Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/aRPKTysKZqWzCoiPEkuqDSiK03w.roa
File: aRPKTysKZqWzCoiPEkuqDSiK03w.roa (raw, json)
Hash identifier: AX9P29kGgZ+zknDmiJQ77Z1n3JmSM04le6pS3XWMFdA=
Subject key identifier: 69:13:CA:4F:2B:0A:66:A5:B3:0A:88:8F:12:4B:AA:0D:28:8A:D3:7C
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01856CE6224E6DA86E720F8923E77C17EC8B
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/aRPKTysKZqWzCoiPEkuqDSiK03w.roa
Signing time: Sun 01 Jan 2023 10:34:59 +0000
ROA not before: Sun 01 Jan 2023 10:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197071
IP address blocks: 185.117.0.0/24 maxlen: 24
45.67.139.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:22:4e:6d:a8:6e:72:0f:89:23:e7:7c:17:ec:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 1 10:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6913ca4f2b0a66a5b30a888f124baa0d288ad37c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ae:52:de:1a:91:92:b3:b0:50:d0:ff:00:d1:
ff:27:20:5c:ec:3a:1e:eb:f1:e5:2e:4a:5a:7f:43:
85:0f:10:69:b1:c3:a9:0f:14:51:89:06:fa:07:1d:
2f:49:85:d8:d9:cc:f5:5d:35:b0:87:28:4f:19:76:
37:c3:f5:74:37:5f:3e:6d:5e:20:80:64:78:ec:76:
b1:68:ba:7a:e7:b2:48:6d:09:49:ad:e3:ee:32:0d:
82:26:8c:97:46:88:dd:7a:24:67:f3:22:07:a7:f2:
7f:82:7f:3c:c3:5b:98:56:6e:d3:9a:56:db:b0:1d:
ef:0c:dc:50:63:1e:b1:d9:fa:86:c9:bd:9e:3a:a5:
f7:c8:67:17:6a:c7:51:69:0f:a3:31:c5:29:74:c4:
00:17:6f:8a:a8:bd:ab:10:c0:b6:85:cb:f7:45:1a:
27:9f:6f:50:98:8e:d5:7e:5d:39:b6:42:5a:e9:b0:
0a:6d:5b:4f:df:e8:1c:7a:52:98:b2:b3:8c:f7:dc:
14:11:e4:15:73:32:04:06:e2:a5:09:19:73:19:ce:
a2:cb:4e:11:27:22:50:26:7a:45:5a:07:66:9d:77:
62:61:18:62:57:75:b7:e8:c8:8e:a3:25:8d:79:1d:
45:74:7b:24:f3:97:0d:1d:a4:6b:f9:ab:b9:dc:73:
ec:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:13:CA:4F:2B:0A:66:A5:B3:0A:88:8F:12:4B:AA:0D:28:8A:D3:7C
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/aRPKTysKZqWzCoiPEkuqDSiK03w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.139.0/24
185.117.0.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:55:52:61:77:43:a6:92:b4:10:05:3a:9a:9f:4c:cd:bd:75:
78:be:09:65:79:85:0a:8b:c1:e2:56:f9:be:90:dd:0b:54:f9:
95:4e:d1:78:25:93:87:62:e2:28:0a:6c:66:d0:60:1f:7b:00:
75:d7:9a:4f:37:53:66:fa:34:59:38:ef:19:69:78:1f:62:18:
b9:f4:95:39:a1:33:3c:fc:2d:54:19:6c:d3:2e:6e:f9:47:41:
c5:d8:e1:76:11:e3:99:2c:96:34:8f:33:14:90:75:db:21:94:
2c:6a:9a:9b:ec:71:70:da:ba:0e:f9:3a:71:f7:89:60:33:48:
08:b8:ac:49:38:8e:14:32:02:bc:0a:79:d3:9f:b5:42:ab:7a:
61:2a:0e:de:1c:f8:97:e9:97:4c:8b:68:c3:fc:0b:13:67:b0:
d9:d6:22:13:31:46:35:83:55:b4:fb:bd:a7:c1:c6:64:2c:d4:
b0:ad:73:a7:48:d2:f7:ca:f0:2d:46:8f:ce:be:91:4d:ef:e3:
77:df:01:d7:fb:8e:21:4c:2d:ce:73:67:34:65:e0:d1:ea:a9:
ca:4a:1e:7b:8e:5d:03:62:20:4f:86:aa:f1:68:1e:85:38:6a:
f6:bd:24:fd:b5:f8:07:2d:16:43:67:6e:90:44:5a:a5:1c:c4:
61:a9:d8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:19 2023 by rpki-client on console-ams.rpki-client.org