Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/TAtAiMUpeMlZRZPJqT4pLuLJ9ls.roa
File: TAtAiMUpeMlZRZPJqT4pLuLJ9ls.roa (raw, json)
Hash identifier: X0KHVc8oX/Yy5ebEm+9AMVT18lw9XVfwMADjYyc75sc=
Subject key identifier: 4C:0B:40:88:C5:29:78:C9:59:45:93:C9:A9:3E:29:2E:E2:C9:F6:5B
Certificate issuer: /CN=b9b0d33432eca77c054e8fa8707248da4e47db0b
Certificate serial: 01895368E81831E1ABF9497D0CADACBDC784
Authority key identifier: B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/TAtAiMUpeMlZRZPJqT4pLuLJ9ls.roa
Signing time: Fri 14 Jul 2023 07:58:51 +0000
ROA not before: Fri 14 Jul 2023 07:58:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199058
IP address blocks: 45.85.93.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:53:68:e8:18:31:e1:ab:f9:49:7d:0c:ad:ac:bd:c7:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b0d33432eca77c054e8fa8707248da4e47db0b
Validity
Not Before: Jul 14 07:58:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c0b4088c52978c9594593c9a93e292ee2c9f65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:62:96:f1:9b:3d:bf:c2:db:03:a6:9c:20:65:
4c:be:fd:dc:58:22:05:1b:4e:30:ae:98:5c:86:0a:
24:d9:a0:6b:3c:28:31:54:df:94:f5:e9:9c:23:71:
ba:0c:8a:5f:e3:99:2e:dc:65:08:37:70:66:1b:bb:
b0:f8:ee:e5:65:d6:fb:ee:2a:05:e5:a4:bb:1d:30:
af:88:48:f8:63:49:53:4b:35:da:c7:95:1a:74:0b:
21:e6:c8:90:e2:c0:af:05:f1:95:ab:d2:c8:1b:71:
31:b4:91:52:e7:f8:3a:41:b6:ce:53:00:a2:a5:d2:
ec:92:e6:dc:2e:ab:6a:1e:e9:86:c9:05:89:48:9b:
fc:25:db:78:e8:18:05:0c:59:08:11:c7:76:3a:64:
a2:1f:7b:da:a2:af:69:ad:97:1d:44:71:8f:6f:03:
bb:a2:84:fb:7d:12:9d:f1:b6:78:5b:d2:c8:7e:d0:
29:19:b7:59:67:0e:13:b6:4a:75:8c:72:12:3f:3d:
21:db:ef:66:d4:aa:3c:ec:b4:08:61:4b:b4:38:cc:
6c:c6:27:56:3b:f1:f9:be:8f:a9:17:c0:bf:02:74:
4b:62:78:d9:b6:06:a7:ea:c6:95:c7:c8:39:90:ff:
db:71:6e:eb:68:d9:5a:1b:9d:26:fd:7f:23:c2:a9:
4f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0B:40:88:C5:29:78:C9:59:45:93:C9:A9:3E:29:2E:E2:C9:F6:5B
X509v3 Authority Key Identifier:
keyid:B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/TAtAiMUpeMlZRZPJqT4pLuLJ9ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.93.0/24
Signature Algorithm: sha256WithRSAEncryption
75:0d:be:23:1a:53:24:0a:df:20:c3:dc:64:83:65:ab:c6:40:
ee:e9:f2:80:89:f3:03:89:1b:99:f8:2c:5a:98:a2:60:88:27:
de:48:e8:f7:c3:b4:f7:7d:7d:bb:59:68:5c:66:4b:64:15:23:
f9:99:56:ed:4a:6b:14:60:d8:3e:59:a4:35:c9:16:2e:f5:d2:
d5:63:50:d9:81:67:36:40:e1:d1:37:c0:2b:b7:aa:77:a5:e7:
0f:49:9c:d2:7b:d9:e4:75:91:9e:eb:87:17:91:79:75:db:1e:
46:46:e6:44:f7:da:42:0e:70:33:8f:a6:09:a8:00:8e:07:fe:
8e:6f:56:5a:de:e3:0f:ed:7f:21:87:b3:45:a2:e4:83:a7:80:
27:f7:ec:eb:e3:d4:38:ef:27:60:af:e3:fb:b2:91:d3:49:e6:
fa:02:de:99:5f:57:83:06:1b:e3:5b:f9:28:4c:13:99:36:8c:
25:d8:a4:0e:9c:62:36:0d:9a:e6:7f:ae:ac:77:79:20:e4:0d:
6b:5c:77:b4:0e:53:38:ec:38:15:80:2c:8e:6c:f5:e3:91:36:
35:c9:d8:96:fb:66:a4:61:6c:db:16:30:e1:7c:e5:01:ee:c5:
b5:8a:fe:6e:7d:fb:c2:de:1b:f8:f6:a5:87:fc:dc:f8:7b:cf:
8a:d6:fd:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:56 2024 by rpki-client on console-ams.rpki-client.org