Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/a2rlpiAyrshxYBQMRLwSNazP9dE.roa
File: a2rlpiAyrshxYBQMRLwSNazP9dE.roa (raw, json)
Hash identifier: HqL4dVrrJ+F0hITY5Msgj/0oqRkVnE3AV8r2EW0yVJM=
Subject key identifier: 6B:6A:E5:A6:20:32:AE:C8:71:60:14:0C:44:BC:12:35:AC:CF:F5:D1
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018571031D01FB9FC1F444FE2248C238472D
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/a2rlpiAyrshxYBQMRLwSNazP9dE.roa
Signing time: Mon 02 Jan 2023 05:45:07 +0000
ROA not before: Mon 02 Jan 2023 05:45:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211043
IP address blocks: 45.67.98.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:03:1d:01:fb:9f:c1:f4:44:fe:22:48:c2:38:47:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 2 05:45:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b6ae5a62032aec87160140c44bc1235accff5d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:6e:66:d0:c3:00:7c:d7:0d:fc:80:1e:fd:58:
4e:b6:67:4f:c3:c2:fd:9f:5f:ba:c5:02:dd:d2:5d:
5d:14:ad:39:aa:5f:de:f6:bc:cd:ad:a2:35:33:a5:
22:72:01:a1:0a:86:80:64:bb:9e:f7:43:e2:82:54:
5c:b9:f8:54:d0:83:14:fc:51:e0:07:98:52:4f:fb:
c1:69:7a:07:fa:c7:e0:43:ac:48:f6:16:86:51:c9:
0e:1c:9a:8a:75:2b:a5:e5:b8:b7:ad:f6:8b:1d:72:
d0:4a:95:4d:ad:71:5b:fe:74:1a:ba:d3:f4:9b:11:
e0:69:c1:7b:3f:06:2d:36:db:32:ee:03:52:10:e4:
72:a2:b9:95:2e:b8:5d:4c:77:83:ad:f7:e7:2f:9c:
42:73:56:ff:dd:76:9a:5e:35:2d:a3:ab:ee:fa:7b:
bc:4c:3c:de:59:14:fc:a4:b6:1b:c4:fe:d5:6c:3d:
96:a0:40:2b:77:b4:16:ed:27:74:cb:30:22:4b:75:
72:1f:7e:16:c5:18:1b:50:9a:27:30:9c:68:be:fd:
09:04:01:8d:5c:48:e8:1d:a4:51:12:45:bd:1c:f2:
4d:39:c8:f9:92:68:f5:a6:9a:92:b3:f0:db:df:9f:
df:b3:15:c6:ab:75:1e:3f:a7:27:fd:3e:45:8a:c7:
57:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:6A:E5:A6:20:32:AE:C8:71:60:14:0C:44:BC:12:35:AC:CF:F5:D1
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/a2rlpiAyrshxYBQMRLwSNazP9dE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.98.0/24
Signature Algorithm: sha256WithRSAEncryption
52:33:5a:61:f0:42:23:8f:fb:3a:3c:62:53:01:42:47:3e:48:
20:16:be:6e:47:04:52:3c:2c:6a:fb:d9:ba:bf:cd:fb:07:27:
e5:63:22:ae:e7:b8:97:88:d7:1d:5c:85:d4:49:a9:cf:49:ae:
94:b9:53:6d:f1:bc:ac:ee:ea:a4:9c:80:b0:b2:6b:af:af:3d:
67:8a:97:d7:c3:5e:41:b6:38:cb:76:d1:bd:39:93:dd:93:0e:
ed:75:18:53:1a:30:fb:98:e7:3f:d7:76:09:79:56:3f:05:d3:
87:41:9b:0a:48:c2:42:c8:c0:5f:b0:92:8b:f0:b2:aa:41:82:
be:36:d5:d3:c9:c2:bb:67:19:86:ad:42:85:c4:df:fb:5c:a7:
ba:f1:30:08:c8:de:a0:be:3a:fe:b3:77:dd:e1:fd:38:f5:62:
76:f4:11:6d:81:9c:04:56:f4:7a:0b:f3:12:06:74:83:9c:80:
b6:a6:2d:37:f0:76:3d:d9:13:60:b4:1d:34:bd:92:09:f1:dd:
17:07:3d:36:5f:65:27:35:42:64:38:12:42:d7:6e:08:6c:0d:
50:7f:85:5c:0f:2c:ba:09:79:a3:7c:8c:d5:86:b8:cd:8b:f1:
30:de:74:88:88:fb:e3:71:df:2c:b5:32:0c:c7:23:82:d3:91:
61:3e:0c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:28 2024 by rpki-client on console-fra.rpki-client.org