Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/9qgccuhzE0N6aI_01ZOAVBcm6_I.roa
File: 9qgccuhzE0N6aI_01ZOAVBcm6_I.roa (raw, json)
Hash identifier: oVgshw10rbO4QTOop3G9KtM9aV/onlgjWraxFiEFgh4=
Subject key identifier: F6:A8:1C:72:E8:73:13:43:7A:68:8F:F4:D5:93:80:54:17:26:EB:F2
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0185CDDD802CB439DE12BC569621BEAE3CCE
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/9qgccuhzE0N6aI_01ZOAVBcm6_I.roa
Signing time: Fri 20 Jan 2023 06:28:43 +0000
ROA not before: Fri 20 Jan 2023 06:28:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3170
IP address blocks: 45.141.25.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:cd:dd:80:2c:b4:39:de:12:bc:56:96:21:be:ae:3c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 20 06:28:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6a81c72e87313437a688ff4d59380541726ebf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fc:ef:20:d4:c5:ed:a9:bb:9d:20:cc:74:1b:
a2:a7:e5:80:b2:8e:11:d1:c7:ba:74:1c:b6:2a:e5:
03:9d:13:b3:15:d6:28:3e:ea:85:7f:a9:8c:5b:87:
f6:19:df:48:cb:fd:b3:0f:b4:19:39:00:b0:37:85:
78:6d:3d:4b:6f:1e:39:32:29:d9:0a:fc:e2:f4:13:
8e:11:dc:c9:0a:bf:ed:b7:81:23:4f:c5:89:7d:fb:
94:ee:b5:4a:ce:76:ab:07:15:ec:56:93:1a:92:22:
c2:47:75:cc:f7:04:9b:b6:1a:dd:b6:28:b3:50:8b:
37:23:d8:24:9c:19:31:84:0e:2b:10:f6:3e:6f:48:
c7:6f:91:0b:9b:42:e5:de:8a:3a:b7:80:06:b2:00:
c2:83:eb:e5:6d:ee:4e:2b:0c:6b:ae:24:7b:02:73:
8d:24:7a:c9:2d:fa:f0:8e:fd:cd:e7:1c:6a:2a:92:
91:ab:fc:6b:c1:18:02:37:96:3b:66:b4:03:2a:68:
95:96:33:d2:1c:4f:14:a9:6f:b1:85:79:e2:7e:58:
2d:c3:2e:57:58:0f:56:78:6f:a1:d1:e1:d9:94:d2:
3f:86:9d:1c:d0:8a:51:c8:f4:66:e1:0b:ea:d3:1d:
00:f3:1a:b9:28:b9:f0:b4:b0:93:f6:23:de:b2:37:
78:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A8:1C:72:E8:73:13:43:7A:68:8F:F4:D5:93:80:54:17:26:EB:F2
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/9qgccuhzE0N6aI_01ZOAVBcm6_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.25.0/24
Signature Algorithm: sha256WithRSAEncryption
51:95:14:70:ee:5c:25:12:6d:42:a0:66:f4:b6:c5:c8:7b:c8:
ad:7b:27:7b:1b:6c:b8:f3:61:2d:a2:27:8e:cf:e5:c2:ce:c0:
37:78:48:62:4b:40:24:b2:27:8a:56:5f:80:55:8f:c7:c4:07:
04:37:9c:49:bf:4c:65:c7:de:96:12:69:3b:49:51:6d:6c:00:
c2:6c:0a:ab:f0:6a:c7:45:69:59:e7:99:ed:06:98:41:09:63:
c8:b4:da:66:4c:99:de:b7:5f:24:a5:c4:b5:0c:60:c5:ce:f9:
b9:50:62:d5:39:d9:dd:46:b6:93:07:fd:f8:f5:d6:71:61:95:
52:09:26:cb:03:0d:fc:66:2f:20:1e:7e:17:03:e2:56:2c:34:
83:17:3f:63:34:08:9f:f4:29:97:f3:9a:9e:74:82:77:9e:36:
d2:79:b6:5d:a0:e4:60:fa:cb:6d:85:a1:15:c9:02:64:09:c9:
c7:1b:49:d8:2f:f0:41:5a:ee:44:82:85:a1:5c:bf:13:e3:74:
1d:8f:5b:91:6b:71:cf:e3:37:88:56:20:50:58:3a:aa:47:62:
36:58:29:ea:10:6f:86:a2:8b:ab:51:ab:75:26:91:46:2e:25:
9f:99:6e:78:63:25:12:c9:75:f2:ff:17:17:5b:7d:bd:b3:1f:
31:80:fc:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:28 2024 by rpki-client on console-fra.rpki-client.org