Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/5hIJQEMyZ8aqcWDtmznAk5aoVXI.roa
File: 5hIJQEMyZ8aqcWDtmznAk5aoVXI.roa (raw, json)
Hash identifier: oL3hD6zXgKnucbbKe+Zjn0WKR1QbWgOQKX1T7R7naig=
Subject key identifier: E6:12:09:40:43:32:67:C6:AA:71:60:ED:9B:39:C0:93:96:A8:55:72
Certificate issuer: /CN=d65c1b7d9f04c7f04327e6c446416e2f8c31d57d
Certificate serial: 01856CE6152C4AA21B50E378E0A1ED005E3A
Authority key identifier: D6:5C:1B:7D:9F:04:C7:F0:43:27:E6:C4:46:41:6E:2F:8C:31:D5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/5hIJQEMyZ8aqcWDtmznAk5aoVXI.roa
Signing time: Sun 01 Jan 2023 10:34:56 +0000
ROA not before: Sun 01 Jan 2023 10:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 45.91.61.0/24 maxlen: 24
45.91.63.0/24 maxlen: 24
45.91.62.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:15:2c:4a:a2:1b:50:e3:78:e0:a1:ed:00:5e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65c1b7d9f04c7f04327e6c446416e2f8c31d57d
Validity
Not Before: Jan 1 10:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6120940433267c6aa7160ed9b39c09396a85572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f0:6c:50:f0:b8:2b:36:5d:9a:f9:2b:45:b0:
5f:d1:3a:9f:f4:83:46:8a:b8:c0:fc:a9:e2:fa:df:
eb:d0:78:01:b5:de:25:2a:49:0f:8b:2b:a1:cf:ff:
b4:05:a8:2c:15:75:83:0a:6e:ee:1f:b1:b0:ce:c0:
83:91:9e:a7:dc:48:04:98:06:28:ae:80:7e:51:50:
47:76:40:67:e9:ee:a3:8b:56:b0:a1:41:28:10:6e:
b5:c4:06:65:b3:e4:22:7c:f7:ea:d8:72:bc:5b:ba:
fd:e6:b7:30:8c:9e:2b:43:59:80:e3:67:fb:d7:a7:
ac:ad:65:d0:b6:b3:cf:d4:56:fd:99:f6:2c:f0:8f:
f1:0c:34:5b:c8:59:ce:44:fe:5f:a6:a4:2c:b4:c0:
00:dd:1f:d6:c5:79:c6:8f:a8:b2:a7:f6:ed:f1:1e:
ad:72:5e:bd:a3:d5:cf:a6:ee:d2:98:12:02:cb:25:
95:27:ac:76:2e:c3:03:62:cd:7c:3c:ab:3a:d2:9f:
f1:48:28:c6:8f:ce:60:3e:9c:6e:3f:9c:81:36:d0:
df:af:7a:8b:7c:e2:19:6d:9f:4e:c3:a3:f9:f6:7a:
44:21:1b:35:56:59:f0:7c:b3:30:79:8e:d3:a8:c4:
c0:a5:fa:56:8b:a0:4e:b9:ca:55:b1:31:61:94:1e:
b5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:12:09:40:43:32:67:C6:AA:71:60:ED:9B:39:C0:93:96:A8:55:72
X509v3 Authority Key Identifier:
keyid:D6:5C:1B:7D:9F:04:C7:F0:43:27:E6:C4:46:41:6E:2F:8C:31:D5:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/5hIJQEMyZ8aqcWDtmznAk5aoVXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.61.0-45.91.63.255
Signature Algorithm: sha256WithRSAEncryption
02:2a:41:cb:9a:be:d5:0f:18:cd:9a:c5:e7:8d:5a:c5:80:69:
62:80:98:de:0b:8e:92:d0:ff:8a:36:23:e1:e2:19:48:1a:b2:
c6:cf:80:d3:89:b5:ab:02:f7:00:03:ca:33:ed:4e:df:ae:18:
e6:0c:80:8e:59:5b:bb:14:55:1b:43:9a:36:c0:b9:d7:b9:dc:
7b:f8:e9:34:ee:c0:65:85:99:df:4a:3e:76:1b:e9:c8:7d:ae:
23:30:d4:45:57:f4:2f:c9:c0:8b:34:f5:40:2f:01:e1:10:6b:
ed:13:0b:07:33:42:d6:9f:7d:dd:4a:90:28:04:f8:96:9b:c9:
a0:60:42:67:b0:92:c7:8d:ec:d0:ae:42:ac:45:15:96:4e:1f:
65:9a:51:84:bd:44:c4:f9:ea:61:db:15:c8:b8:f5:6a:31:2d:
b9:14:8b:ff:30:83:0e:47:28:ee:57:c8:a9:e8:e7:a0:c8:c4:
29:44:fe:1f:da:6a:37:5a:74:a1:c4:06:14:36:ad:27:10:e2:
69:21:92:c4:1e:2a:f1:82:ff:fb:14:a2:c8:d5:16:a8:2e:29:
0b:ca:95:a7:4d:02:37:d2:cc:92:a9:d0:ae:73:2c:f9:03:2b:
09:05:9f:93:b7:d3:fe:db:18:8d:75:54:33:ba:a3:06:2b:09:
00:9a:f9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:53 2024 by rpki-client on console-ams.rpki-client.org