Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/iMCl9cS2rk6Q9BBqKJME_RIKjvI.roa
File: iMCl9cS2rk6Q9BBqKJME_RIKjvI.roa (raw, json)
Hash identifier: 205g8QiBScFKWeP4UGHYUWocAfPzs00l8xYPTMkzWCw=
Subject key identifier: 88:C0:A5:F5:C4:B6:AE:4E:90:F4:10:6A:28:93:04:FD:12:0A:8E:F2
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01856F79794ECFA02F962FA4CAFDBE3A59DF
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/iMCl9cS2rk6Q9BBqKJME_RIKjvI.roa
Signing time: Sun 01 Jan 2023 22:35:09 +0000
ROA not before: Sun 01 Jan 2023 22:35:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30848
IP address blocks: 45.130.116.0/23 maxlen: 24
45.83.204.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:79:4e:cf:a0:2f:96:2f:a4:ca:fd:be:3a:59:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 22:35:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88c0a5f5c4b6ae4e90f4106a289304fd120a8ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:87:0e:9f:66:55:7c:a9:2d:24:9d:e3:08:7b:
ac:ef:f7:1a:ac:c9:dd:7c:97:54:51:86:f2:64:15:
a9:e6:49:be:bc:31:b3:ac:17:fe:00:6d:2b:65:13:
56:15:c2:5d:6c:85:51:ad:b1:c6:87:00:e9:ca:28:
8c:46:a1:85:7c:80:5e:fb:f6:4e:52:1e:fa:1b:ae:
f9:a8:2d:03:ab:1a:bf:96:ec:7c:be:b5:63:68:62:
12:dd:6b:14:d7:4a:a9:43:b6:6d:d2:ad:c6:9f:90:
2b:14:54:ab:5a:90:13:0c:00:9d:c0:0a:0f:d9:ee:
5f:85:0d:6e:cf:5b:c2:8f:c4:87:0f:dd:d8:74:2e:
b5:50:e2:9f:ca:6e:33:81:58:41:d7:56:22:b3:36:
86:ad:c0:12:8c:36:03:97:c5:82:51:8b:5a:c9:54:
60:cf:c3:00:19:3a:46:30:ce:99:13:5b:1d:6a:24:
0b:c3:47:da:f8:56:c2:c7:c1:57:1e:19:dc:f6:3d:
73:4e:fc:bd:dd:cf:4a:cd:73:5c:92:3e:e1:e9:78:
3e:df:0f:21:bd:11:78:0d:ac:c5:40:56:cd:48:96:
ac:95:2b:14:2a:e7:e6:3a:00:63:e8:d2:1e:d9:4d:
3a:4c:e0:07:0f:1e:64:f3:9b:c4:53:90:2f:e6:57:
b3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C0:A5:F5:C4:B6:AE:4E:90:F4:10:6A:28:93:04:FD:12:0A:8E:F2
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/iMCl9cS2rk6Q9BBqKJME_RIKjvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.204.0/24
45.130.116.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:b6:26:6e:65:27:fa:6d:5d:cf:55:e2:55:1a:d8:0e:43:24:
6d:1e:f4:a8:ef:c9:26:1e:8d:74:bf:ec:81:78:83:17:e8:ab:
c8:a2:f4:eb:56:db:a2:2f:45:f4:02:09:45:76:ea:f0:ea:e1:
bf:af:e9:46:5b:5c:4e:43:f0:d7:41:b1:4f:0d:1a:f6:ca:db:
bd:4a:2f:c4:80:de:78:2b:2a:8a:0e:85:97:7a:66:c0:c7:ab:
32:97:6d:45:e7:96:55:c6:08:75:01:5b:ac:ab:7e:c5:c6:91:
16:26:22:7f:12:01:6e:d3:ca:8b:20:9e:dd:94:d3:cc:9d:f7:
d4:b0:0a:74:15:0b:8d:0f:9e:43:72:a4:f8:98:61:5e:07:0c:
f0:b8:8f:28:45:0a:46:e0:e5:8d:c5:af:74:57:a8:5c:3e:27:
ec:c7:24:6e:2e:0d:c7:33:59:52:70:69:48:bf:a4:4e:1c:09:
1d:8b:e7:06:b3:7e:59:c1:d0:5c:1c:ac:39:ca:ca:67:51:e3:
2d:c5:b7:c7:7f:71:e6:95:b4:0a:fe:5e:0b:63:77:a6:2d:3e:
ba:1d:0a:d8:c8:14:ed:37:53:6b:e4:95:16:e4:10:5b:90:66:
d0:6e:73:e9:14:0e:c4:a8:e6:4e:0b:b3:0a:6c:b5:91:c5:0f:
9e:32:29:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:25 2023 by rpki-client on console-ams.rpki-client.org