Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/pGMwndSjpE7FBMjK_rha6P_WM-Q.roa
File: pGMwndSjpE7FBMjK_rha6P_WM-Q.roa (raw, json)
Hash identifier: EZ3IJKFGh8G7PaPmz9qOPcW8vbFOKf161YNxnoKxSak=
Subject key identifier: A4:63:30:9D:D4:A3:A4:4E:C5:04:C8:CA:FE:B8:5A:E8:FF:D6:33:E4
Certificate issuer: /CN=29493731efccc74ad5c273874b9360f7aa689465
Certificate serial: 018570F07AC67421F83EF1C5377586A58BF2
Authority key identifier: 29:49:37:31:EF:CC:C7:4A:D5:C2:73:87:4B:93:60:F7:AA:68:94:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/pGMwndSjpE7FBMjK_rha6P_WM-Q.roa
Signing time: Mon 02 Jan 2023 05:24:46 +0000
ROA not before: Mon 02 Jan 2023 05:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31638
IP address blocks: 45.141.231.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:7a:c6:74:21:f8:3e:f1:c5:37:75:86:a5:8b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29493731efccc74ad5c273874b9360f7aa689465
Validity
Not Before: Jan 2 05:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a463309dd4a3a44ec504c8cafeb85ae8ffd633e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:74:1b:d2:d9:43:aa:5a:32:a4:ce:fe:66:b4:
1c:0e:72:43:0f:b0:6e:1e:77:e1:5c:31:76:69:33:
1c:3a:e5:46:a8:85:e8:47:d3:a8:9a:6d:81:46:d1:
58:e5:20:dd:a6:ea:25:a8:b2:e2:c1:5b:bc:99:4f:
66:c8:99:28:cb:eb:f3:6a:65:83:1d:7f:d4:89:7d:
bb:3a:c0:77:fc:17:9d:d1:a8:b0:3d:f1:ff:92:83:
e7:0f:01:1a:d7:b3:a6:06:ee:ba:35:40:a6:fb:13:
9b:e7:13:86:29:33:9e:35:89:be:72:84:d1:7f:d5:
6d:23:0a:9a:97:31:eb:38:2e:f6:12:63:a4:83:d9:
01:71:78:9e:b6:7b:39:2e:93:bc:09:9e:ec:9b:4f:
25:ab:d9:06:10:d9:d1:ff:6e:39:f6:ee:08:e0:2a:
63:eb:58:b0:de:b1:01:b2:3e:4a:98:b3:bc:4d:5f:
4c:22:4c:3e:11:45:a9:01:7b:11:86:08:cf:71:0d:
44:e8:f0:d1:ac:3b:29:34:2a:9b:68:79:ce:2d:15:
35:d6:eb:9a:11:d1:ef:69:c5:d5:81:e9:02:23:11:
6b:8e:f7:7c:be:94:f9:83:94:89:ca:39:7f:40:80:
e4:31:2d:85:97:07:06:c5:0a:a3:2f:22:37:a0:61:
49:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:63:30:9D:D4:A3:A4:4E:C5:04:C8:CA:FE:B8:5A:E8:FF:D6:33:E4
X509v3 Authority Key Identifier:
keyid:29:49:37:31:EF:CC:C7:4A:D5:C2:73:87:4B:93:60:F7:AA:68:94:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/pGMwndSjpE7FBMjK_rha6P_WM-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.231.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:c6:95:d0:dc:7a:59:b4:a4:be:7d:e5:a7:37:4f:94:78:92:
84:bf:54:a2:84:d5:f2:40:4b:8b:70:40:04:55:40:1e:db:26:
72:60:ff:4a:fb:e9:c5:7c:4b:25:bb:64:4e:66:c8:dc:1a:79:
ca:cb:3f:2c:13:5f:d9:a3:68:cc:2b:34:3f:72:f6:b3:a4:54:
11:e4:84:2a:47:83:4b:cf:be:c8:ba:d9:fd:6c:65:f0:a2:fe:
b3:c3:e3:c8:30:51:87:13:2d:04:e0:11:74:be:d5:50:e9:89:
bb:4d:2d:47:ac:74:2f:6b:02:bb:c3:18:0f:4a:44:25:83:68:
85:a6:50:89:f4:d4:1d:bb:93:d9:d3:fa:93:1c:9a:92:46:55:
6a:f3:ef:da:52:59:b1:cd:0b:2e:98:4e:21:d3:9c:27:88:5f:
9c:52:fd:40:48:f7:88:1c:ac:a6:6c:f3:bd:29:db:58:28:33:
ff:ea:3e:27:b0:c0:3e:7f:4e:2f:74:d6:44:63:63:e5:0c:f2:
8e:c9:e9:80:de:b2:c4:87:72:59:ad:2a:1c:39:e0:09:ba:5b:
fb:0f:28:de:f7:b8:81:9f:d3:06:07:51:34:85:20:a9:a0:f3:
64:d3:d0:e4:b1:e1:a6:18:55:9e:0a:0b:6d:bd:de:6a:6d:de:
8a:db:cb:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:50 2024 by rpki-client on console-ams.rpki-client.org