Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ax1B3GSMm94EhSLitaC03IjQIb4.roa
File: ax1B3GSMm94EhSLitaC03IjQIb4.roa (raw, json)
Hash identifier: dmTZE2scw/vIW8RtVtKzNdhRxX8HOXz3YNPZe7PIFEM=
Subject key identifier: 6B:1D:41:DC:64:8C:9B:DE:04:85:22:E2:B5:A0:B4:DC:88:D0:21:BE
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01856F799322B1C900F1B0B3241923AC1E2F
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ax1B3GSMm94EhSLitaC03IjQIb4.roa
Signing time: Sun 01 Jan 2023 22:35:16 +0000
ROA not before: Sun 01 Jan 2023 22:35:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206804
IP address blocks: 45.86.201.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:93:22:b1:c9:00:f1:b0:b3:24:19:23:ac:1e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 22:35:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b1d41dc648c9bde048522e2b5a0b4dc88d021be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1f:ca:98:4d:94:08:53:e2:20:6d:df:13:78:
c5:3a:4c:3b:44:b1:b8:d3:59:a4:14:4b:7e:ec:bf:
0a:55:a8:b0:e1:c4:88:6d:57:fd:ff:02:81:70:50:
f3:48:8b:35:23:b6:d1:b4:43:bc:f0:98:36:4c:5d:
0a:a3:0d:a4:19:fa:77:19:a9:6a:cb:c8:04:27:f1:
64:11:76:09:2e:c0:11:86:2c:4e:ff:3b:95:2b:c7:
3d:e8:16:e1:0b:be:a0:d0:98:3e:b4:c7:5c:48:b8:
ac:17:d6:b1:b7:7e:c4:85:e9:1f:e5:13:06:2c:55:
f4:85:18:5c:0a:97:b8:b3:9b:b1:90:5b:43:26:b8:
e4:bd:a0:99:1c:29:9d:14:33:5e:8a:2d:d8:84:53:
35:0a:66:5c:64:df:96:c1:8e:09:1a:34:a1:48:7e:
e2:7c:ba:b7:c6:42:12:4a:2f:e1:0b:b2:fa:7a:fe:
a4:f6:b5:2b:4f:a2:e9:13:c9:5b:a4:40:70:1a:f8:
77:3a:9e:ce:c4:1d:da:9c:15:49:fe:65:be:d1:cf:
6d:27:1f:65:ae:31:e4:b5:17:3c:1d:05:4c:98:56:
14:ea:67:76:29:03:5a:77:03:76:10:84:79:94:89:
a9:2b:02:72:9a:a9:9b:89:0d:ec:d0:57:99:02:a4:
6e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1D:41:DC:64:8C:9B:DE:04:85:22:E2:B5:A0:B4:DC:88:D0:21:BE
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ax1B3GSMm94EhSLitaC03IjQIb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.201.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:87:b1:b0:9c:87:9e:63:5a:3c:ce:66:4d:95:98:23:4f:78:
6d:3b:29:30:0d:e8:e5:9d:0f:80:ab:32:42:7b:2e:13:90:53:
0f:c3:50:11:af:a6:96:e5:ab:5a:5e:3d:99:ba:29:4d:27:e5:
60:36:7d:64:94:04:b5:96:3e:99:cc:14:99:4b:7f:dd:0d:b1:
9b:46:20:05:61:19:28:a5:3e:a6:b0:3a:f6:c0:d1:bf:3c:f8:
7a:93:e5:42:20:19:d7:ec:94:85:ec:96:ec:a2:d2:4c:9f:e1:
05:76:54:5c:2a:d4:6a:7a:3b:90:f5:1c:e0:f6:14:b0:7f:6d:
d9:3c:ca:0c:61:08:cd:7c:01:7e:4e:26:0a:95:1c:c8:2f:2b:
cb:5a:da:b9:0b:70:6a:64:39:04:b6:91:27:6a:e5:3f:c6:f2:
55:c1:82:c3:05:3f:33:af:94:ea:54:0a:94:7e:2c:15:81:b5:
14:f3:04:2b:61:30:34:74:28:bf:df:4b:be:f6:b8:de:fd:e4:
b4:ab:b8:d6:00:a6:9f:48:8b:bb:c1:0c:07:c0:89:ca:5b:be:
da:6b:53:12:17:9f:d4:0a:9b:09:cd:7d:18:ed:20:fa:e0:b4:
b1:71:cf:19:f9:b0:ff:66:17:8b:4e:61:64:da:0c:10:dc:a8:
18:2b:71:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:24 2023 by rpki-client on console-ams.rpki-client.org