Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/P_fQRtpYxkZbIxqbDa0EtgjZasE.roa
File: P_fQRtpYxkZbIxqbDa0EtgjZasE.roa (raw, json)
Hash identifier: s1GjgLY4qSXLRYxaMFdVKoOlKHJBQLgetdDk6QxsDxk=
Subject key identifier: 3F:F7:D0:46:DA:58:C6:46:5B:23:1A:9B:0D:AD:04:B6:08:D9:6A:C1
Certificate issuer: /CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e
Certificate serial: 01857079677DC1F2895BFA01F9C8048A8B2B
Authority key identifier: E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/P_fQRtpYxkZbIxqbDa0EtgjZasE.roa
Signing time: Mon 02 Jan 2023 03:14:42 +0000
ROA not before: Mon 02 Jan 2023 03:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209810
IP address blocks: 45.129.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:67:7d:c1:f2:89:5b:fa:01:f9:c8:04:8a:8b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e
Validity
Not Before: Jan 2 03:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ff7d046da58c6465b231a9b0dad04b608d96ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6a:2b:6c:11:e0:93:70:2b:90:df:b6:35:6b:
62:ba:f6:0f:0e:29:e3:44:bc:9f:34:ef:86:19:a3:
e3:1c:a9:cb:3d:3e:a3:75:87:74:94:e9:67:dc:bb:
ba:5e:20:ab:65:a3:0f:27:58:02:a4:ef:74:8d:85:
31:2f:23:ba:1e:73:d6:fc:1a:f0:48:68:ef:88:4d:
81:30:16:4c:24:b9:f7:cf:22:29:83:ee:ba:52:ec:
60:d1:81:ed:97:4f:b2:98:a0:93:a1:8f:2a:25:c0:
76:12:a2:6c:e9:cd:1c:d5:67:0b:79:71:03:8b:c6:
87:cc:a0:70:bd:00:a9:a7:5b:3c:cf:c2:f0:10:12:
e6:fa:33:28:f8:7a:76:b5:c5:ba:c7:e8:fd:67:96:
6a:aa:58:1f:fe:01:92:66:53:1e:14:2b:01:19:be:
14:65:13:cc:80:d5:e5:90:3d:84:16:fd:aa:ee:27:
fa:6c:8e:a4:1d:8f:c4:1c:28:82:61:00:ea:a0:a6:
87:d7:ae:08:04:b2:1b:76:88:b3:1e:31:ca:41:b1:
a5:64:a1:ff:16:7d:10:1c:07:57:c7:27:30:1a:5f:
51:1a:14:c0:76:15:85:2f:6e:f6:6d:0c:97:89:77:
30:27:43:08:d4:b2:fc:f2:b2:de:1b:10:b9:79:2a:
c7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F7:D0:46:DA:58:C6:46:5B:23:1A:9B:0D:AD:04:B6:08:D9:6A:C1
X509v3 Authority Key Identifier:
keyid:E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/P_fQRtpYxkZbIxqbDa0EtgjZasE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.106.0/24
Signature Algorithm: sha256WithRSAEncryption
37:68:37:7b:49:04:ac:05:96:9a:e2:f4:e2:4f:0b:92:30:74:
28:06:51:5d:3a:fa:5f:91:c2:47:e4:46:8b:f2:38:2c:28:71:
f8:2c:60:e2:22:94:07:d6:13:e7:f5:3c:64:fd:47:66:66:b9:
f5:5b:7a:75:5f:c0:11:78:9f:3e:45:b4:7a:db:39:62:8d:37:
cd:75:8f:83:90:6e:31:a4:16:6b:9b:7d:e0:f1:30:74:27:05:
cc:c7:91:14:90:68:cf:f1:16:d2:65:6b:d2:a6:f8:ab:ed:c9:
b2:1f:01:08:d6:f3:5f:34:17:97:e9:dd:c8:e3:51:2b:40:aa:
14:5e:28:c2:86:d9:2c:22:68:bb:e3:17:d2:a1:7c:b8:93:ae:
78:4f:fe:6d:a7:1b:e6:f8:e1:3a:52:99:fc:6f:b8:1d:32:96:
40:0e:45:57:1f:a5:eb:54:b7:b1:94:41:52:a0:06:1c:f7:b7:
de:e3:4d:16:7c:75:98:a3:48:f0:ed:64:27:3a:b9:4c:10:cf:
a0:21:37:3f:5a:d3:71:9c:3e:a2:de:14:6a:23:c2:a4:9f:3b:
8d:cf:19:87:92:1e:e9:2d:e5:51:e3:ad:8c:bd:67:61:50:1c:
ff:22:a0:0d:9d:1d:14:7c:2e:ae:2d:60:0c:82:d5:5e:9d:c5:
e1:20:73:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:35:51 2024 by rpki-client on console-ams.rpki-client.org