Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/TiTlUbFcZH3JBDTXbH7zyZQVhgw.roa
File: TiTlUbFcZH3JBDTXbH7zyZQVhgw.roa (raw, json)
Hash identifier: EM56tj/HPYWfBWhNvfpmKoEHe2FzaTUhL8dXwBEzllA=
Subject key identifier: 4E:24:E5:51:B1:5C:64:7D:C9:04:34:D7:6C:7E:F3:C9:94:15:86:0C
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 01861683EC6138800C2EE62E22F832A551A2
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/TiTlUbFcZH3JBDTXbH7zyZQVhgw.roa
Signing time: Fri 03 Feb 2023 09:03:09 +0000
ROA not before: Fri 03 Feb 2023 09:03:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30823
IP address blocks: 45.9.74.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:16:83:ec:61:38:80:0c:2e:e6:2e:22:f8:32:a5:51:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Feb 3 09:03:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e24e551b15c647dc90434d76c7ef3c99415860c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b2:05:96:3d:80:10:c8:07:b3:71:cc:cd:48:
13:bc:7c:c6:32:72:7a:19:d0:82:f0:2a:66:4f:11:
bd:b0:3a:d3:d5:17:d4:4a:84:24:0e:ca:a2:f9:28:
b5:f8:e4:28:ed:91:f6:78:d6:07:9d:50:8e:46:2d:
27:6d:75:7d:25:ad:d8:6e:6e:e4:ab:19:14:94:ec:
49:45:94:a8:c9:8e:f2:06:37:7d:8e:05:66:30:3c:
cd:7d:e3:83:ff:01:9b:e2:a6:0b:3f:b1:b3:74:52:
57:f0:46:c1:66:f5:24:e0:24:c3:b7:05:03:e0:a3:
cf:4f:7b:51:01:65:67:f5:81:63:c9:52:8f:48:94:
ce:a2:4c:9a:f4:3a:e8:e0:e3:41:dc:bf:87:70:71:
e4:aa:7f:c5:30:ee:82:56:93:b1:72:2d:f1:90:45:
2b:e3:d9:1b:e3:96:1d:33:a3:69:1b:86:0f:8b:0d:
0c:db:8f:67:f2:f3:c3:9e:42:29:20:24:4b:93:e2:
35:b5:7b:03:70:06:6f:45:3c:6b:a0:04:7f:29:d5:
59:00:c3:4b:48:12:d8:b5:7d:5a:34:e9:28:f3:8e:
e9:db:93:d0:cf:93:90:b2:f6:48:1d:c7:ee:cb:26:
c1:cb:a2:08:f6:f1:17:47:b1:a3:79:85:53:3f:2b:
12:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:24:E5:51:B1:5C:64:7D:C9:04:34:D7:6C:7E:F3:C9:94:15:86:0C
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/TiTlUbFcZH3JBDTXbH7zyZQVhgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.74.0/24
Signature Algorithm: sha256WithRSAEncryption
64:da:ba:a6:70:5e:0b:e0:76:d7:e4:b8:05:0b:26:bf:d2:90:
01:c6:fc:6b:3b:4b:d2:a5:5e:6e:c5:4c:42:0d:d2:12:a4:23:
4e:18:d6:59:bd:8d:15:54:fc:cd:7e:e9:c1:7d:88:53:44:8e:
6d:70:05:98:ce:0f:c8:a4:6d:cf:c5:5b:4a:e2:a4:7d:5e:e0:
f7:ae:fb:dd:05:af:bf:ec:4b:61:d5:9d:d2:d2:99:0a:d6:fa:
57:ac:d2:9c:0e:6d:c6:20:f3:7e:f6:b8:e4:36:11:93:10:11:
15:2f:9b:17:34:5a:8f:b0:cd:d1:d0:01:27:10:d1:95:69:d6:
fa:9c:bf:83:6c:77:84:63:3f:1b:af:2f:98:7a:20:9e:c9:4f:
75:04:8d:a7:21:bc:74:9f:5c:7a:86:eb:c4:d6:39:a6:a1:e6:
7a:a7:da:89:d1:64:6d:3b:c7:d1:c3:e6:f4:b7:ea:e7:10:00:
ca:85:56:26:50:78:82:80:8a:07:15:f9:02:24:ef:15:1a:de:
d0:42:37:17:88:12:91:15:b2:1d:73:0e:77:c4:31:7e:2b:e5:
4d:89:7a:0a:f0:b4:a1:36:95:cd:fc:7a:ad:d9:2e:06:8f:af:
8c:56:55:69:30:35:7f:13:37:40:f3:e4:b8:44:4f:3d:45:c4:
0f:69:15:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:37 2023 by rpki-client on console-fra.rpki-client.org