Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/8azQfKm1b9E7VeFBqlbOnKUMhZ8.roa
File: 8azQfKm1b9E7VeFBqlbOnKUMhZ8.roa (raw, json)
Hash identifier: CDDAVmZfTLPFsdTZeIdGLXhadrYs3bxzF2ngTfME4Ow=
Subject key identifier: F1:AC:D0:7C:A9:B5:6F:D1:3B:55:E1:41:AA:56:CE:9C:A5:0C:85:9F
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01857267C79858D49A1A989C754884FF0DF2
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/8azQfKm1b9E7VeFBqlbOnKUMhZ8.roa
Signing time: Mon 02 Jan 2023 12:14:41 +0000
ROA not before: Mon 02 Jan 2023 12:14:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211440
IP address blocks: 45.9.152.0/22 maxlen: 24
178.239.28.0/23 maxlen: 24
45.87.44.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Nov 2023 16:53:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:67:c7:98:58:d4:9a:1a:98:9c:75:48:84:ff:0d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Jan 2 12:14:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1acd07ca9b56fd13b55e141aa56ce9ca50c859f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:22:f1:56:aa:6a:01:12:a7:41:9c:4e:72:d5:
10:0e:b1:8a:de:53:af:6c:ed:33:17:1f:25:45:9f:
16:0c:61:a7:80:ae:37:58:51:4a:8e:14:c8:95:2a:
8d:4c:39:45:62:7f:56:a0:dc:eb:73:d4:33:01:a6:
19:bd:c7:76:20:c0:96:47:bc:72:a0:46:25:cc:b7:
81:da:71:75:9b:89:2f:9a:21:6a:e2:8e:ed:bc:6d:
3d:64:2c:8c:44:3f:96:8c:b3:fe:64:6d:ba:5e:fe:
c4:98:af:17:79:6e:4e:70:57:dc:63:39:49:53:61:
fb:cd:20:f7:a2:d4:08:23:c2:62:6f:04:c0:ea:b8:
24:7c:1f:83:ac:44:71:fe:c2:6c:bf:b9:a6:51:ee:
82:b3:bf:75:9b:5a:43:82:83:81:dc:45:63:d9:b1:
44:4b:d0:4a:7a:2d:6f:1c:cf:39:1b:44:b1:c8:34:
7e:c7:20:96:9a:47:7b:8c:1d:22:0c:75:63:fe:34:
88:bc:55:8a:3e:7a:ad:17:fe:b8:8d:5a:fa:26:16:
62:ef:44:0d:a2:0c:9b:40:c2:13:01:97:df:45:5b:
79:a3:91:cd:7d:78:e3:0e:e4:b1:f3:d4:88:51:36:
4e:a0:00:bb:d0:ff:72:3d:ee:a3:76:05:56:70:9d:
06:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:AC:D0:7C:A9:B5:6F:D1:3B:55:E1:41:AA:56:CE:9C:A5:0C:85:9F
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/8azQfKm1b9E7VeFBqlbOnKUMhZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.152.0/22
45.87.44.0/22
178.239.28.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:4f:d5:83:ef:4f:f0:9e:9c:37:ee:0e:c8:d5:0d:08:a7:5c:
30:97:6b:c3:f9:c7:27:6d:bc:39:22:0f:02:99:49:dc:a6:a8:
bc:16:ec:1b:67:d5:31:07:68:19:99:89:69:d8:ca:6b:8d:c3:
0d:7c:ff:d4:0c:d0:b8:df:1d:89:1b:5c:e7:fd:8e:b4:f1:52:
e5:d2:85:84:61:8f:d3:79:ec:d4:89:fb:3b:28:9b:75:30:38:
08:81:f7:6f:82:b8:3b:2f:d3:60:00:e2:ed:5c:92:d1:fe:b6:
52:fd:46:41:b8:40:f4:d9:ca:19:54:c6:ab:1d:cb:97:f4:27:
c6:3b:b6:29:57:d3:57:98:29:8b:2a:bd:59:83:75:f4:9c:15:
52:a2:75:8b:0c:d6:5e:90:23:bb:84:d8:92:69:32:38:f4:16:
15:a3:41:05:73:e4:dd:08:16:ef:a1:0b:8f:fd:3f:04:16:46:
3f:59:c7:5c:80:4c:90:58:a9:c7:a4:c4:38:b4:ad:73:75:de:
6a:f6:28:6a:c0:40:e2:ed:28:eb:c8:95:92:20:29:36:4d:1f:
87:eb:eb:8c:41:78:28:ca:a6:19:19:c9:9c:b5:4b:ba:ff:70:
e5:83:fd:4b:da:37:b2:52:56:84:69:64:b8:8f:78:36:56:a5:
f2:32:3e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:48 2024 by rpki-client on console-ams.rpki-client.org