Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/CP9WZ0WxnoBIu9E9M_NU4bgxrtg.roa
File: CP9WZ0WxnoBIu9E9M_NU4bgxrtg.roa (raw, json)
Hash identifier: rRx7072mRSR8lw1JkKL+fR9jLrCn8o4z6zB0woGITzE=
Subject key identifier: 08:FF:56:67:45:B1:9E:80:48:BB:D1:3D:33:F3:54:E1:B8:31:AE:D8
Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial: 01856D0ADA3C28363029B44C89001FCDD15E
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/CP9WZ0WxnoBIu9E9M_NU4bgxrtg.roa
Signing time: Sun 01 Jan 2023 11:15:05 +0000
ROA not before: Sun 01 Jan 2023 11:15:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57844
IP address blocks: 45.83.132.0/22 maxlen: 24
45.83.136.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:da:3c:28:36:30:29:b4:4c:89:00:1f:cd:d1:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Validity
Not Before: Jan 1 11:15:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08ff566745b19e8048bbd13d33f354e1b831aed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5f:61:8b:0a:d4:1c:7f:89:48:e5:39:91:4e:
8a:5d:cd:26:bc:1c:d6:a7:0b:6e:8a:aa:1c:27:af:
5b:40:d3:67:e1:e9:be:80:e5:44:3a:79:21:ff:6d:
00:7d:b5:07:7e:bf:ae:56:e5:2e:3c:63:f6:df:9c:
a8:0d:a8:88:35:f2:82:d5:07:8e:e6:b7:48:0a:7a:
1f:b7:b0:87:a4:4b:45:08:6b:b0:24:d4:bb:1b:e9:
51:ab:21:de:f6:95:fe:2d:73:c4:61:f3:9f:b3:f6:
4d:4b:09:a0:cc:9d:67:2a:c8:c9:17:b4:6e:a0:56:
b1:72:b3:10:b4:c4:00:35:06:4a:30:33:33:59:cc:
bb:63:93:92:da:60:03:b7:91:2f:b6:20:4d:df:8e:
d7:ed:63:0a:1d:fd:97:7b:96:82:20:b2:90:b0:f1:
84:73:c5:5f:dc:b3:94:4b:65:69:ff:e6:45:8b:2e:
c5:c4:f3:42:3c:93:99:71:39:b2:a5:5b:c6:9d:77:
9c:bb:64:c3:2f:fd:81:58:46:00:cb:bf:39:4a:8f:
7a:b0:ec:0c:99:e3:71:03:30:7f:5f:a0:ff:ad:62:
d6:95:56:10:bd:3e:a0:c9:c3:36:fe:5f:02:ac:a2:
e6:68:75:89:82:d0:db:c5:85:3e:be:a3:1d:1d:a2:
0a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:FF:56:67:45:B1:9E:80:48:BB:D1:3D:33:F3:54:E1:B8:31:AE:D8
X509v3 Authority Key Identifier:
keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/CP9WZ0WxnoBIu9E9M_NU4bgxrtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.132.0-45.83.139.255
Signature Algorithm: sha256WithRSAEncryption
44:92:75:db:b9:70:a6:c9:c2:d4:57:4b:1c:2a:48:05:87:cc:
68:7a:1d:ae:e2:74:bd:2f:5b:ba:72:6c:e6:b6:01:26:5c:86:
b6:02:2b:bb:3a:21:e5:e4:d7:0e:74:7a:36:99:91:81:bc:c5:
85:45:8c:24:2a:c2:33:09:3a:a3:b0:68:23:84:21:58:c1:e4:
b5:68:16:b3:a6:fe:f1:56:72:df:cc:6f:58:79:c6:41:17:90:
98:d1:0e:e7:0b:82:f9:b8:40:ef:a5:aa:17:57:ec:cb:8b:f5:
e6:c8:c1:80:ab:39:c6:6f:5c:7c:75:9c:be:eb:e3:d4:dd:12:
8c:20:67:74:38:e4:a4:56:c4:9e:8f:97:18:6e:aa:a9:32:e7:
ba:80:1e:56:ee:03:82:ca:ad:76:7c:74:ca:b2:ad:a4:96:79:
13:83:c3:b4:97:c6:84:5b:ce:fb:e9:de:63:d1:8b:a4:2a:e1:
0e:44:38:16:2f:be:3b:8c:d1:c8:c9:7c:bf:cf:46:84:ce:18:
eb:bf:59:4e:c9:3c:b3:a7:c6:ac:02:98:2b:c2:70:85:7a:aa:
76:e1:6c:a3:1c:d5:d1:68:c2:ea:60:69:8b:8d:02:b3:14:21:
bf:bd:84:07:86:99:7e:76:30:1d:00:d7:06:b9:cc:e9:a5:7a:
35:18:2e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:54 2023 by rpki-client on console-ams.rpki-client.org