Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/1-J9Qxoguuv5VVRjN1wl7PNCZg4g.roa
File: 1-J9Qxoguuv5VVRjN1wl7PNCZg4g.roa (raw, json)
Hash identifier: QeUTzf24mAoxoq8fDnVuS19+Fg5RdLQRVoCeeDWnn5Q=
Subject key identifier: F8:9F:50:C6:88:2E:BA:FE:55:55:18:CD:D7:09:7B:3C:D0:99:83:88
Certificate issuer: /CN=32316cd4881562da3bf3925b4918b6e11d76514c
Certificate serial: 018572BA8ACE2A156A09A08F3EE176D2F621
Authority key identifier: 32:31:6C:D4:88:15:62:DA:3B:F3:92:5B:49:18:B6:E1:1D:76:51:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MjFs1IgVYto785JbSRi24R12UUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/1-J9Qxoguuv5VVRjN1wl7PNCZg4g.roa
Signing time: Mon 02 Jan 2023 13:45:05 +0000
ROA not before: Mon 02 Jan 2023 13:45:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49397
IP address blocks: 45.81.180.0/24 maxlen: 24
45.81.180.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:8a:ce:2a:15:6a:09:a0:8f:3e:e1:76:d2:f6:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32316cd4881562da3bf3925b4918b6e11d76514c
Validity
Not Before: Jan 2 13:45:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f89f50c6882ebafe555518cdd7097b3cd0998388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:98:b9:95:f4:cf:61:0e:d8:be:1c:96:ce:9c:
78:fe:f8:5b:e6:f8:f8:6a:66:f6:a9:64:e5:c7:a9:
e4:6b:7f:b4:b2:d7:d9:31:66:26:ca:b0:63:31:8a:
f5:c0:cc:17:45:94:42:c2:25:02:5e:59:aa:0d:7e:
63:fe:ef:f2:9e:db:6c:0e:09:31:b5:28:3e:a0:d4:
51:8c:8a:70:3b:44:93:64:27:39:8c:ca:56:ee:67:
da:4f:e4:87:0e:85:67:79:0d:92:9b:4a:88:bc:83:
a7:94:1a:c2:28:23:0a:67:d6:8a:8a:05:d2:ab:f0:
b9:44:e6:ca:23:30:6c:84:8a:cc:58:a3:56:39:2a:
82:eb:0a:c2:f3:85:70:42:7c:98:cb:8d:84:cb:63:
c7:0a:ed:72:4a:cc:a7:d3:e6:de:9c:5a:47:5f:1b:
38:41:ab:0f:a1:40:5c:d5:27:f1:4a:00:c1:8a:ce:
57:26:29:62:fd:89:63:9e:6d:09:92:35:46:4a:4c:
b3:ef:59:27:1d:8a:87:15:52:31:c2:a1:53:ef:e0:
5b:c4:18:7b:8d:d0:24:ed:ef:9c:a7:23:55:ff:05:
6a:17:67:74:e0:d5:a1:7d:5e:55:01:c1:30:14:64:
04:56:69:ad:26:90:32:fe:bc:ce:d5:37:db:2b:b5:
17:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9F:50:C6:88:2E:BA:FE:55:55:18:CD:D7:09:7B:3C:D0:99:83:88
X509v3 Authority Key Identifier:
keyid:32:31:6C:D4:88:15:62:DA:3B:F3:92:5B:49:18:B6:E1:1D:76:51:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MjFs1IgVYto785JbSRi24R12UUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/1-J9Qxoguuv5VVRjN1wl7PNCZg4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.180.0/22
Signature Algorithm: sha256WithRSAEncryption
45:8d:16:86:a4:15:af:60:90:1a:a8:be:41:8c:15:f7:85:63:
3a:48:aa:7f:40:90:e5:80:c4:80:68:0e:2b:84:14:ff:90:82:
73:ec:37:26:2c:a0:81:2f:4e:68:7a:ba:59:c8:54:fd:a3:e8:
97:e4:83:7a:b4:5f:c5:e2:38:2e:27:94:5a:1e:81:35:b3:09:
9e:ac:aa:b1:f8:2b:7b:75:8c:a5:df:50:c1:c6:7a:c9:f8:54:
91:02:db:1f:90:bb:08:cd:88:65:94:b0:e9:63:4b:ce:71:07:
bb:af:ee:20:8c:81:31:00:40:77:c1:2f:6d:23:e6:09:36:09:
35:87:b8:ac:bf:77:2c:36:6e:62:d9:95:cb:b4:0b:c3:1e:f1:
ed:9c:30:a6:d6:04:15:b8:59:4f:d7:bc:06:66:62:90:ed:d3:
14:a7:3f:22:53:98:1b:b1:36:eb:98:8a:e0:52:83:6a:b5:e7:
b7:f8:d1:24:fd:c6:dd:e0:07:f8:bc:58:10:44:72:d8:3f:74:
21:07:9f:df:0d:5e:55:0f:cd:5f:d6:00:6f:30:74:97:46:31:
07:84:d6:1b:0f:14:02:4d:e8:c3:bb:a6:af:7e:54:b3:ec:2c:
5f:14:47:c0:1e:e5:c5:fa:bb:cc:4e:cd:f5:e9:0d:23:a3:ef:
bd:c8:20:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:59 2024 by rpki-client on console-fra.rpki-client.org