Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/VqqEcjgAPvaAJDCn_CwK3B_t0-I.roa
File: VqqEcjgAPvaAJDCn_CwK3B_t0-I.roa (raw, json)
Hash identifier: kc1uBPkUSrFljaQHLByiBELQe+Ce8jkD/eT+AsbF0Vk=
Subject key identifier: 56:AA:84:72:38:00:3E:F6:80:24:30:A7:FC:2C:0A:DC:1F:ED:D3:E2
Certificate issuer: /CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6
Certificate serial: 0185711E52A1B0AEC742B659CFDB408E0963
Authority key identifier: A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/VqqEcjgAPvaAJDCn_CwK3B_t0-I.roa
Signing time: Mon 02 Jan 2023 06:14:50 +0000
ROA not before: Mon 02 Jan 2023 06:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 45.13.100.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:52:a1:b0:ae:c7:42:b6:59:cf:db:40:8e:09:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6
Validity
Not Before: Jan 2 06:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56aa847238003ef6802430a7fc2c0adc1fedd3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:30:90:25:9d:c6:33:19:81:ec:71:20:2e:34:
0c:aa:68:e1:2e:f1:11:46:c9:3d:a6:a8:7d:ba:11:
04:bc:02:da:a1:b9:d6:75:55:6e:71:37:f4:2e:34:
a9:33:e0:4f:fc:1c:ba:bd:5f:e2:91:4d:06:25:35:
a7:f0:89:6c:f2:af:2b:37:4e:f0:e8:02:f6:2a:58:
9d:c0:bb:3a:c3:1b:c5:0f:c7:3c:f7:f4:2c:6d:cd:
04:fb:ad:12:93:06:78:33:4c:3f:29:95:35:a9:2b:
2c:1c:c6:ec:f8:7f:af:b1:d2:cf:ea:51:d2:bd:47:
58:d8:9c:dc:e5:9b:0c:b4:fe:b2:c2:3b:ff:90:83:
09:34:d6:4c:60:54:50:19:5c:f7:bc:68:1c:44:f2:
b3:21:66:a3:2c:9f:12:fd:74:36:38:6d:52:2a:d6:
38:15:55:63:1c:ae:9d:09:23:f0:28:4b:f4:fa:8c:
4f:9c:e3:e9:28:0a:fa:5a:9c:33:a4:60:08:09:93:
a7:c2:cf:97:2f:c2:ca:7a:68:da:91:f0:70:1f:1b:
fb:90:5e:c4:1c:22:58:f2:21:54:26:c4:8d:b6:c7:
92:08:c6:2d:18:17:05:ef:19:54:f4:6f:6b:45:29:
56:65:b5:5c:f6:f3:6f:5d:40:71:77:53:ec:d0:0d:
09:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AA:84:72:38:00:3E:F6:80:24:30:A7:FC:2C:0A:DC:1F:ED:D3:E2
X509v3 Authority Key Identifier:
keyid:A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/VqqEcjgAPvaAJDCn_CwK3B_t0-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.100.0/22
Signature Algorithm: sha256WithRSAEncryption
36:5b:36:95:7a:70:f2:f2:1b:21:97:b3:17:70:61:ef:32:c3:
3e:a3:5e:55:36:68:f8:25:e5:95:33:a2:da:59:ec:80:8c:c8:
df:55:2d:b1:b0:21:1a:3b:e2:c3:d0:89:c7:9d:b9:fc:c4:fd:
12:21:ea:1d:53:9d:13:f4:58:a8:fc:6d:6b:4d:83:a4:45:dc:
9b:22:f7:07:25:b6:1d:b0:1a:9a:46:7c:9d:9f:0e:ce:60:ba:
06:bc:cc:9d:35:89:38:1d:1c:f2:58:1d:46:3c:6b:a3:f9:8e:
2c:0d:20:a5:33:7a:76:e4:19:c2:65:4b:53:97:cd:ac:3b:e1:
69:25:19:e4:2c:5e:8a:59:ab:66:70:6b:c3:4e:72:eb:01:d4:
06:f2:c6:0f:32:a5:da:6e:12:43:15:aa:10:4d:57:e3:57:86:
99:95:11:c8:38:51:e9:12:0b:30:31:e9:aa:49:48:c2:32:ed:
19:24:9f:2b:78:60:d8:76:ab:f6:30:dc:79:14:fa:b9:92:73:
63:52:ee:8d:96:b8:ff:f8:a6:9a:d4:f4:58:0b:90:b9:b3:ab:
4b:1d:68:64:90:56:a1:36:7d:04:76:44:8f:0b:01:15:34:1a:
f0:cf:13:04:23:50:55:d5:a2:c8:d3:3d:2d:e5:f1:d2:d9:0f:
6c:cf:22:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:20:21 2024 by rpki-client on console-fra.rpki-client.org