Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/k9vbtiwA-KksjjHrUiX--IIawgY.roa
File: k9vbtiwA-KksjjHrUiX--IIawgY.roa (raw, json)
Hash identifier: JA3lu1zIrxcg0zNd1KowgfQesTw3T5Tr9N1guGF455o=
Subject key identifier: 93:DB:DB:B6:2C:00:F8:A9:2C:8E:31:EB:52:25:FE:F8:82:1A:C2:06
Certificate issuer: /CN=c4eb34dda2f8094968494892063351ee0f10e91a
Certificate serial: 018CC500C1E2AE1CB7A7E3369E8A410C601F
Authority key identifier: C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/k9vbtiwA-KksjjHrUiX--IIawgY.roa
Signing time: Mon 01 Jan 2024 12:30:10 +0000
ROA not before: Mon 01 Jan 2024 12:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210015
IP address blocks: 193.151.160.0/23 maxlen: 23
193.151.162.0/23 maxlen: 23
45.80.248.0/23 maxlen: 23
2a0d:e7c7:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 22 Apr 2024 11:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:c1:e2:ae:1c:b7:a7:e3:36:9e:8a:41:0c:60:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4eb34dda2f8094968494892063351ee0f10e91a
Validity
Not Before: Jan 1 12:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93dbdbb62c00f8a92c8e31eb5225fef8821ac206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c0:0a:be:87:9b:9a:b2:c2:59:a4:3e:bd:1d:
fe:21:ec:5e:1c:00:90:15:ea:cf:6c:9e:85:e4:b7:
d6:98:f2:6c:30:0c:c9:5b:8a:92:5e:ac:96:65:28:
72:60:14:36:06:76:25:a6:f1:30:a5:90:b9:35:82:
0c:26:50:ad:68:60:64:de:38:84:ab:e6:67:d3:d5:
53:16:28:63:5f:f7:d4:36:6d:31:e1:af:90:25:78:
bf:81:7f:f4:22:2f:8c:87:7f:a6:d0:91:b4:45:16:
8a:9c:55:79:08:63:a8:57:77:0f:33:ce:89:d1:05:
6f:66:39:3f:f1:06:76:4d:37:59:55:ba:66:c1:a2:
14:68:ab:06:de:56:e1:cf:ca:d8:b1:c8:86:ab:2f:
0f:4a:d1:c3:1f:a5:2f:7f:69:57:d8:4c:67:72:39:
37:18:b6:29:02:f4:1c:7d:60:d4:8d:8d:0e:7d:f7:
86:00:7f:9b:b8:f8:b1:31:2e:d7:5f:bc:e9:5f:90:
31:aa:9e:c1:51:ee:7e:87:57:35:d9:f5:85:72:89:
45:70:20:cc:5a:7a:5c:71:bd:31:f9:53:9b:d5:7c:
77:8d:b7:f6:06:46:36:ed:ad:e3:01:49:83:39:d1:
e2:87:01:a0:a2:ee:6e:21:89:33:c5:9c:27:ef:c3:
17:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:DB:DB:B6:2C:00:F8:A9:2C:8E:31:EB:52:25:FE:F8:82:1A:C2:06
X509v3 Authority Key Identifier:
keyid:C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/k9vbtiwA-KksjjHrUiX--IIawgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.248.0/23
193.151.160.0/22
IPv6:
2a0d:e7c7:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
33:0e:f7:b1:8b:fe:40:cd:d0:61:a3:c4:02:cc:5d:c8:4c:32:
08:32:c1:4d:2e:60:4b:b1:a2:f4:aa:a4:1e:76:66:dc:54:c5:
a2:da:f1:c2:31:c3:7c:be:4b:a0:3f:a9:f3:c2:ef:92:31:87:
38:36:e9:ec:23:b2:49:65:b7:58:f3:b6:e4:d0:c6:8b:cf:b6:
e5:44:8a:60:fa:24:d2:ad:c4:f8:52:8c:f0:ac:5f:57:48:d3:
18:b2:a0:c1:96:47:e8:e0:3a:81:71:dd:56:c5:da:5e:24:80:
90:6f:fe:72:4d:dc:5d:3b:9f:96:ca:c6:85:e9:d9:64:a6:2c:
d6:a3:93:51:42:c8:d8:ef:b8:b5:0f:15:ae:6a:a6:27:8c:d2:
01:df:8e:db:0c:80:2f:bd:cd:ec:d1:79:1d:bd:4a:e2:57:98:
2a:10:e3:98:a8:f3:25:7c:6d:b5:37:56:b9:87:c8:46:d4:81:
98:de:c0:8b:d6:ec:47:0d:21:c4:25:5b:9c:c6:9b:55:09:df:
27:c7:d5:a9:d8:8b:74:4f:55:a9:e9:5e:98:44:58:79:bc:49:
3e:de:90:c6:fa:57:c6:0d:2d:0f:9b:e4:fb:f3:d9:56:34:ef:
9f:60:4a:5b:8c:c2:29:ec:d6:83:a5:31:c5:6e:7e:67:b6:1d:
5f:b3:87:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:01 2024 by rpki-client on console-fra.rpki-client.org