Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/9N92qApIKaWU2B6jZCMTADdW-Lg.roa
File: 9N92qApIKaWU2B6jZCMTADdW-Lg.roa (raw, json)
Hash identifier: SinH//HJYJl1QD2KjPctkllHt6q9HehagfIVbYbziZo=
Subject key identifier: F4:DF:76:A8:0A:48:29:A5:94:D8:1E:A3:64:23:13:00:37:56:F8:B8
Certificate issuer: /CN=45ed111630e05297795dddd298ea1fb29e695c53
Certificate serial: 0185715E5681D082D010F668FC31D4A0D619
Authority key identifier: 45:ED:11:16:30:E0:52:97:79:5D:DD:D2:98:EA:1F:B2:9E:69:5C:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Re0RFjDgUpd5Xd3SmOofsp5pXFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/9N92qApIKaWU2B6jZCMTADdW-Lg.roa
Signing time: Mon 02 Jan 2023 07:24:45 +0000
ROA not before: Mon 02 Jan 2023 07:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 680
IP address blocks: 141.64.0.0/16 maxlen: 16
2a12:e140::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:56:81:d0:82:d0:10:f6:68:fc:31:d4:a0:d6:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45ed111630e05297795dddd298ea1fb29e695c53
Validity
Not Before: Jan 2 07:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4df76a80a4829a594d81ea3642313003756f8b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:22:73:e0:6b:29:f5:0b:cb:c9:9e:27:eb:ce:
97:b0:66:44:1f:52:74:45:38:9e:44:b8:0b:b9:8f:
ea:23:ef:20:4b:cb:e1:d6:f8:d1:8d:a0:fa:55:5b:
39:2e:02:e9:c8:b0:d9:89:02:bb:65:a2:41:6d:05:
a2:c8:cb:e9:33:a1:cd:e6:f1:82:43:d4:be:6d:1d:
0d:bd:54:d6:07:02:7d:69:cd:a5:8b:ad:ae:42:a6:
a0:3d:7d:59:05:d0:69:00:81:12:9a:8d:fa:ef:b2:
f0:b0:c0:af:26:a1:14:51:4b:c1:0b:db:2c:5e:14:
d7:fa:91:8f:c6:75:29:98:84:3e:74:f0:9d:6d:68:
de:70:29:6d:98:c1:56:c6:57:4a:1f:5d:3f:3c:a0:
d3:d7:a4:a0:b6:3b:4c:3d:13:aa:b7:a8:c2:2b:f1:
c0:c0:f2:b2:03:57:90:aa:60:26:61:8f:b7:3a:65:
0d:7f:fa:1f:b4:c7:cd:18:af:dc:73:46:f8:ad:57:
35:ee:d2:28:62:ea:7d:70:55:cf:75:ff:25:13:4a:
ad:28:b4:02:7d:aa:aa:00:30:42:ff:6c:43:e0:6d:
48:37:82:b0:49:e8:0f:b2:24:bb:13:55:31:6d:14:
53:77:55:f4:6a:9c:3a:20:79:ad:f5:18:e6:63:18:
dd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DF:76:A8:0A:48:29:A5:94:D8:1E:A3:64:23:13:00:37:56:F8:B8
X509v3 Authority Key Identifier:
keyid:45:ED:11:16:30:E0:52:97:79:5D:DD:D2:98:EA:1F:B2:9E:69:5C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Re0RFjDgUpd5Xd3SmOofsp5pXFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/9N92qApIKaWU2B6jZCMTADdW-Lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.64.0.0/16
IPv6:
2a12:e140::/29
Signature Algorithm: sha256WithRSAEncryption
1b:be:b8:a4:10:46:80:6a:62:a8:02:5e:8d:8f:7a:3f:25:0d:
c4:c8:50:2b:d9:a3:5a:99:16:cd:bd:88:eb:f2:91:e9:23:72:
37:93:e0:31:a8:f5:85:20:cf:4c:a1:5c:42:a7:33:4e:fe:89:
a0:cb:a5:17:99:e7:08:b1:f9:66:09:a8:e6:23:11:97:24:4d:
97:40:48:88:0a:7c:6b:79:8c:f9:f0:24:0f:76:fd:4a:dc:4d:
0b:51:b7:01:9a:e7:7a:ef:fa:9f:36:bc:fb:6c:da:91:d1:84:
83:4a:b9:7c:83:83:08:6b:41:93:6a:93:9d:eb:de:62:af:3d:
8c:aa:a6:8f:fe:40:36:4d:0b:1c:41:48:1a:e0:5d:17:67:d7:
b8:2b:65:f4:fc:b3:be:c3:45:74:02:69:3f:6c:23:0a:92:5e:
69:aa:4a:8b:92:4d:c9:8b:a9:e7:c9:ab:7d:eb:b1:09:d0:8a:
de:bf:3c:ac:de:45:cb:c3:61:2b:e7:c2:db:0b:75:e5:af:98:
de:ca:2c:bd:9f:f9:41:a4:ae:1a:fe:7c:2f:ff:a9:3a:d8:99:
5e:b7:41:65:ef:57:b0:2b:97:db:0b:6a:d7:f6:68:8b:b3:b1:
05:23:2e:48:74:d8:b3:e2:c4:b6:36:71:33:78:4f:10:e9:08:
c3:b1:1d:45
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:15 2024 by rpki-client on console-ams.rpki-client.org