Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/H3jwdNXPsLVlPBma8V8JB3qO3OY.roa
File: H3jwdNXPsLVlPBma8V8JB3qO3OY.roa (raw, json)
Hash identifier: Z2XTzc6kmNgHAEVcNKuqMY9zu3UWEnt2rkF0GG/AMb0=
Subject key identifier: 1F:78:F0:74:D5:CF:B0:B5:65:3C:19:9A:F1:5F:09:07:7A:8E:DC:E6
Certificate issuer: /CN=0cebbfaaec24039b41eba56bb1caa51677d21c70
Certificate serial: 01856C0A5F858FF3888C0DCA7D5E753DBB16
Authority key identifier: 0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/H3jwdNXPsLVlPBma8V8JB3qO3OY.roa
Signing time: Sun 01 Jan 2023 06:34:57 +0000
ROA not before: Sun 01 Jan 2023 06:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208493
IP address blocks: 45.129.116.0/22 maxlen: 22
45.129.117.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:0a:5f:85:8f:f3:88:8c:0d:ca:7d:5e:75:3d:bb:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cebbfaaec24039b41eba56bb1caa51677d21c70
Validity
Not Before: Jan 1 06:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f78f074d5cfb0b5653c199af15f09077a8edce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:55:fd:f2:32:94:02:9e:46:98:75:21:41:e7:
dd:19:90:a9:46:32:2d:d0:63:bf:e8:b3:0e:73:dc:
9d:01:74:57:64:ae:61:bb:1c:b3:71:fe:c0:cd:4b:
4e:0a:50:2d:6e:ab:ac:6d:52:86:99:a2:40:fb:ce:
df:5a:51:fc:5d:48:32:2b:5d:a6:c7:a6:b5:89:2c:
68:0c:43:4a:74:95:75:e5:f8:33:77:2b:ff:9e:77:
32:34:70:cd:e2:8a:a6:81:e7:5d:87:c7:a8:af:72:
26:40:9d:16:d3:fc:b9:00:54:fb:f5:dc:d5:83:a3:
38:d3:c9:e2:94:79:70:c8:2f:b7:fa:56:ef:c9:9a:
75:d8:fc:0d:45:53:77:52:a5:f6:38:f6:a4:4f:61:
fc:5e:04:7a:f1:ee:b1:5c:fd:6e:01:3d:b2:88:ac:
c4:51:11:2a:d2:f6:cb:e0:4f:ba:e5:20:6e:0c:16:
85:9e:4a:cb:aa:ab:b5:19:54:71:32:0a:b5:f4:16:
0d:07:be:f6:ca:ca:30:06:34:d4:f2:52:3d:5f:83:
ed:ac:3b:0d:12:7d:56:4e:e0:41:33:3b:b5:ec:2f:
75:65:64:e5:b8:a1:bb:71:2a:ad:4f:62:ba:b1:16:
ba:a6:cb:6b:1d:6a:84:8b:58:0d:20:68:79:30:f9:
28:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:78:F0:74:D5:CF:B0:B5:65:3C:19:9A:F1:5F:09:07:7A:8E:DC:E6
X509v3 Authority Key Identifier:
keyid:0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/H3jwdNXPsLVlPBma8V8JB3qO3OY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.116.0/22
Signature Algorithm: sha256WithRSAEncryption
52:d6:e0:59:99:90:b2:ac:a4:b3:e2:4b:e3:e8:8c:bf:63:16:
c3:70:55:3e:60:59:d6:cf:69:03:28:2a:00:af:82:62:09:0f:
85:78:67:82:8f:3c:09:c4:b4:55:d2:fb:a2:fa:11:80:53:88:
25:33:63:83:7c:51:d0:02:2e:9b:10:b0:d4:f2:a6:3a:2f:a4:
7d:4b:dc:4c:3d:a7:5a:20:bf:b7:7a:3f:25:86:da:53:1f:2e:
1f:25:57:60:04:9a:bf:ca:d9:31:52:70:0b:42:96:36:42:23:
59:a8:51:c0:66:e5:13:87:44:fb:cf:17:ee:d3:a3:ab:fc:92:
b2:3b:8d:ae:c8:d2:05:34:a7:5c:2f:97:f8:7c:c1:c6:46:f7:
31:51:14:c9:a6:ac:3a:a4:ab:9f:1a:c4:83:59:e9:07:06:97:
2e:c1:45:30:50:7f:5c:bc:5d:60:2e:25:7c:c7:14:0e:7e:8a:
08:2e:1c:e5:2f:30:35:d4:ec:41:07:d3:37:34:17:3b:8a:7e:
08:7e:20:d9:d3:ef:23:f0:fb:76:62:a0:8c:4a:63:f4:8e:57:
ee:af:5a:41:93:44:3d:cc:a2:46:5e:f0:d5:97:ad:ab:12:5b:
8d:0c:4e:8b:cf:16:8b:f3:e8:8b:b6:5c:d1:b1:a7:28:c6:b1:
b4:1f:3f:1f
-----BEGIN CERTIFICATE-----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Generated at Sun Oct 22 10:58:07 2023 by rpki-client on console-fra.rpki-client.org