Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/y1JNtntbueLmNGccv5Lt8WYBtaw.roa
File: y1JNtntbueLmNGccv5Lt8WYBtaw.roa (raw, json)
Hash identifier: CazhpXfrycpeZ8wSfweVwwbhSesvrjk3oLPL9Wtk4rw=
Subject key identifier: CB:52:4D:B6:7B:5B:B9:E2:E6:34:67:1C:BF:92:ED:F1:66:01:B5:AC
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 018A5F5A3F7A149E3503CAEF1E6979656EF9
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/y1JNtntbueLmNGccv5Lt8WYBtaw.roa
Signing time: Mon 04 Sep 2023 08:41:04 +0000
ROA not before: Mon 04 Sep 2023 08:41:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41789
IP address blocks: 45.91.67.0/24 maxlen: 24
45.82.14.0/23 maxlen: 23
185.233.185.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5f:5a:3f:7a:14:9e:35:03:ca:ef:1e:69:79:65:6e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Sep 4 08:41:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb524db67b5bb9e2e634671cbf92edf16601b5ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e0:c8:5f:72:45:83:b2:dd:36:77:ae:ef:91:
96:8f:27:e9:20:08:5f:6f:c4:9e:4d:09:c4:fc:84:
5e:5c:5d:44:a5:89:cd:18:cf:e9:4e:02:de:5b:46:
2a:06:c1:0a:94:59:d3:61:c3:4a:d4:40:a0:5d:cf:
38:65:c3:d7:bd:93:cf:a1:3b:23:8c:df:aa:cf:d5:
1a:d9:84:76:63:93:98:54:ca:6c:62:6a:23:b1:16:
5f:6a:1e:39:72:39:6c:af:2f:43:fa:6b:e1:0e:25:
67:cf:71:98:93:6c:bd:52:de:3b:38:37:b8:74:b9:
8a:c0:65:08:97:73:4f:63:32:34:92:01:7a:07:30:
78:fd:8b:3d:27:e1:66:4e:a9:39:35:b5:c9:1b:2e:
29:a4:55:5c:8f:bc:e2:fc:3a:a3:da:a8:fb:36:74:
7a:57:23:d0:32:98:be:f3:58:20:63:18:2d:e4:6b:
19:68:5c:f9:8b:7e:d0:bd:b2:b8:0c:64:f4:36:e1:
51:48:ad:49:3b:40:87:59:b0:1f:b0:fd:03:2e:1f:
3f:ed:bc:21:30:27:7a:b8:70:2e:05:86:54:2c:a6:
5b:d6:86:f5:0c:35:4e:37:f2:1a:86:99:52:8c:f9:
b1:45:b1:8e:e2:3d:9a:c9:20:d6:d1:d8:b3:86:73:
ae:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:52:4D:B6:7B:5B:B9:E2:E6:34:67:1C:BF:92:ED:F1:66:01:B5:AC
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/y1JNtntbueLmNGccv5Lt8WYBtaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.14.0/23
45.91.67.0/24
185.233.185.0/24
Signature Algorithm: sha256WithRSAEncryption
57:7d:bd:bc:46:0a:f9:5d:b8:a9:17:09:e5:b8:dd:30:fe:fd:
04:5d:1f:a9:d7:d8:81:40:03:01:be:02:34:ec:50:7e:87:1a:
b2:5c:78:b6:4e:40:5d:f2:a3:57:89:2f:4a:47:c3:4c:3d:fa:
52:b1:e0:60:7a:56:d5:13:f3:12:93:88:fb:b9:32:1d:8a:39:
7b:5d:00:e1:03:5d:4d:ff:d1:b4:f3:5f:7c:05:db:21:50:68:
f1:c4:55:16:08:53:69:e5:63:5c:e3:c1:ab:85:cd:46:89:ef:
53:92:44:81:6f:0f:64:38:b5:81:e4:2c:75:f5:6e:65:eb:e6:
ad:1f:af:9c:e5:8e:79:30:50:33:2e:fa:56:be:a7:19:68:35:
af:3a:7f:9d:08:ce:35:e7:7f:eb:fa:53:f4:82:ab:eb:a9:57:
84:5d:2f:05:81:64:4f:5f:93:55:cb:63:b7:6e:7f:40:af:3e:
0f:d3:3a:db:7f:75:2f:ae:5a:25:15:1f:e9:88:1d:74:c5:67:
bd:5a:29:09:c9:4b:5c:fa:c1:c0:5d:8a:11:4c:cd:9d:84:cb:
35:90:24:fd:ac:3f:6c:26:76:ac:dd:8a:38:ad:e1:7e:ac:49:
b8:e6:d2:06:8b:e1:49:44:67:f5:cf:40:83:e5:aa:3c:13:84:
10:50:f0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 20 08:19:37 2023 by rpki-client on console-ams.rpki-client.org