Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/StgkdrSW1SK-9yAmZo8pf-yEaSg.roa
File: StgkdrSW1SK-9yAmZo8pf-yEaSg.roa (raw, json)
Hash identifier: 2Y1vH7OkpP+vzgBypBuWZzPKVtw470PKL6MaoG2HNcE=
Subject key identifier: 4A:D8:24:76:B4:96:D5:22:BE:F7:20:26:66:8F:29:7F:EC:84:69:28
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018A18C69E73E55572F09D9C8EB93C967236
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/StgkdrSW1SK-9yAmZo8pf-yEaSg.roa
Signing time: Mon 21 Aug 2023 15:46:24 +0000
ROA not before: Mon 21 Aug 2023 15:46:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197071
IP address blocks: 45.90.97.0/24 maxlen: 24
185.117.0.0/24 maxlen: 24
45.67.139.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:18:c6:9e:73:e5:55:72:f0:9d:9c:8e:b9:3c:96:72:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Aug 21 15:46:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ad82476b496d522bef72026668f297fec846928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:11:99:26:ee:07:0b:ed:17:04:13:68:f9:10:
13:4e:ff:63:1e:82:3f:7e:93:13:5d:66:46:ee:ae:
34:d5:6a:90:d5:aa:1d:5f:3d:49:eb:8b:6e:00:f0:
3e:1a:ca:cd:76:e6:4e:3f:91:90:c0:01:c8:a0:d5:
93:f1:12:ac:a4:e0:a2:2e:d3:74:44:c1:25:d6:32:
cf:c1:40:96:6d:48:ac:cc:32:ab:af:ac:97:2d:80:
f1:fd:f8:79:68:36:be:a1:f4:a1:d5:39:14:93:6d:
dc:30:c8:67:98:5c:59:2f:6f:c6:2a:be:01:a9:2c:
8c:86:70:d1:d6:16:52:53:f1:bc:65:76:a9:55:c0:
38:fe:ad:6f:6b:7d:e8:ea:b8:42:08:3a:d8:eb:71:
7e:17:68:38:31:c2:0d:e8:74:3e:6e:9f:63:2b:87:
ef:d3:62:1e:f4:d7:fc:e3:51:d8:58:b0:cd:a4:60:
4e:df:0d:47:5e:0f:50:7f:78:3a:b8:9a:b1:0a:0a:
ec:f4:86:a9:60:21:82:9a:ce:e6:7e:79:51:a0:20:
5f:87:49:2f:a5:d0:3a:aa:42:98:8c:0b:54:d3:f7:
e0:6a:0f:34:36:9b:e0:2d:22:a0:30:8b:8f:72:9a:
3b:e4:b8:07:c8:a1:02:f9:5a:27:5e:3c:40:77:20:
7a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D8:24:76:B4:96:D5:22:BE:F7:20:26:66:8F:29:7F:EC:84:69:28
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/StgkdrSW1SK-9yAmZo8pf-yEaSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.139.0/24
45.90.97.0/24
185.117.0.0/24
Signature Algorithm: sha256WithRSAEncryption
95:71:95:82:b5:6e:e8:f2:ea:4e:a2:85:ee:6a:54:f2:d4:42:
2d:7e:80:0c:89:d6:7e:13:de:34:b8:93:4e:01:da:bd:04:0b:
a3:5d:c4:6f:0e:98:02:66:68:2e:04:5d:df:ca:49:af:1b:e0:
a6:e4:91:5e:a8:a6:5f:17:b1:da:ad:eb:09:0b:59:f4:88:2e:
ee:6f:cb:a2:90:60:cf:5a:a3:41:2c:dc:52:aa:ee:c5:60:bb:
1f:8e:ad:ef:15:89:f9:a3:48:54:5a:df:e9:9d:8b:73:e3:00:
de:e8:74:37:19:fe:64:37:39:85:3b:f7:dc:e4:42:df:65:ba:
1d:33:7c:e8:a4:20:4d:94:2c:1e:8e:9f:6f:d8:2c:ec:d1:52:
39:2b:9a:a6:5e:d2:e6:82:d6:67:9c:be:71:e7:d8:53:b6:e5:
d3:d2:97:cf:bd:5f:ac:bc:13:c0:6e:c0:64:3f:15:04:49:79:
e3:d6:d2:c6:f4:a5:1b:ae:9b:9c:54:d8:82:df:92:32:a1:b4:
be:8c:fd:68:03:b8:1a:ab:1e:be:81:30:09:3e:58:14:e9:e4:
15:f1:26:bd:28:ef:1f:02:5a:45:54:9a:b5:88:36:8a:3f:2e:
f5:e6:7f:3a:cd:f5:47:c1:eb:98:cd:8d:79:56:c7:06:ca:1e:
41:0d:b6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 18 08:12:11 2023 by rpki-client on console-fra.rpki-client.org