Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/eMB7hd_iEXmyXTlAC0PyFGFqUJc.roa
File: eMB7hd_iEXmyXTlAC0PyFGFqUJc.roa (raw, json)
Hash identifier: uMLWMA3K+4eCNnF1cuP7z4zEHHH6XNGhC00iXB8uEAs=
Subject key identifier: 78:C0:7B:85:DF:E2:11:79:B2:5D:39:40:0B:43:F2:14:61:6A:50:97
Certificate issuer: /CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Certificate serial: 01856DC1CC415F5FA37D93F7120DED2588CB
Authority key identifier: DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/eMB7hd_iEXmyXTlAC0PyFGFqUJc.roa
Signing time: Sun 01 Jan 2023 14:34:55 +0000
ROA not before: Sun 01 Jan 2023 14:34:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60609
IP address blocks: 45.67.148.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:cc:41:5f:5f:a3:7d:93:f7:12:0d:ed:25:88:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Validity
Not Before: Jan 1 14:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78c07b85dfe21179b25d39400b43f214616a5097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8a:3f:35:c4:9e:91:01:3e:a6:b4:15:e5:fc:
20:16:97:c3:e6:10:3b:a3:b0:75:a5:6a:a1:5d:9e:
36:2b:e0:08:f4:50:8a:a7:ec:65:44:ef:af:d4:c4:
27:c9:e0:a8:c8:66:b0:5a:7f:65:d2:51:74:77:c1:
fd:7f:97:4d:d4:76:85:0c:97:cc:3d:10:3e:a3:ad:
7b:48:be:f3:18:46:71:c0:ae:51:f7:da:cf:6e:af:
1b:b8:d5:6f:74:f8:a7:ce:85:9e:60:49:da:e1:9e:
a0:f5:ab:5e:84:9e:b5:41:30:3d:d4:77:75:a5:a5:
81:43:e7:74:64:70:71:39:d8:8f:2d:72:af:3a:31:
7c:4b:df:71:9a:43:44:09:a5:7b:ab:ab:d0:ac:59:
7c:e3:2c:c0:8d:a3:81:7e:dd:ff:c8:06:d2:df:74:
a9:b3:f4:62:b1:a0:37:fb:af:9b:91:58:95:ff:05:
aa:c1:ac:b9:86:30:fd:bd:64:7a:bb:1e:97:d7:99:
fa:59:25:e9:0c:6f:96:f5:a1:c4:d0:a6:3d:5f:32:
5f:1a:76:7a:d6:9d:4b:f9:78:da:82:52:0f:7d:03:
4c:1d:6c:84:f5:a4:f9:03:4b:50:02:cd:39:05:c8:
7d:12:f2:0b:05:18:4c:43:57:f2:42:e3:37:a0:6d:
3a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C0:7B:85:DF:E2:11:79:B2:5D:39:40:0B:43:F2:14:61:6A:50:97
X509v3 Authority Key Identifier:
keyid:DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/eMB7hd_iEXmyXTlAC0PyFGFqUJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.148.0/22
Signature Algorithm: sha256WithRSAEncryption
18:aa:92:f4:8d:9a:40:02:59:eb:d5:19:48:24:ce:f0:b6:21:
0c:4e:92:1e:c3:ca:6f:f9:9c:30:11:64:96:1b:fa:13:88:46:
02:3b:58:3d:c3:b0:97:23:67:ce:e5:9c:ee:fc:d4:96:eb:36:
5a:84:bc:74:c1:76:45:d7:e7:20:1c:e1:12:c1:fc:3d:d9:27:
b3:cf:21:97:03:f9:7b:5c:3f:37:24:2b:1b:1a:88:a6:c1:c5:
2c:f4:ab:83:f3:1a:89:38:73:94:cb:c0:e8:bc:b4:3e:f8:56:
24:4e:5c:62:4e:59:1a:0b:3b:04:8c:06:8b:f0:ef:3a:ca:a7:
38:77:98:46:a7:1b:83:cb:9f:d1:e2:ad:73:70:0d:19:6b:d2:
81:c9:5d:96:29:36:89:14:9f:02:0a:de:a9:e7:70:04:11:b6:
fa:df:6f:93:06:fe:57:1c:68:30:2d:fd:60:83:d2:80:58:9c:
4c:c6:90:ad:0c:cd:75:4e:f7:24:a1:c5:86:b1:fa:1b:28:e0:
cb:18:88:c5:bd:9f:e6:72:d3:25:9c:1c:4d:0d:ef:a0:c4:ed:
49:b9:ef:92:80:1c:64:41:8f:9a:73:c0:47:97:2b:49:4f:68:
0b:d8:d2:a9:98:4e:e1:f9:98:d2:a0:5e:84:8d:45:79:32:e2:
01:75:8a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:40:18 2024 by rpki-client on console-fra.rpki-client.org