Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/c9gHyRIA6--8AsiKPZvPsCT8JiA.roa
File: c9gHyRIA6--8AsiKPZvPsCT8JiA.roa (raw, json)
Hash identifier: 3vtrfZtlzpTFsxq6dtp5Po0uDuLgxglTH5NwdpxepWQ=
Subject key identifier: 73:D8:07:C9:12:00:EB:EF:BC:02:C8:8A:3D:9B:CF:B0:24:FC:26:20
Certificate issuer: /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
Certificate serial: 018CB21BD772461CAA94913F8F57528AE524
Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/c9gHyRIA6--8AsiKPZvPsCT8JiA.roa
Signing time: Thu 28 Dec 2023 20:26:58 +0000
ROA not before: Thu 28 Dec 2023 20:26:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2027
IP address blocks: 45.13.104.0/22 maxlen: 22
62.204.43.0/24 maxlen: 24
193.58.42.0/23 maxlen: 24
2a0f:ce00::/29 maxlen: 29
2a0e:e700::/31 maxlen: 31
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b2:1b:d7:72:46:1c:aa:94:91:3f:8f:57:52:8a:e5:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
Validity
Not Before: Dec 28 20:26:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73d807c91200ebefbc02c88a3d9bcfb024fc2620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ef:8c:3b:e4:bc:b9:c2:06:16:cc:3b:c5:c9:
f2:bd:f7:17:73:7f:61:73:b1:50:96:8e:eb:af:c7:
19:7a:aa:ac:6f:c0:e3:94:b6:51:34:85:33:8e:1d:
5a:b0:ad:54:06:e8:52:3a:2d:94:ae:85:82:c0:7a:
34:36:1e:78:1e:cb:bf:c5:20:1a:f7:8f:08:17:b0:
7e:62:04:db:8c:1b:90:66:ef:54:fb:c6:f1:c7:39:
ff:f9:d8:9e:a4:ef:8c:d4:2c:6c:6c:78:ad:86:6b:
f0:99:d2:fb:7c:08:4d:19:67:ae:d0:13:3e:cc:00:
eb:a7:1c:84:13:ab:57:06:f1:55:59:13:26:76:b2:
a8:bc:99:5b:9a:f6:fe:3a:40:5c:5e:70:df:f9:06:
0a:9e:57:4d:34:e0:d9:03:88:4e:95:d4:af:da:08:
ad:02:cc:26:5d:ab:ec:bb:a5:69:98:17:62:19:ef:
07:90:6c:9b:30:da:45:9e:8d:ac:33:d9:ef:96:44:
c4:58:44:80:ff:ac:10:e2:70:22:07:c0:f4:ff:fc:
e9:d7:37:da:a5:f8:fd:e7:b8:d4:ee:c3:fe:8d:85:
68:ff:aa:84:63:b0:45:9b:2e:2d:47:31:8b:b1:60:
79:8e:75:0b:44:52:26:f5:22:29:31:56:86:25:d9:
cb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D8:07:C9:12:00:EB:EF:BC:02:C8:8A:3D:9B:CF:B0:24:FC:26:20
X509v3 Authority Key Identifier:
keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/c9gHyRIA6--8AsiKPZvPsCT8JiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.104.0/22
62.204.43.0/24
193.58.42.0/23
IPv6:
2a0e:e700::/31
2a0f:ce00::/29
Signature Algorithm: sha256WithRSAEncryption
0f:b9:8e:d6:18:2c:9e:01:69:8b:82:e8:0d:98:01:d2:56:de:
e7:a6:58:76:e6:a2:51:7e:5b:7e:96:9e:36:56:e9:0e:06:c0:
6d:3f:f1:de:be:04:29:1e:38:8f:c8:72:f0:83:11:d4:dd:7f:
4f:e9:cd:53:63:25:d5:fc:01:d4:23:18:46:a4:c9:2a:27:2d:
bb:60:11:84:77:3d:0d:8c:0e:16:c1:ea:89:51:e0:c5:2a:a2:
8f:d0:c6:d3:d6:49:f6:59:a4:0a:dd:ac:70:82:11:0b:88:1e:
a6:a5:90:6e:f6:b2:9a:9a:f8:6d:90:94:9f:8d:5e:1b:00:18:
9d:85:21:8b:52:a4:47:c7:78:77:0e:52:c1:70:13:3b:d5:7d:
bb:53:01:9b:95:dc:1f:ed:e9:ea:d6:98:51:36:1b:66:95:0f:
30:51:e7:dd:3c:a1:05:78:b5:ad:8c:4d:ef:46:e4:50:b0:be:
1f:fa:62:42:91:48:ef:b1:72:9f:54:8f:19:25:6b:91:07:1a:
36:01:15:b0:d1:42:2b:49:f8:9e:d9:eb:e1:bd:8e:b8:5e:00:
38:4c:55:45:3e:89:78:11:26:48:30:17:7d:dd:ec:cc:97:4a:
65:6f:31:6a:33:c4:e8:4e:c8:f0:db:b5:10:17:33:c7:11:ed:
cc:5f:c9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:23:19 2024 by rpki-client on console-ams.rpki-client.org