Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/jJ037VVttRnav3gxKJLBkzml2mM.roa
File: jJ037VVttRnav3gxKJLBkzml2mM.roa (raw, json)
Hash identifier: u8X1rDLOIhJxAaKfQeFIoKCASNMR3RvHbeUkBsoZpwI=
Subject key identifier: 8C:9D:37:ED:55:6D:B5:19:DA:BF:78:31:28:92:C1:93:39:A5:DA:63
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018B8C410FCC21879C7FC91DF3745FA3979D
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/jJ037VVttRnav3gxKJLBkzml2mM.roa
Signing time: Wed 01 Nov 2023 18:59:15 +0000
ROA not before: Wed 01 Nov 2023 18:59:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 268624
IP address blocks: 45.85.89.0/24 maxlen: 24
45.148.96.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8c:41:0f:cc:21:87:9c:7f:c9:1d:f3:74:5f:a3:97:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Nov 1 18:59:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c9d37ed556db519dabf78312892c19339a5da63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0b:3c:30:12:c1:e6:1c:b7:5d:70:ff:55:b0:
25:e9:85:3b:7a:15:f6:de:b7:09:72:b6:a6:6f:ab:
a2:c5:8b:2e:a4:11:85:3a:ef:68:83:f3:0a:9c:8a:
2d:dc:e7:9e:c5:a7:2f:a7:58:fc:01:38:34:08:5c:
87:ea:a5:9c:99:63:2e:e3:c3:70:48:36:37:cd:d3:
32:fa:95:15:40:16:dd:58:2d:9a:3a:d9:e2:2c:62:
4f:94:20:df:d3:11:43:27:b0:d4:ac:e7:ea:8d:12:
33:da:9b:bf:e2:e8:e5:2e:23:51:7b:67:a5:53:f2:
86:21:79:b8:03:4d:11:f6:84:ec:cd:03:3c:e1:71:
78:c1:b8:fb:19:67:27:8e:a3:4f:5a:ee:5a:d4:0f:
16:d1:b3:4a:ce:d1:f4:24:64:57:99:61:3c:7a:c6:
8f:11:9a:4d:e1:8b:51:ca:aa:8f:b7:fc:54:a1:aa:
77:97:b2:e8:8c:74:9c:45:f6:d9:d9:fa:46:99:a8:
32:9d:e6:0f:8a:7b:e4:80:1d:05:f1:6d:6a:af:3c:
30:1a:be:aa:fa:c3:34:64:2a:5f:d0:8d:b4:98:03:
c9:2e:b8:a2:54:20:3e:3a:9f:10:1b:19:d1:26:a9:
e2:51:b7:f6:9e:03:68:f9:7f:4d:98:7a:23:3a:ad:
a5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9D:37:ED:55:6D:B5:19:DA:BF:78:31:28:92:C1:93:39:A5:DA:63
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/jJ037VVttRnav3gxKJLBkzml2mM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.89.0/24
45.148.96.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:82:e8:58:b7:4a:18:b0:19:99:af:dc:ff:28:eb:b4:1d:5d:
7f:da:f6:ec:db:08:cf:e6:dd:9c:e1:13:87:0e:f3:3e:0d:6f:
97:ab:52:7b:90:f2:c2:b7:8e:64:fb:5f:86:a8:50:3d:3f:35:
9d:8c:d8:80:a8:9b:53:e5:d7:5a:82:e7:43:31:1a:86:1a:e4:
ef:bd:14:4a:5b:9e:66:81:c0:70:de:38:34:0e:89:99:96:e1:
b9:e3:24:a3:b9:a5:48:65:e0:3a:4d:e7:35:88:3b:73:7f:28:
62:21:77:31:b7:98:2d:f7:27:55:77:c1:6c:35:cc:9a:1c:48:
cc:2b:cf:23:f0:92:50:be:68:98:32:28:b1:cc:a2:d1:b0:00:
a8:4b:38:70:0f:21:dd:98:b7:ae:a6:78:f7:a2:89:f9:83:32:
ad:ad:cf:e7:2d:3f:61:6a:3e:de:ce:6d:f1:ae:52:08:22:94:
eb:17:5a:43:1c:35:b7:47:a4:ed:d0:b4:c8:7c:86:5c:fc:d5:
dd:45:bf:36:4e:db:65:e0:db:47:1d:66:21:80:60:ab:62:6c:
7e:1f:b6:d5:93:88:70:b7:fa:16:46:91:ff:9a:ec:c2:a6:3e:
ea:68:8d:d1:2d:7e:1c:de:85:7b:df:27:4c:0f:96:80:fb:b4:
a5:c9:01:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:43 2024 by rpki-client on console-ams.rpki-client.org