Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/CLg0JBs7leQZoER589KA2wPPpC4.roa
File: CLg0JBs7leQZoER589KA2wPPpC4.roa (raw, json)
Hash identifier: 6hOcVsPCs0SK2HaX8mB3fpaJyIQ00ZADtMToz5IxSTQ=
Subject key identifier: 08:B8:34:24:1B:3B:95:E4:19:A0:44:79:F3:D2:80:DB:03:CF:A4:2E
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01856F7999C0FF9B8B534087471D904DC652
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/CLg0JBs7leQZoER589KA2wPPpC4.roa
Signing time: Sun 01 Jan 2023 22:35:18 +0000
ROA not before: Sun 01 Jan 2023 22:35:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211826
IP address blocks: 45.94.31.0/24 maxlen: 24
45.139.162.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:99:c0:ff:9b:8b:53:40:87:47:1d:90:4d:c6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 22:35:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08b834241b3b95e419a04479f3d280db03cfa42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:92:05:86:9e:6c:02:81:b8:77:f8:1f:fa:c2:
ce:e4:cb:a4:7f:cc:e7:10:f3:ae:c8:dc:06:ed:7a:
6a:58:70:2c:31:84:9a:12:b3:56:e6:cf:e9:af:93:
f8:89:3e:61:71:9f:9f:5a:56:e2:87:73:64:b2:93:
42:06:7d:c9:87:77:51:51:00:55:ea:72:b4:d0:2b:
75:57:8c:ad:ac:d6:bd:b8:b1:70:15:59:43:6d:ff:
29:b9:29:53:6a:e2:f1:e7:f1:8f:9c:a5:85:95:90:
7c:9c:3d:d2:4c:71:d0:9e:0a:de:27:e3:13:95:a9:
0d:28:13:c6:cb:b4:76:18:41:47:c7:8e:75:ff:1c:
68:0b:c6:c4:6a:b3:cd:df:2f:f5:8f:e0:68:2e:46:
84:ee:b2:7a:32:8c:4b:78:1e:a3:65:03:82:77:1c:
1b:b1:62:5a:a5:c8:4e:b2:a3:01:17:ff:f3:a7:58:
32:aa:b9:7f:df:47:16:ac:0e:40:c9:b3:b3:5e:78:
88:a3:5a:24:61:24:6d:0f:3a:6f:b9:fb:ec:65:bc:
e6:ba:d5:e4:ee:e3:a5:6e:62:64:91:91:0b:6c:b8:
e3:69:08:19:cc:db:ab:30:52:f3:01:7f:06:01:c0:
85:e1:32:41:b1:f9:e5:50:3e:d3:a7:62:28:2a:b3:
52:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B8:34:24:1B:3B:95:E4:19:A0:44:79:F3:D2:80:DB:03:CF:A4:2E
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/CLg0JBs7leQZoER589KA2wPPpC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.31.0/24
45.139.162.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:3d:3d:9a:fd:91:f1:83:b7:1f:16:3b:f6:9b:fe:46:85:a5:
85:7c:34:d5:25:a6:2d:d0:ec:cd:10:cb:07:28:f5:1d:36:cc:
3d:37:db:81:bf:c5:93:99:71:36:4d:a1:f0:3a:15:6d:80:48:
11:c0:06:74:4d:7d:08:be:b9:25:c0:71:08:6d:09:2e:d6:4c:
86:9c:9e:a8:f7:76:4c:1f:d8:bb:df:27:b7:4d:e7:34:25:a0:
72:98:73:96:ef:9f:ae:d1:34:b8:7c:4e:cf:82:bc:f0:b2:da:
f3:da:ed:c7:cf:d9:81:0a:cd:2b:f7:06:2d:7d:e1:06:cd:1f:
98:78:e5:f0:11:37:2c:11:bd:19:ab:22:56:08:98:37:c8:f6:
a4:7c:70:0f:83:2a:90:67:9c:ca:f4:1f:42:e1:c6:a7:a9:55:
cc:39:05:df:9e:b5:83:99:32:05:9e:d4:58:c1:4d:52:5e:7e:
4d:b3:e1:84:da:6e:2d:df:a2:c6:ad:d4:ba:91:52:be:8f:09:
c9:27:94:ec:45:54:3d:a8:02:22:1f:9c:00:bb:23:f1:e4:4f:
cf:dc:31:83:d2:ab:e0:b3:e8:00:50:a8:d1:c7:c8:af:7a:09:
4b:62:07:5d:b1:6a:4d:2e:e1:8b:ff:15:86:cc:c2:cc:df:05:
6f:ca:0a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 7 10:35:27 2023 by rpki-client on console-ams.rpki-client.org