Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/B1T6ipaJlpff43GHlDjWybmbpvY.roa
File: B1T6ipaJlpff43GHlDjWybmbpvY.roa (raw, json)
Hash identifier: 9hpXJh0EwanNEDduhhtg/89LkNxMepwsICjiNPP/9zo=
Subject key identifier: 07:54:FA:8A:96:89:96:97:DF:E3:71:87:94:38:D6:C9:B9:9B:A6:F6
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018571E7A4169BA5BB3BBDFAECD3CDFAF75E
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/B1T6ipaJlpff43GHlDjWybmbpvY.roa
Signing time: Mon 02 Jan 2023 09:54:44 +0000
ROA not before: Mon 02 Jan 2023 09:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47381
IP address blocks: 45.88.93.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:e7:a4:16:9b:a5:bb:3b:bd:fa:ec:d3:cd:fa:f7:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 2 09:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0754fa8a96899697dfe371879438d6c9b99ba6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:16:55:80:57:18:b4:89:64:28:45:9e:9d:c3:
12:28:77:1e:ad:29:4f:e6:85:0b:34:b7:c1:b8:40:
3b:5c:df:89:f8:8f:05:93:24:34:50:2a:27:f7:05:
27:27:ea:19:5e:d6:3e:e4:6a:0d:54:ad:42:60:41:
30:31:2c:13:4d:69:70:f8:e3:e9:9a:cc:ae:a2:77:
d1:04:87:6a:bc:e3:57:d0:eb:ba:a4:83:c5:7b:46:
b3:7f:6e:f4:7a:ce:df:a3:06:a8:e8:07:a0:2a:cb:
61:b4:dc:09:3b:50:e4:aa:f2:03:c9:04:7b:f6:13:
5c:73:29:4e:45:7f:f9:97:93:18:fd:f4:f2:68:7c:
93:64:b5:49:9b:2a:ad:a4:8f:0c:3f:75:c6:72:21:
f8:83:26:18:40:71:8b:91:fe:b1:8a:2a:39:04:77:
d7:f8:77:82:3c:82:4d:cf:cf:a7:64:2e:b5:ba:b9:
32:84:5d:e3:f2:b8:ff:4d:55:e3:cc:1b:f5:01:20:
b2:b0:94:43:21:c0:2b:9c:24:9a:12:58:1e:f0:c7:
72:ac:a3:58:a7:db:db:1b:54:f1:55:38:ba:49:0e:
52:a9:93:c9:ba:ce:05:3b:f9:08:ed:b8:42:e9:2b:
03:17:67:96:1a:f0:63:f6:f6:19:45:98:52:dc:bc:
03:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:54:FA:8A:96:89:96:97:DF:E3:71:87:94:38:D6:C9:B9:9B:A6:F6
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/B1T6ipaJlpff43GHlDjWybmbpvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.93.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:13:b4:24:df:93:3d:9a:ac:6a:e6:6b:b7:45:cd:25:3a:22:
35:4c:ce:20:5c:72:41:dc:85:94:61:d2:9b:2c:21:22:08:e8:
bd:f1:80:4e:d1:ec:4a:6d:e0:ee:77:1a:be:c3:10:9f:4e:08:
49:f0:d0:6f:71:eb:5a:77:0a:d7:1f:40:ca:0c:9f:06:72:36:
c9:1e:dc:8b:d1:b3:31:e9:72:35:d0:27:26:82:a7:c9:23:fb:
3b:dc:54:91:0a:f7:30:ea:5e:6a:99:db:29:99:f2:a8:80:f3:
40:d2:6a:95:e3:72:24:d1:b1:03:a8:b8:11:b3:16:89:48:1f:
d5:92:0a:1a:6b:7a:a4:a5:7d:c0:0d:e2:8b:be:c9:b8:76:21:
90:c6:e6:4c:c2:2f:5d:e1:37:b2:f0:22:ce:10:ce:16:88:55:
98:fd:f8:1e:94:3a:6c:ab:96:d2:74:0a:f9:9a:29:25:61:06:
af:73:c5:22:78:ce:8d:f7:2f:88:2f:3b:0e:04:27:c2:e5:88:
24:b4:01:86:a6:e9:e5:f8:9d:a6:44:39:69:95:40:14:3c:8d:
ca:cc:45:30:a1:fc:d1:76:8f:9e:58:62:80:0f:b8:92:fb:4b:
a4:4b:53:7d:c7:d5:82:fc:5c:b1:c1:2d:d3:ab:e5:26:65:0c:
e9:8a:17:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:51 2023 by rpki-client on console-ams.rpki-client.org