Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/2P9OULYdwTPyS-fUkEZSDs56Koc.roa
File: 2P9OULYdwTPyS-fUkEZSDs56Koc.roa (raw, json)
Hash identifier: iTzIZ2qyJNymxuQifKo55tnJM7UxzZHvdR/0KTRnLko=
Subject key identifier: D8:FF:4E:50:B6:1D:C1:33:F2:4B:E7:D4:90:46:52:0E:CE:7A:2A:87
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01856C5410F79EBE6EDF8A9B9CAC4C5443FB
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/2P9OULYdwTPyS-fUkEZSDs56Koc.roa
Signing time: Sun 01 Jan 2023 07:55:26 +0000
ROA not before: Sun 01 Jan 2023 07:55:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209060
IP address blocks: 45.12.161.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:54:10:f7:9e:be:6e:df:8a:9b:9c:ac:4c:54:43:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 07:55:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8ff4e50b61dc133f24be7d49046520ece7a2a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5d:99:18:ff:7c:fc:cc:9c:b2:3b:f3:34:b6:
0c:a9:9c:cc:1c:81:89:61:3a:e1:46:1e:98:fa:c2:
df:98:f2:58:8a:fe:e5:ad:9b:b3:7b:ec:bd:a4:ed:
f0:ee:43:8d:c9:6f:89:5d:e4:0a:82:28:63:28:68:
56:94:83:a7:8a:38:ce:18:34:1e:70:4b:a4:cb:61:
93:40:3b:20:48:11:7f:4c:55:8d:d4:f4:30:7f:5c:
2e:23:a2:0b:82:30:96:3a:69:ad:8b:89:da:83:dd:
82:83:aa:88:2a:9d:05:88:02:8d:5d:d5:ed:95:54:
8e:0d:a2:42:a7:e2:59:bb:7a:41:46:e0:9a:8c:1e:
4c:9c:17:2f:67:b2:59:6d:ce:5d:de:f4:49:50:9e:
a7:51:49:ce:f2:50:68:7d:80:bd:b3:b0:3b:32:b4:
79:54:0f:ea:43:40:7c:b9:3d:00:23:07:69:95:94:
e8:04:dc:e2:0d:17:f5:be:66:28:48:d2:5b:58:70:
4d:0d:eb:01:3d:4d:01:40:52:cf:51:62:00:14:3b:
71:13:19:4e:75:6f:7b:16:38:63:e8:d8:1b:b0:3f:
ae:8d:42:b7:96:d2:4b:c6:e1:36:c3:7a:e4:72:75:
03:6b:ce:a0:53:27:73:a3:a0:fb:ff:b1:63:f0:45:
70:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:FF:4E:50:B6:1D:C1:33:F2:4B:E7:D4:90:46:52:0E:CE:7A:2A:87
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/2P9OULYdwTPyS-fUkEZSDs56Koc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.161.0/24
Signature Algorithm: sha256WithRSAEncryption
25:15:41:4f:8d:30:b0:bd:d6:e3:7e:87:d8:b2:4b:75:3e:19:
52:ae:59:c6:74:9f:74:e4:18:4d:a9:25:d1:6c:74:1e:e2:50:
f6:be:8f:e2:8a:77:1f:28:e6:b3:e2:78:c2:9d:38:ca:13:2e:
af:a6:50:3f:67:0d:da:78:0e:43:c7:d0:fe:aa:2d:1e:f4:3e:
8e:1a:e5:1c:28:10:c7:cd:65:34:5c:04:d9:34:1e:4a:d2:23:
4b:97:1a:d3:1c:48:f6:93:76:aa:73:51:7d:98:d1:bc:16:1d:
81:29:bf:9b:04:97:ee:9d:db:f6:8e:cb:15:f9:04:39:d7:cf:
12:da:5e:72:12:40:fa:b1:6e:b5:ad:7b:3e:06:e9:a0:59:59:
18:bb:69:a9:c1:e9:82:52:7e:40:7b:1d:22:31:de:c7:81:f9:
56:c0:8d:2c:46:39:bd:14:32:e0:d9:6b:47:29:f8:f5:c2:4c:
b2:46:39:0f:3e:46:03:f5:c3:95:db:74:9c:07:d9:78:0f:4f:
e1:66:db:c1:8c:48:9e:6c:e3:14:d4:5c:ef:cf:5f:66:df:c8:
be:63:6d:52:1d:5e:fd:9d:95:00:85:81:7c:be:61:fa:20:86:
d0:d6:51:7f:4c:a3:d8:2f:c3:1c:cc:46:ec:24:13:1c:69:45:
19:ad:18:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:23:00 2024 by rpki-client on console-ams.rpki-client.org