Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-rXmB6HmbZaYfAA-ENpK6gETnOo.roa
File: 1-rXmB6HmbZaYfAA-ENpK6gETnOo.roa (raw, json)
Hash identifier: 2lVCnQj7lur7NxSbL56VJ6ojlvBlk0gXHE/5lVEnFTc=
Subject key identifier: FA:B5:E6:07:A1:E6:6D:96:98:7C:00:3E:10:DA:4A:EA:01:13:9C:EA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01891A607AEB95692BC43DAE510DDBA14F61
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-rXmB6HmbZaYfAA-ENpK6gETnOo.roa
Signing time: Mon 03 Jul 2023 06:11:17 +0000
ROA not before: Mon 03 Jul 2023 06:11:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 94.156.14.0/24 maxlen: 24
45.14.166.0/24 maxlen: 24
45.129.85.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1a:60:7a:eb:95:69:2b:c4:3d:ae:51:0d:db:a1:4f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 3 06:11:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fab5e607a1e66d96987c003e10da4aea01139cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f9:b5:bd:af:05:93:29:d0:e7:8d:14:66:7d:
63:47:23:03:89:af:46:d9:d1:b7:46:19:65:da:a4:
4e:2e:c0:d5:7b:bd:3c:e3:65:23:26:f2:7a:91:a9:
af:7e:06:7a:3d:4a:7f:19:68:02:2b:49:c7:63:fe:
5a:55:9c:fc:e4:5a:75:a6:b4:2a:a7:67:06:cf:35:
6f:ce:f6:0d:7d:43:00:2e:d9:c9:d0:11:68:70:d0:
f0:3a:4b:80:59:9d:92:15:b5:11:ca:0d:98:5f:45:
ea:91:2d:f1:a4:39:d3:5a:3b:80:5e:03:46:52:be:
3e:e8:b0:75:65:77:34:33:4b:7c:ed:03:8b:31:9d:
9f:d5:c7:1e:09:b3:b0:5b:ea:42:73:58:f9:44:43:
43:f3:33:2b:9d:ac:f8:32:77:66:ab:d5:f3:31:fa:
6e:52:12:47:20:01:e1:43:0e:fe:6f:64:5b:3c:dd:
58:41:ee:e2:f2:4f:63:00:a2:17:92:3f:c8:59:46:
96:75:f4:be:8a:80:9c:57:7d:36:a9:11:f1:5d:95:
41:03:49:ab:2e:6b:cd:ed:c4:e0:d5:d4:4c:cf:6a:
e1:e1:c7:31:5e:d2:a6:8f:a1:db:40:65:6e:17:66:
9a:91:f0:81:79:f4:c3:c5:db:58:9c:c8:6a:ce:a5:
d6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B5:E6:07:A1:E6:6D:96:98:7C:00:3E:10:DA:4A:EA:01:13:9C:EA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-rXmB6HmbZaYfAA-ENpK6gETnOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.166.0/24
45.129.85.0/24
94.156.14.0/24
Signature Algorithm: sha256WithRSAEncryption
85:48:9a:bc:b4:a4:f9:c5:2e:8e:d1:1f:8f:9d:f3:5b:4a:a8:
21:73:d2:eb:f5:c5:aa:60:e2:12:d7:1e:b6:41:ee:ba:7a:ac:
f1:9b:7a:78:6e:fe:49:1b:75:30:cd:05:36:d3:68:2b:12:ac:
14:aa:ab:bc:c6:5d:77:6f:41:39:92:5b:96:03:59:d0:c4:4a:
62:f5:f8:50:56:16:d6:75:1a:22:52:c0:e6:f3:a3:cc:7b:2a:
13:20:17:0e:04:30:28:78:1f:7c:22:53:99:77:61:30:05:4e:
35:c4:06:cb:af:83:63:8f:20:e1:80:14:1f:c8:49:b5:75:32:
89:7c:36:46:a1:d7:b7:50:08:f3:f1:25:4f:be:1a:3f:b4:36:
8c:15:0f:3c:b5:d0:7d:be:62:d7:53:94:8b:73:d9:63:01:4e:
40:74:e3:47:67:cd:fc:9f:06:a5:e7:c4:d7:64:ab:cb:e5:cb:
f3:3f:f1:66:85:0a:e4:94:ba:35:50:f1:f6:5f:41:1d:8d:8e:
e1:ad:8c:c6:20:68:d2:9f:84:39:26:ef:e2:8c:20:e5:80:25:
af:4c:7f:cf:20:2f:dc:87:7e:90:ec:40:96:21:c2:3a:ae:df:
8b:8e:a2:da:c3:c3:e4:a1:75:f3:89:be:f9:a2:ac:a6:8f:e1:
ad:20:a9:ad
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jul 31 00:47:20 2023 by rpki-client on console-ams.rpki-client.org