Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/tZs7FEKHL-ryAmZ0RdokZecHuRc.roa
File: tZs7FEKHL-ryAmZ0RdokZecHuRc.roa (raw, json)
Hash identifier: 2Wc68/VZEfUx8RXkBY0rGMXo+0QwD8OmCds6Yqgm1Zg=
Subject key identifier: B5:9B:3B:14:42:87:2F:EA:F2:02:66:74:45:DA:24:65:E7:07:B9:17
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018A9A8742ACEFD49DE13AF2705260E2D740
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/tZs7FEKHL-ryAmZ0RdokZecHuRc.roa
Signing time: Fri 15 Sep 2023 20:27:50 +0000
ROA not before: Fri 15 Sep 2023 20:27:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63023
IP address blocks: 45.89.104.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:9a:87:42:ac:ef:d4:9d:e1:3a:f2:70:52:60:e2:d7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 15 20:27:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b59b3b1442872feaf202667445da2465e707b917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:01:02:a8:fd:2c:2d:af:c8:f5:68:ed:f7:ad:
f0:b7:35:88:e0:94:87:37:ca:90:64:87:33:7c:d4:
49:c4:e5:eb:d9:73:1f:e6:62:e1:2a:66:13:2f:68:
85:97:83:e8:8c:4b:70:58:83:0c:92:07:99:c3:14:
ad:85:91:e8:6e:ba:64:e7:f8:69:0f:d2:34:cf:d3:
69:18:5e:e3:0e:08:4a:88:eb:2c:38:cc:46:dc:fa:
50:3a:dc:b8:a6:9c:f3:c5:ab:9a:55:43:6e:9b:6a:
6f:f7:17:54:b4:bc:35:0f:57:8e:3f:7b:9c:17:2c:
95:82:ae:b5:52:86:e9:9e:3a:a7:80:99:36:c8:6c:
49:93:ae:c5:d2:75:a6:18:c9:f3:20:7d:16:b8:9c:
6b:7d:e8:bf:b7:bb:de:fb:72:ab:a4:ca:5d:36:1f:
6d:87:cc:e8:a9:4e:2f:92:67:55:38:71:69:a1:2d:
7d:83:e9:5a:05:fe:07:2d:84:3f:f5:06:36:ed:c2:
98:46:07:7e:6e:4d:ea:4a:fe:fd:f6:ea:63:fc:d1:
ea:35:64:65:64:66:25:2f:92:b3:0d:26:a9:9c:c1:
47:68:50:b6:3e:86:09:21:1f:79:b4:44:65:fd:76:
4b:d0:06:99:4c:87:e5:f2:c4:ce:6c:1b:8c:10:cf:
1e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:9B:3B:14:42:87:2F:EA:F2:02:66:74:45:DA:24:65:E7:07:B9:17
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/tZs7FEKHL-ryAmZ0RdokZecHuRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.104.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:70:a5:50:5c:ff:92:13:66:8b:3e:e6:99:c7:0d:00:8a:a6:
b0:81:94:b9:6d:3d:4e:81:29:d2:e1:9c:cd:f3:b4:ea:25:cd:
8b:d6:47:54:87:07:0f:5a:28:ba:89:fb:8d:4c:b1:04:91:fe:
a3:9a:f0:d4:9b:8c:39:de:12:ba:07:75:68:99:1e:ac:0e:83:
99:46:94:af:98:12:dc:06:e7:ba:d6:a1:15:a3:a6:f6:54:b2:
a6:75:10:00:b1:76:32:e8:7f:df:7d:50:7d:fd:d8:6e:3f:fc:
ec:45:82:42:a2:bb:e6:e7:ff:e0:6c:e6:bf:ed:07:c8:30:53:
35:4b:e6:cc:d5:2b:d3:8d:f7:0a:cd:c3:5c:af:77:12:1e:41:
35:48:52:98:83:d2:72:de:70:80:0e:7f:d3:95:a2:d0:8c:1d:
34:57:ea:48:c4:b0:ed:59:db:dd:cc:51:63:42:08:f0:ab:a4:
6a:bd:52:e4:ff:87:cf:86:d4:d0:b3:31:fa:09:f8:3f:7c:e7:
c9:fa:83:ec:e6:6b:f2:47:31:c7:50:68:9e:98:fa:23:3a:c7:
49:1d:76:1c:ca:1e:fc:1d:08:38:5d:3d:a2:13:81:d4:c3:8d:
24:42:bb:ca:61:9e:18:4f:18:eb:ed:ff:e5:25:24:40:a7:93:
3c:26:5d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:02:03 2024 by rpki-client on console-ams.rpki-client.org