Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/1-uEWYVUjwQAyR8Z83Ur-VVGkKCs.roa
File: 1-uEWYVUjwQAyR8Z83Ur-VVGkKCs.roa (raw, json)
Hash identifier: WDVbHUaAs5hISJDQMqRZrpl03AE8VFC7Alz7U5OnTCY=
Subject key identifier: FA:E1:16:61:55:23:C1:00:32:47:C6:7C:DD:4A:FE:55:51:A4:28:2B
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 0189CF93337264053C8F7204AC4D2C64067E
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/1-uEWYVUjwQAyR8Z83Ur-VVGkKCs.roa
Signing time: Mon 07 Aug 2023 10:37:57 +0000
ROA not before: Mon 07 Aug 2023 10:37:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 45.94.31.0/24 maxlen: 24
45.139.162.0/24 maxlen: 24
2a07:e345:100::/40 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cf:93:33:72:64:05:3c:8f:72:04:ac:4d:2c:64:06:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Aug 7 10:37:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fae116615523c1003247c67cdd4afe5551a4282b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:1b:e7:82:32:35:3e:a4:8d:3d:01:76:9c:d3:
74:a3:29:57:c7:1d:f6:37:90:79:8f:79:71:64:31:
d6:cd:86:f5:ad:31:a3:a4:bf:a2:18:e0:20:52:f6:
9e:27:d5:80:0b:0b:57:b5:6e:23:ea:85:af:83:36:
2e:9c:e3:e1:5d:c6:e4:8e:ce:1c:aa:6b:2f:75:c2:
8b:62:15:d0:04:48:93:dc:66:fb:df:ee:a7:87:b0:
ca:a3:57:30:0f:2b:9d:b0:13:9d:2f:ef:b9:72:81:
32:e1:6a:cd:71:d3:47:07:22:89:8f:02:50:aa:26:
c7:f5:c5:52:ed:d4:b2:ef:e2:d9:7a:31:fb:e7:fa:
bc:5b:dd:9f:83:87:a1:07:ba:96:80:c9:42:4a:1e:
c5:83:ca:c0:13:c5:5b:a4:0d:ab:98:dd:48:1b:ca:
42:a7:ef:7b:dc:98:f8:8f:54:af:59:13:c2:0c:11:
62:6c:db:5d:89:07:f1:39:ee:c3:81:ac:51:d6:31:
35:f4:24:17:bb:cb:0c:ab:bf:3e:c6:cc:82:e1:bd:
9d:68:8b:29:63:c5:b9:06:c4:c4:34:0b:97:94:94:
5c:f3:e3:69:44:0d:28:88:9d:63:24:c3:5b:83:11:
5d:79:01:6e:80:f9:f4:f8:a9:c6:18:98:35:6a:3f:
4e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E1:16:61:55:23:C1:00:32:47:C6:7C:DD:4A:FE:55:51:A4:28:2B
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/1-uEWYVUjwQAyR8Z83Ur-VVGkKCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.31.0/24
45.139.162.0/24
IPv6:
2a07:e345:100::/40
Signature Algorithm: sha256WithRSAEncryption
85:8b:f5:a7:bb:93:d9:62:04:77:4d:54:42:33:02:91:a2:54:
d0:19:2d:16:cd:db:65:8f:a4:3d:78:e4:78:cd:f7:9a:53:f8:
24:33:68:94:82:58:b4:fd:af:43:6e:5b:cd:76:2e:d3:65:5e:
88:ac:f7:f4:88:72:0d:25:6b:85:17:e4:2b:14:ce:b7:24:ce:
d5:df:6c:aa:58:c5:de:9d:2a:1b:7f:d5:79:55:ca:8d:26:d7:
82:d0:91:80:e8:21:8a:9e:ac:01:57:2d:42:5b:64:73:4e:61:
e4:1c:81:a3:48:bd:56:7d:c3:ab:12:cf:38:9c:b8:6d:4c:49:
e4:d8:75:bb:86:76:1f:d2:d4:80:1d:e1:2c:d2:af:7a:03:83:
91:c8:59:d6:0f:cc:31:dc:25:cb:e2:be:d4:9d:b9:3b:e8:b8:
ed:d6:21:51:32:b0:0f:cc:76:aa:ee:79:dd:c8:87:ad:c1:e0:
b0:4b:f2:5b:3d:2f:9b:b2:94:6a:5f:da:79:bb:92:3e:c0:33:
f7:b5:e4:66:d6:fe:e7:8e:d6:57:89:ca:28:2a:e0:96:4c:e7:
16:00:cd:ff:1a:fb:1d:e8:b1:06:cd:fa:f7:89:2e:25:9c:2f:
65:87:c3:e0:ae:fb:36:48:bf:cc:4f:39:ed:74:23:62:79:e9:
96:71:8a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 16 07:47:58 2023 by rpki-client on console-ams.rpki-client.org