Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/5rXysXG9ZD1f13nGRJBuA5jEqNg.roa
File: 5rXysXG9ZD1f13nGRJBuA5jEqNg.roa (raw, json)
Hash identifier: TXiijiAS70N4jfbaTfgTLmAQuWxoqK6QDEuajzzEP+k=
Subject key identifier: E6:B5:F2:B1:71:BD:64:3D:5F:D7:79:C6:44:90:6E:03:98:C4:A8:D8
Certificate issuer: /CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6
Certificate serial: 0185711E539724E57EB5757C018348422BC4
Authority key identifier: A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/5rXysXG9ZD1f13nGRJBuA5jEqNg.roa
Signing time: Mon 02 Jan 2023 06:14:50 +0000
ROA not before: Mon 02 Jan 2023 06:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 45.13.100.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:53:97:24:e5:7e:b5:75:7c:01:83:48:42:2b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6
Validity
Not Before: Jan 2 06:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6b5f2b171bd643d5fd779c644906e0398c4a8d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:be:84:d3:6b:8e:c3:8c:74:c6:44:55:01:6e:
72:da:f8:8f:a0:90:1a:1a:17:c7:2c:a7:89:55:5f:
97:9c:59:32:2e:a0:88:3a:4a:64:64:b6:3d:3d:9d:
50:1f:f2:45:03:1f:3f:c8:94:4b:5f:29:06:0d:dd:
f6:ee:ff:70:b2:2c:16:13:65:4e:fc:03:3f:5e:2d:
27:9a:d9:68:c3:35:77:89:09:39:96:58:16:c1:f4:
0f:6b:2b:cb:5d:6f:3f:5c:4d:62:cc:db:fa:48:d9:
c4:07:7b:d1:06:f7:4c:63:f0:2b:8a:19:83:b8:20:
be:82:17:78:50:45:71:27:5d:04:29:bc:3d:3a:5c:
a5:4a:f8:57:f6:6e:88:d7:96:db:8a:01:12:58:fb:
6d:44:0c:c9:05:a2:5b:23:d0:ec:15:14:79:95:fa:
b1:0f:ac:fe:93:fa:23:56:d6:c1:61:bf:df:6b:64:
2e:9b:b8:ad:1a:b9:90:6c:26:aa:23:0d:49:f2:fd:
a0:00:65:9f:ca:2e:f6:2e:c8:fe:26:0f:72:5a:a0:
c3:a1:ad:d1:7f:1e:d4:aa:bf:7d:53:b8:91:b2:91:
37:3e:89:d0:12:35:7b:e4:e3:dc:7e:7b:b2:e6:c4:
35:6e:99:bc:fa:63:86:ae:af:5d:45:ca:c6:8f:db:
4c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B5:F2:B1:71:BD:64:3D:5F:D7:79:C6:44:90:6E:03:98:C4:A8:D8
X509v3 Authority Key Identifier:
keyid:A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/5rXysXG9ZD1f13nGRJBuA5jEqNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.100.0/22
Signature Algorithm: sha256WithRSAEncryption
31:1b:e0:72:75:57:56:1a:ba:e3:6a:44:32:69:07:fd:ec:3b:
76:3e:a6:46:27:e7:49:e8:12:13:12:b8:bd:7e:90:98:93:2a:
98:de:93:9a:a9:2f:35:01:97:05:e9:82:9f:53:02:ad:31:a1:
51:fb:2d:28:f2:96:a3:18:5a:dd:17:34:df:08:24:e3:46:ca:
f2:b7:7b:2f:ae:96:b6:50:35:dd:7e:08:86:70:fa:d3:bf:f2:
8e:bb:a3:c4:9e:6f:cd:5a:9f:19:0f:9e:95:9c:e4:5f:9e:7f:
bd:c2:fd:43:bc:35:09:28:04:b8:a0:a0:61:66:4f:c5:40:5c:
80:39:09:cd:39:54:94:e1:cd:e9:65:d3:6d:b7:aa:dd:e4:22:
ae:90:f3:15:05:89:c0:06:29:79:e5:6d:13:e1:4a:7c:b8:77:
43:ab:8a:15:e1:a3:78:0f:1c:58:c4:dd:5c:f9:4e:3b:e0:19:
c9:75:11:23:71:14:3a:89:52:b5:90:ec:a6:29:8c:9b:c7:41:
50:48:61:9f:c3:69:32:76:aa:cf:ff:d7:f5:52:dd:a0:e8:9a:
ff:69:2a:b1:21:d1:04:da:85:69:f9:6c:80:33:cf:80:b3:11:
4b:c9:40:b3:22:0a:07:b1:f1:fb:df:8c:23:dc:fa:47:f8:fd:
e9:a0:f6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:02:11 2024 by rpki-client on console-ams.rpki-client.org