Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1_vL5D-cD-5QBFImhtII1k9oNhw.roa
File: 1_vL5D-cD-5QBFImhtII1k9oNhw.roa (raw, json)
Hash identifier: 6rtiSIkT14Pl/pPQRpBvFXEn76QMz+CTiC6/YlKJhZo=
Subject key identifier: D7:FB:CB:E4:3F:9C:0F:EE:50:04:52:26:86:D2:08:D6:4F:68:36:1C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018586D1A212EA9348DD2842B05E9440A6A3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1_vL5D-cD-5QBFImhtII1k9oNhw.roa
Signing time: Fri 06 Jan 2023 11:22:43 +0000
ROA not before: Fri 06 Jan 2023 11:22:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38337
IP address blocks: 45.88.66.0/24 maxlen: 24
185.225.75.0/24 maxlen: 24
45.128.235.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:86:d1:a2:12:ea:93:48:dd:28:42:b0:5e:94:40:a6:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 6 11:22:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7fbcbe43f9c0fee5004522686d208d64f68361c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6d:2b:49:8c:61:f9:a9:7d:63:ed:90:d1:42:
15:d8:96:89:34:7c:19:6c:65:91:e5:cd:f8:0d:12:
3c:74:59:f5:0f:9c:4b:ce:0c:ca:47:87:d6:c5:f1:
3f:a8:64:f8:9e:78:59:5d:d8:30:5d:e2:d0:e7:60:
38:b4:b5:ed:31:35:1f:c4:fb:31:5c:03:29:9c:8b:
51:03:0c:14:61:1f:7d:37:05:b2:59:ef:54:a1:fc:
4c:a7:0e:a7:07:61:4f:50:28:4a:eb:6e:30:b8:87:
33:57:e6:16:47:cc:96:d5:aa:17:c3:3b:57:0e:fa:
fb:69:99:52:82:fa:ec:8b:d8:5e:c2:c4:37:96:61:
40:11:59:00:a6:e5:8d:90:1c:7e:b9:0f:34:26:cf:
fc:ba:7c:f5:8c:99:ed:5d:96:98:ca:d0:da:2c:47:
0d:dd:19:42:b2:65:c5:21:67:71:e2:37:69:03:bb:
c3:1b:25:d0:0a:92:c8:65:9f:3c:60:0a:4f:02:96:
e0:a7:24:d2:94:9a:a4:40:35:ea:1c:ba:9a:98:a2:
b8:13:be:d8:c6:81:1f:61:ff:e8:95:e8:de:14:0d:
4b:2c:fc:4b:cc:36:f6:28:e2:d4:fe:79:4f:68:c8:
82:bc:b2:bc:ac:9f:8c:2a:db:71:62:77:25:82:a3:
f4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FB:CB:E4:3F:9C:0F:EE:50:04:52:26:86:D2:08:D6:4F:68:36:1C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1_vL5D-cD-5QBFImhtII1k9oNhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.66.0/24
45.128.235.0/24
185.225.75.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:a6:c4:42:8b:ba:4a:98:7d:f4:45:f5:38:7a:07:7a:08:86:
22:93:85:73:04:2c:99:f2:f2:97:89:b7:48:c3:cd:12:c8:90:
71:70:22:a9:83:28:2e:91:98:3e:bd:3d:7a:7a:27:da:f5:58:
9a:9d:d3:18:3e:d6:75:35:c1:56:b0:47:56:c8:b2:8d:b1:ec:
99:3f:5e:80:4f:b7:9a:55:be:f9:e8:de:64:a7:69:36:24:ca:
46:59:e2:6a:6f:50:2a:c8:bb:79:ef:55:9b:f4:f7:9f:67:0c:
70:a8:35:4a:90:33:3a:ce:2b:43:0b:8a:20:8a:10:a3:4f:b4:
96:c0:35:c1:31:5b:bc:09:5a:7f:38:88:14:9a:f5:3e:cb:52:
cf:51:27:1b:9f:c8:26:09:af:aa:76:80:d1:7b:3d:76:8d:e5:
b9:f0:4f:5f:46:70:08:0e:71:f2:88:8c:68:2f:f2:cc:50:27:
3d:71:fc:08:7e:a1:a0:3c:92:27:1a:5f:70:53:8d:b0:38:07:
3f:21:fc:f8:b8:08:c4:29:fe:0c:ad:8e:3f:c6:f4:57:7b:21:
7e:30:49:90:8a:8f:b6:4d:d2:31:78:81:49:8b:68:48:31:73:
62:7e:59:0e:2b:5c:de:c3:db:3c:20:a0:04:19:53:37:a8:b2:
c3:73:bf:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:31 2023 by rpki-client on console-ams.rpki-client.org