2:10:
6e:96:48:44:69:7c:d4:0d:f3:da:90:19:a5:b2:8f:e9:3f:7e:
df:e5:90:59:45:9f:39:4a:cb:32:0b:6c:81:2b:68:ab:47:64:
57:c0:9b:97:01:97:2d:e1:71:91:c2:de:e7:90:9e:dc:cd:a5:
04:cf:c4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:20:17 2024 by rpki-client on console-fra.rpki-client.org