Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CGdAYmqrGacyzUsvuTrlbLJRtYc.roa
File: CGdAYmqrGacyzUsvuTrlbLJRtYc.roa (raw, json)
Hash identifier: gH4DtMEz4ArTLe3prQBMKL+3StGww3LfWtDg7jVk8u0=
Subject key identifier: 08:67:40:62:6A:AB:19:A7:32:CD:4B:2F:B9:3A:E5:6C:B2:51:B5:87
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01891A607A5448FEDBB274C719C998EE9578
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CGdAYmqrGacyzUsvuTrlbLJRtYc.roa
Signing time: Mon 03 Jul 2023 06:11:17 +0000
ROA not before: Mon 03 Jul 2023 06:11:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.14.167.0/24 maxlen: 24
93.123.74.0/24 maxlen: 24
83.219.98.0/24 maxlen: 24
83.219.96.0/24 maxlen: 24
83.219.99.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1a:60:7a:54:48:fe:db:b2:74:c7:19:c9:98:ee:95:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 3 06:11:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=086740626aab19a732cd4b2fb93ae56cb251b587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d9:95:cc:7c:2d:9b:41:d5:6c:b8:3c:d3:70:
5c:f3:73:e6:0c:a8:85:aa:63:42:96:71:bd:55:fc:
88:d3:3d:b1:07:0a:81:7c:8e:a9:3e:af:c2:ab:ec:
8d:35:0e:51:63:34:51:70:d1:0c:e6:ca:3f:65:0e:
a4:a8:8c:15:9b:ff:bf:1c:de:e7:bc:ce:1e:bc:da:
8e:04:18:90:0b:d9:4b:29:36:4a:9b:a2:34:0d:dc:
65:37:1c:e3:0f:29:17:6c:03:7c:15:23:bd:ab:a9:
48:d7:43:c3:d1:a0:83:00:59:fb:68:e4:bf:65:f8:
cc:30:ef:84:ba:d1:dc:84:81:b0:5f:a4:73:70:eb:
c4:ee:5b:eb:32:01:7f:37:02:eb:61:12:11:3e:46:
87:ff:fe:fc:99:d3:6a:9d:0e:c1:9c:50:dd:47:4d:
1c:04:03:96:5c:b0:6c:aa:1f:8b:d6:d1:15:07:66:
6c:90:92:72:c3:db:e7:b7:4e:b1:41:ca:27:6b:dc:
95:2e:c8:9c:33:2e:3b:08:b2:df:dd:28:cf:97:e4:
19:59:d9:fe:46:25:6b:74:69:aa:9a:86:4e:5d:bb:
0b:8f:61:c3:06:34:15:9e:31:8e:c1:98:68:d9:87:
7c:e0:27:ce:fb:a4:59:6e:94:e7:ae:3c:85:28:4a:
c0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:67:40:62:6A:AB:19:A7:32:CD:4B:2F:B9:3A:E5:6C:B2:51:B5:87
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CGdAYmqrGacyzUsvuTrlbLJRtYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.167.0/24
83.219.96.0/24
83.219.98.0/23
93.123.74.0/24
Signature Algorithm: sha256WithRSAEncryption
af:02:90:b0:34:41:d6:c7:ff:b1:fc:32:7a:0e:01:79:6d:1f:
df:ff:3d:ab:c5:1b:d2:9f:b2:45:5b:c7:fa:7e:a4:86:d0:e9:
3c:8a:98:86:5d:a7:bb:78:0b:28:09:2e:4e:46:37:8b:6b:87:
63:44:e4:0b:40:23:dd:06:d1:f4:57:42:3a:fb:07:92:05:36:
23:d5:69:97:47:e6:81:32:6d:11:0d:dc:38:0a:5f:28:a7:7d:
cd:ee:f7:91:fc:33:db:48:10:45:4e:1d:4b:7e:57:d0:97:88:
2a:0e:69:78:15:62:56:89:a0:0c:92:ce:a8:20:a2:3d:9d:e2:
d6:a4:57:48:05:77:fc:34:5a:b4:a2:8d:4a:c2:d9:b5:8e:d8:
43:32:99:eb:66:30:43:ed:88:b7:c5:88:9b:90:ba:b6:31:a1:
77:45:b9:c6:cb:6a:ed:1e:57:d5:8a:d9:8c:37:63:42:6d:64:
da:8f:29:63:58:77:52:fb:45:da:2c:3d:1a:6a:ad:64:07:fb:
fb:60:a2:f0:30:7f:37:5e:42:48:f6:19:fa:3a:5b:06:9e:dd:
53:0f:69:4a:be:3e:c9:7b:e9:a5:52:ac:97:a2:94:9f:ad:04:
ed:37:6f:34:c7:b2:8d:2c:5b:da:94:80:3d:26:2a:a6:41:89:
fa:9d:f6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:33 2023 by rpki-client on console-ams.rpki-client.org