Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/29b1869E3SLxzJY8SxsViF2PL6Q.roa
File: 29b1869E3SLxzJY8SxsViF2PL6Q.roa (raw, json)
Hash identifier: BMpGUXhOtEs7M3X2cpDOv5p4ZUfwpvZ7M+F+9X3udt4=
Subject key identifier: DB:D6:F5:F3:AF:44:DD:22:F1:CC:96:3C:4B:1B:15:88:5D:8F:2F:A4
Certificate issuer: /CN=22acf66f0019c556331bef9ecd8df652782a63f8
Certificate serial: 018AB967B94906D2E7E20DB0164B40E4227B
Authority key identifier: 22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/29b1869E3SLxzJY8SxsViF2PL6Q.roa
Signing time: Thu 21 Sep 2023 20:21:37 +0000
ROA not before: Thu 21 Sep 2023 20:21:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197995
IP address blocks: 45.89.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b9:67:b9:49:06:d2:e7:e2:0d:b0:16:4b:40:e4:22:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22acf66f0019c556331bef9ecd8df652782a63f8
Validity
Not Before: Sep 21 20:21:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbd6f5f3af44dd22f1cc963c4b1b15885d8f2fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3a:af:81:62:da:fd:c5:16:32:c1:dd:18:87:
62:4f:10:2d:75:8d:9e:b5:4f:53:21:3f:bf:dc:fc:
24:d3:19:c1:15:e5:09:a4:ea:c5:82:ed:8b:18:cc:
6b:10:5c:75:10:4f:54:5a:4c:a5:54:74:ec:a1:c1:
13:bb:30:ad:b5:ba:af:6f:ff:fe:d6:a4:62:a6:86:
31:f1:52:42:bf:c9:9e:23:e9:6c:0a:5e:a9:5f:09:
2f:1d:72:f2:2d:c0:29:05:e2:3b:b5:31:0b:fe:3f:
49:a6:d0:6f:88:a1:91:d9:22:30:53:3b:b3:29:3b:
bc:e5:d1:4a:27:3e:2c:92:ff:43:46:31:77:f7:06:
0d:b1:dd:91:26:28:ba:96:93:6c:f5:1b:96:64:59:
59:f5:1f:85:e2:27:73:df:43:2e:ce:48:dd:d8:86:
d5:87:ad:f2:89:1c:8a:cb:8b:9f:7d:0f:83:24:d2:
66:e6:49:f2:52:f4:75:8e:25:b4:86:c3:aa:26:03:
a8:24:8a:66:4b:e2:57:16:9a:52:e7:94:60:cb:b1:
92:08:fd:ec:68:03:3c:39:78:4f:63:bd:33:0f:19:
1c:c1:a8:1e:8d:06:c7:e3:e6:1d:0a:8d:84:ba:e3:
d2:bb:a3:08:4b:1d:1e:75:35:d0:93:f6:fb:38:cc:
ec:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D6:F5:F3:AF:44:DD:22:F1:CC:96:3C:4B:1B:15:88:5D:8F:2F:A4
X509v3 Authority Key Identifier:
keyid:22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/29b1869E3SLxzJY8SxsViF2PL6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.9.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:e9:aa:f5:de:cd:a2:25:5c:ef:e4:af:13:b8:54:33:d0:d0:
b7:27:eb:b6:eb:37:dc:c1:4c:c6:63:c9:06:73:2c:39:1f:f6:
c5:bb:5f:74:0b:f5:5e:15:58:7d:f9:e1:8b:8a:66:60:04:52:
95:2f:30:ea:75:e9:e4:22:e2:11:e7:b0:5f:89:82:7e:76:cd:
5b:70:2f:2c:a9:a9:27:72:f4:ae:d4:ad:97:cf:ff:00:03:2c:
ab:18:d5:a8:57:5d:c9:86:36:35:83:b2:dc:3f:6e:f0:9d:c5:
a6:a3:d1:92:85:61:a4:dc:09:3b:cc:00:d9:a8:4a:b2:16:ec:
9d:bb:56:e9:3e:ed:fe:57:0d:06:9f:4f:52:e8:c2:ee:3c:9d:
75:b0:13:c8:69:b2:a4:b9:86:0b:ae:96:19:96:98:f4:17:12:
b9:3d:4f:2d:12:0d:66:6c:75:ea:2f:dd:29:95:ab:5f:26:25:
f1:81:a4:4b:53:e4:3d:15:86:95:0f:a3:67:4e:49:76:f2:66:
30:f2:7f:2d:92:55:46:d5:96:cd:74:a6:fc:de:cb:b7:6d:25:
19:53:79:41:cf:9b:ce:17:5e:30:ae:e4:6b:3e:e5:fc:d8:d5:
bb:9b:d7:48:92:b7:05:d2:4a:b8:b3:ec:52:fa:0a:ec:74:1f:
ca:fd:de:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:57 2024 by rpki-client on console-fra.rpki-client.org