Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/YqxnXOXmVHYmH3NATVs7HSoTOF4.roa
File: YqxnXOXmVHYmH3NATVs7HSoTOF4.roa (raw, json)
Hash identifier: wqj1WlrJuGNzuoor013n8YaFTi4XcHcdpIKJ15RdrmE=
Subject key identifier: 62:AC:67:5C:E5:E6:54:76:26:1F:73:40:4D:5B:3B:1D:2A:13:38:5E
Certificate issuer: /CN=36aafa5c3f2f8e4a083f81f0cb87bc7aea44891f
Certificate serial: 018570675DD0BC45C50BF6747211E6A3EC93
Authority key identifier: 36:AA:FA:5C:3F:2F:8E:4A:08:3F:81:F0:CB:87:BC:7A:EA:44:89:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/YqxnXOXmVHYmH3NATVs7HSoTOF4.roa
Signing time: Mon 02 Jan 2023 02:55:00 +0000
ROA not before: Mon 02 Jan 2023 02:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51458
IP address blocks: 45.155.176.0/22 maxlen: 24
91.217.168.0/24 maxlen: 24
2001:67c:2844::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:5d:d0:bc:45:c5:0b:f6:74:72:11:e6:a3:ec:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36aafa5c3f2f8e4a083f81f0cb87bc7aea44891f
Validity
Not Before: Jan 2 02:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62ac675ce5e65476261f73404d5b3b1d2a13385e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:90:54:b5:62:bb:e8:36:b3:69:75:ee:7c:05:
f1:f9:13:96:c0:a1:c1:a2:96:c7:b3:2c:ea:64:33:
fd:36:85:66:48:1f:dc:7c:4f:08:0a:b1:a4:36:bf:
e8:d5:ae:95:8a:f3:0d:d1:15:c4:48:67:9e:81:6b:
10:e9:c0:f4:89:e2:62:26:19:8e:16:52:5b:2d:e0:
d7:ef:4a:6e:8f:29:8d:13:ab:63:65:8f:93:b3:5f:
a4:32:c6:43:4e:4c:f7:53:e6:1e:6d:09:77:67:52:
25:f0:7e:78:d3:de:1c:8a:cc:25:31:2d:74:14:e9:
58:04:7f:6e:2a:05:a2:9a:92:9e:b8:66:73:56:aa:
d2:db:28:9c:39:58:9c:98:ed:a3:47:c3:74:af:dc:
c1:74:72:a1:34:87:d1:a6:80:d5:37:4a:4b:83:cd:
40:ad:07:e8:3b:b0:c7:2b:c2:fc:f9:a1:f8:cb:d9:
2f:e7:0e:39:31:2a:b5:c5:5f:e3:f0:88:10:30:25:
4c:fc:87:0b:0a:d8:a7:95:6d:93:ba:e2:23:4e:a8:
7d:aa:23:82:96:7d:88:7c:d9:48:f7:94:a0:55:2a:
1e:b2:61:ea:36:8b:de:26:42:15:1c:75:65:63:93:
e4:b4:b6:01:f5:ca:ba:76:6d:e7:eb:1f:d8:6a:57:
62:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:AC:67:5C:E5:E6:54:76:26:1F:73:40:4D:5B:3B:1D:2A:13:38:5E
X509v3 Authority Key Identifier:
keyid:36:AA:FA:5C:3F:2F:8E:4A:08:3F:81:F0:CB:87:BC:7A:EA:44:89:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/YqxnXOXmVHYmH3NATVs7HSoTOF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.176.0/22
91.217.168.0/24
IPv6:
2001:67c:2844::/48
Signature Algorithm: sha256WithRSAEncryption
5c:ea:47:0c:22:2b:18:48:f1:e1:29:44:c4:c7:c6:7c:18:8b:
e6:2d:9c:34:f5:0a:f8:2e:92:26:70:a1:34:ae:16:55:1f:74:
c3:a8:36:0f:01:b6:85:35:77:73:f6:92:db:df:e4:9f:8e:30:
f3:07:bd:f1:77:06:60:9f:a6:0f:ce:bc:18:ed:cb:66:17:a6:
54:ae:ca:92:cc:46:63:83:9e:a0:7c:d0:82:6f:ac:95:8b:a5:
51:79:80:20:2c:95:9d:e1:c1:54:1b:5c:50:56:bc:29:67:a1:
45:a5:a6:03:86:b5:44:99:42:d9:27:51:05:eb:d8:ac:bb:af:
0c:c2:d0:fd:5a:ec:2a:f1:84:3a:bc:c9:74:76:91:e6:a1:42:
ec:e9:84:5d:2d:52:59:82:15:eb:51:09:71:75:82:3a:eb:47:
60:06:bb:d5:7f:30:c6:c5:8d:20:94:6d:39:b3:58:bc:e5:2c:
58:60:f2:0b:ab:8c:95:f3:c0:3a:55:92:98:23:d7:3f:da:6a:
99:29:7e:69:e5:a3:0c:c6:c8:44:eb:69:f0:df:31:18:1e:87:
cf:a7:d8:63:b5:8c:7d:61:1c:a2:69:f7:7d:b7:45:e8:40:79:
4b:75:17:36:4f:1f:e4:09:3e:72:04:a9:7c:25:66:85:7f:9e:
e2:4b:00:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:39 2024 by rpki-client on console-ams.rpki-client.org