Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/li5FknNpeVI3XXlk0naYp8YIIWg.roa
File: li5FknNpeVI3XXlk0naYp8YIIWg.roa (raw, json)
Hash identifier: uXuoHoFw4lcEyca+2YN89qFvoyIF0lWtMiijTO6W/28=
Subject key identifier: 96:2E:45:92:73:69:79:52:37:5D:79:64:D2:76:98:A7:C6:08:21:68
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018C81C95C06EEC8B23EA89B5FB0110610F8
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/li5FknNpeVI3XXlk0naYp8YIIWg.roa
Signing time: Tue 19 Dec 2023 11:15:06 +0000
ROA not before: Tue 19 Dec 2023 11:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60655
IP address blocks: 45.91.163.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:81:c9:5c:06:ee:c8:b2:3e:a8:9b:5f:b0:11:06:10:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Dec 19 11:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=962e459273697952375d7964d27698a7c6082168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a6:7e:4d:56:1d:b0:56:70:10:19:7e:d8:7c:
78:a6:57:2f:2e:c6:00:2f:9f:08:5c:76:ad:8b:f7:
e2:c1:b7:4a:b3:77:51:36:fd:00:56:94:15:ce:fc:
dc:05:a2:2a:b3:5b:13:1f:4e:cf:01:03:34:88:ae:
37:6a:fa:85:c9:76:1f:ce:ff:24:57:cd:4a:23:ad:
4c:55:f7:c5:4b:81:ee:72:74:84:65:12:84:f8:65:
c1:f0:8e:5a:f0:fc:c8:21:d9:f4:d9:da:d4:7c:2e:
4f:b8:c4:12:14:13:f1:a8:e3:ac:6d:bd:d1:8b:2f:
56:9f:3a:99:1c:be:14:2c:e8:3d:1f:2a:a2:15:a2:
07:40:85:24:e4:98:6d:45:53:a7:a3:56:32:be:2d:
b1:2c:a1:4a:c7:88:02:e4:62:e7:65:b6:2c:23:9d:
1b:bf:67:b7:e0:59:54:e9:ad:52:21:1c:be:fe:f9:
77:e2:74:4b:ec:a3:ec:23:a1:a3:ec:cb:e2:c6:e9:
98:dd:fc:50:f6:31:d0:36:38:11:59:f8:ed:82:98:
86:f0:36:4d:c9:62:de:a6:19:1e:6d:45:01:00:88:
5b:93:16:f6:f7:95:6a:d3:0c:58:0c:6d:e9:01:59:
06:49:70:cb:bf:df:0d:d8:2f:31:e1:e9:55:56:eb:
e3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2E:45:92:73:69:79:52:37:5D:79:64:D2:76:98:A7:C6:08:21:68
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/li5FknNpeVI3XXlk0naYp8YIIWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.163.0/24
Signature Algorithm: sha256WithRSAEncryption
29:2b:ed:dd:d8:1d:65:41:04:a4:96:d1:85:80:d7:70:65:9c:
f7:92:65:53:46:2c:c8:84:48:c9:b3:c7:84:f4:cb:ae:9a:01:
66:ea:f7:e5:9c:4f:fc:77:01:5d:1c:27:6f:9b:4d:78:68:34:
44:8e:dd:47:25:83:cf:eb:ac:cd:fe:57:01:96:73:52:33:55:
04:fd:89:b5:d4:1e:71:c8:20:5f:41:ea:71:c7:ea:26:ed:87:
0a:5d:be:6b:f6:10:01:c8:62:32:0f:66:9f:a6:2a:2b:55:6f:
66:61:ab:29:8f:34:79:3e:17:14:e8:e4:06:89:33:e2:00:76:
17:3f:67:6a:ed:25:6a:12:db:7d:89:bc:19:4d:5a:0a:c9:5c:
cf:00:d7:b7:14:31:c7:70:55:5f:9d:d4:af:f8:73:da:35:14:
47:17:2c:fc:32:9c:ce:d6:51:fc:de:08:06:cc:f3:57:3c:d6:
86:ff:4d:30:e2:64:b0:fe:91:07:2c:8a:a1:19:eb:4b:24:ab:
7d:79:73:09:aa:2e:db:b2:1e:46:80:38:9f:40:82:6d:ee:d8:
f6:58:14:89:bd:ff:79:f0:84:5c:64:1f:e0:93:bc:a5:6f:02:
bc:49:b5:56:ea:a7:d0:69:c0:b3:77:f9:be:05:4d:e0:5b:58:
33:f2:50:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:38 2024 by rpki-client on console-fra.rpki-client.org