Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/3GtNgGOXCzmdhA80-tpKknsrgyg.roa
File: 3GtNgGOXCzmdhA80-tpKknsrgyg.roa (raw, json)
Hash identifier: E9D9buqPzpd2aaKLgnf0VDXuV2CvfNcfwL03q0G/go0=
Subject key identifier: DC:6B:4D:80:63:97:0B:39:9D:84:0F:34:FA:DA:4A:92:7B:2B:83:28
Certificate issuer: /CN=4a9c5e56aacd01ffb2825a931ed5ede41c3f92e6
Certificate serial: 01856C0A5C700BD735B1CEC3F4700BDD284A
Authority key identifier: 4A:9C:5E:56:AA:CD:01:FF:B2:82:5A:93:1E:D5:ED:E4:1C:3F:92:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/3GtNgGOXCzmdhA80-tpKknsrgyg.roa
Signing time: Sun 01 Jan 2023 06:34:56 +0000
ROA not before: Sun 01 Jan 2023 06:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201454
IP address blocks: 45.140.0.0/22 maxlen: 22
185.73.24.0/22 maxlen: 22
2a05:3f00::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:0a:5c:70:0b:d7:35:b1:ce:c3:f4:70:0b:dd:28:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9c5e56aacd01ffb2825a931ed5ede41c3f92e6
Validity
Not Before: Jan 1 06:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc6b4d8063970b399d840f34fada4a927b2b8328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c6:85:cf:65:7d:d7:98:42:27:ca:f6:f6:49:
53:b4:1b:19:2f:88:c8:73:78:87:07:0a:f1:ab:d3:
fe:f4:a5:1b:88:c2:7f:96:68:6d:97:a4:2d:a3:85:
ae:ec:ef:0a:ae:e5:6b:59:61:bb:a9:6b:8e:d7:de:
1b:4e:cf:ac:75:d7:2d:55:9a:06:97:97:57:d8:0a:
72:7c:1f:86:0d:ac:2b:30:1a:c2:89:a1:5c:0b:e5:
73:7e:89:3c:b3:46:70:de:3c:1f:b4:15:48:24:3b:
7f:72:b1:a4:ba:bf:ba:93:e9:2c:b2:89:c7:e5:0d:
77:33:0f:be:8f:ea:78:10:4e:5d:87:7f:c0:16:d7:
fa:97:57:5d:80:eb:28:cb:3f:fe:b7:f3:45:db:bf:
b7:7c:ad:46:e6:b4:bb:06:ee:22:91:89:98:6f:6c:
f5:6c:d7:18:c4:b9:2d:02:af:b8:f6:b9:e8:55:c0:
ec:0f:88:64:fd:14:f4:17:28:8e:8b:58:98:36:9b:
54:63:1e:a9:8d:94:86:73:51:3d:00:96:93:33:bb:
21:3a:ee:2f:3e:0a:6c:ac:a2:5f:c6:96:1d:c4:33:
0b:6f:00:df:9b:f7:d2:75:92:96:cb:5f:23:5d:d6:
1a:88:f7:30:6d:de:56:8d:12:ed:26:56:ae:3d:3f:
68:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6B:4D:80:63:97:0B:39:9D:84:0F:34:FA:DA:4A:92:7B:2B:83:28
X509v3 Authority Key Identifier:
keyid:4A:9C:5E:56:AA:CD:01:FF:B2:82:5A:93:1E:D5:ED:E4:1C:3F:92:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/3GtNgGOXCzmdhA80-tpKknsrgyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.0.0/22
185.73.24.0/22
IPv6:
2a05:3f00::/29
Signature Algorithm: sha256WithRSAEncryption
35:1f:be:b8:e7:30:20:4b:38:65:a3:4b:79:2d:18:d4:f7:68:
65:61:5a:99:02:25:f6:3f:b3:db:98:51:98:5a:a6:98:1b:60:
47:44:7a:e6:e9:3a:7d:06:87:2b:58:41:05:13:9c:19:fd:84:
1e:58:ad:b9:80:39:57:37:bd:bb:f8:e8:e9:bc:5c:85:75:45:
f4:56:a4:52:6f:a8:b9:4b:1b:33:90:96:44:b3:b9:1d:e0:e2:
1f:04:26:aa:b7:f6:f7:b3:b5:ba:1b:56:56:c3:ea:34:23:70:
e6:64:cd:26:51:c4:e0:4c:dd:b5:e3:11:d2:7e:cb:95:e7:4a:
21:3a:de:10:6d:d7:64:a3:33:e6:51:06:0c:f1:0b:5f:51:0e:
05:23:88:c5:e2:2e:26:e5:03:8a:93:05:2b:e9:eb:f8:f9:17:
5d:ec:24:c0:5f:ec:b5:2d:a1:eb:38:78:02:06:80:a3:a6:ec:
08:17:4c:b0:c9:ac:6f:f8:f1:eb:0d:61:8f:9e:21:45:43:aa:
71:f7:bc:10:64:8e:cf:2b:d0:6b:c0:49:d7:91:fd:99:6a:ef:
7a:c0:0a:23:2a:df:9f:db:bb:ae:4b:b7:47:c9:9b:f7:80:26:
25:02:20:2b:83:ba:f8:a3:50:74:c7:fc:f9:06:65:2e:c6:b4:
b3:40:8d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 22 10:01:59 2023 by rpki-client on console-fra.rpki-client.org