Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/2bDGh3R7Yxfqb62tJ3oMAE9VfiA.roa
File: 2bDGh3R7Yxfqb62tJ3oMAE9VfiA.roa (raw, json)
Hash identifier: ZFttdEFnB+xPP2v/ZIMD7+hSdLrz0nWphpJpoDk7r5Q=
Subject key identifier: D9:B0:C6:87:74:7B:63:17:EA:6F:AD:AD:27:7A:0C:00:4F:55:7E:20
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 018678041087AD29F8768A34D09BA3AD074B
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/2bDGh3R7Yxfqb62tJ3oMAE9VfiA.roa
Signing time: Wed 22 Feb 2023 07:26:17 +0000
ROA not before: Wed 22 Feb 2023 07:26:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48716
IP address blocks: 45.82.14.0/24 maxlen: 24
91.200.151.0/24 maxlen: 24
91.200.148.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:78:04:10:87:ad:29:f8:76:8a:34:d0:9b:a3:ad:07:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Feb 22 07:26:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9b0c687747b6317ea6fadad277a0c004f557e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:41:e2:be:37:ce:84:f3:7a:23:35:93:94:ca:
d3:23:9f:32:71:ec:84:56:23:90:29:83:61:79:f1:
56:5f:49:94:7f:3b:af:2a:6c:fd:74:9b:20:41:8e:
2a:79:a6:37:10:96:76:ef:7e:dd:a1:7d:d0:97:50:
82:26:31:9f:f2:05:dd:47:b2:0a:b9:33:d3:72:ba:
e5:b4:4d:73:f8:1f:ee:99:15:05:59:3e:13:b0:f6:
31:95:64:74:82:6c:2a:33:59:af:f7:98:fe:18:a6:
7b:f2:d4:42:81:b7:fb:8e:53:bf:c1:e7:59:da:7b:
c0:b5:f1:08:0e:5d:f3:14:a3:2e:f9:bf:80:56:fc:
c3:5d:e5:11:b9:d1:76:e6:e5:f5:af:04:f6:ed:2f:
ee:49:bc:70:08:8f:09:95:89:4c:1c:6a:bc:cd:24:
4d:6a:da:7e:68:0a:8f:2d:63:f9:a5:3d:77:58:88:
ab:a0:47:8a:9e:72:ed:b2:87:13:b6:91:a5:4b:43:
6c:6f:8b:f1:57:4e:ee:bb:e6:b5:68:5d:ae:06:0d:
1a:37:4f:75:94:aa:44:eb:f3:0d:92:87:db:30:98:
bd:f1:d9:e2:61:77:55:df:53:d0:db:df:e5:4a:98:
ef:07:04:b3:f0:12:f9:b9:45:fb:03:bf:66:5e:f2:
90:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B0:C6:87:74:7B:63:17:EA:6F:AD:AD:27:7A:0C:00:4F:55:7E:20
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/2bDGh3R7Yxfqb62tJ3oMAE9VfiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.14.0/24
91.200.148.0/24
91.200.151.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:9f:c5:1f:9d:cb:84:50:a0:fd:f4:14:81:5d:8f:50:01:7b:
b7:ac:1f:51:a7:db:7f:8f:a7:83:92:7e:97:f6:a9:f9:61:46:
a8:17:8b:18:ed:fa:04:39:af:04:e9:1f:4d:41:27:ac:04:dc:
b0:92:b9:ad:40:0c:7a:b4:8e:a8:b8:1b:d7:e4:79:d5:37:06:
73:7e:ee:4d:58:9d:ed:63:a4:cd:43:e0:80:b5:ab:28:5f:c9:
a2:d1:c8:71:24:9e:25:d6:e5:4a:db:5e:6a:ab:ab:5a:0c:94:
af:0d:ae:e8:06:5d:52:5e:e9:ca:b0:1b:d0:0a:e0:cd:6d:b8:
f8:73:4c:e2:82:28:d8:de:52:ae:95:ed:4f:86:9d:98:a8:a1:
d9:f7:ad:a9:ee:11:09:55:49:86:f7:b2:34:95:b4:05:86:65:
6e:98:55:99:f9:9d:6e:df:fe:1d:5e:dc:7a:f2:66:4d:43:d0:
06:dc:7f:c0:ca:de:12:5e:a9:c4:24:45:6d:34:81:b5:29:49:
55:7a:1f:ea:8d:8e:80:3e:bf:37:fe:31:4a:ea:e5:83:0c:da:
c3:aa:1a:0a:c4:b9:8f:35:a8:d3:90:8f:96:49:14:a6:ae:a8:
8b:d2:37:c8:9e:19:57:b9:83:7c:94:fa:85:e6:aa:d9:23:1b:
0d:5a:9d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:10 2024 by rpki-client on console-fra.rpki-client.org