Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/qM11B2KhAZFBktr-3d4PBYiyog8.roa
File: qM11B2KhAZFBktr-3d4PBYiyog8.roa (raw, json)
Hash identifier: g2LtVwcdiKvTwAmb/tB9Lz6on9KPRDUrstlfBkaauYs=
Subject key identifier: A8:CD:75:07:62:A1:01:91:41:92:DA:FE:DD:DE:0F:05:88:B2:A2:0F
Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Certificate serial: 018650B82CA88F59E6C8BDE48128D9D147D1
Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/qM11B2KhAZFBktr-3d4PBYiyog8.roa
Signing time: Tue 14 Feb 2023 16:18:12 +0000
ROA not before: Tue 14 Feb 2023 16:18:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 11351
IP address blocks: 185.45.92.0/23 maxlen: 23
185.45.95.0/24 maxlen: 24
45.158.192.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 15 Feb 2023 20:06:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:50:b8:2c:a8:8f:59:e6:c8:bd:e4:81:28:d9:d1:47:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Validity
Not Before: Feb 14 16:18:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8cd750762a101914192dafeddde0f0588b2a20f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:18:28:7e:53:f9:c4:b4:ca:b2:23:e6:05:64:
23:0e:c0:f9:60:85:fb:6f:0d:b0:54:fe:2d:09:a2:
bf:ec:40:d7:03:72:75:cd:09:f5:93:6f:78:c8:6b:
ac:d6:f3:c9:6c:c4:94:ec:bf:23:de:56:eb:33:f5:
d4:d8:9b:6e:bd:6b:7b:aa:f0:0e:97:13:1b:6a:04:
8b:73:62:01:c5:af:78:64:31:c5:e6:8d:b9:14:b7:
99:d3:45:38:33:76:5e:3f:f4:5d:15:e8:e0:81:7e:
6c:a1:5c:da:4a:56:d6:2c:24:46:60:dd:fc:dd:d1:
39:0e:1e:3c:90:5a:f8:be:3d:5f:f8:32:77:52:d7:
d2:36:14:08:82:ae:b3:06:86:f5:6e:b5:8b:a4:28:
09:9f:c1:e5:a9:96:e6:8f:cc:6b:ad:f5:33:7c:69:
bf:a6:5a:d9:ef:92:db:e7:87:60:f3:78:72:c4:e8:
e7:d6:8c:04:2b:79:e3:ff:7b:f5:e0:b7:40:83:7e:
74:ee:b0:e5:41:7b:45:ec:93:e1:b4:75:de:ec:66:
7a:dc:72:89:0f:d2:0d:4b:5f:1d:74:fb:4d:98:c0:
eb:a6:54:2f:72:1e:94:44:ed:c5:29:2d:e0:dc:35:
b7:b2:0e:f8:89:4f:b4:12:b8:dd:2d:a0:b9:f5:54:
34:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CD:75:07:62:A1:01:91:41:92:DA:FE:DD:DE:0F:05:88:B2:A2:0F
X509v3 Authority Key Identifier:
keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/qM11B2KhAZFBktr-3d4PBYiyog8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.192.0/22
185.45.92.0/23
185.45.95.0/24
Signature Algorithm: sha256WithRSAEncryption
af:13:b2:30:88:69:16:ff:30:04:6b:54:5c:03:55:59:83:73:
80:17:f7:bd:68:3c:41:df:34:2a:17:6f:76:f6:0d:aa:cb:ec:
4f:23:f3:de:f2:b2:0b:a5:4f:0e:4d:62:d4:66:b5:ea:e7:a9:
20:da:c7:25:d1:e7:c5:b9:da:c9:26:0d:03:26:0f:5a:23:9d:
b7:07:31:bc:a5:4e:bf:34:04:d1:92:c5:6f:5a:1a:51:e0:86:
4d:a8:07:46:4f:79:8d:44:05:fe:50:e2:ce:31:82:2e:87:42:
11:6e:ac:e1:be:76:fe:6c:71:56:0d:59:d6:83:50:30:e5:66:
30:c8:96:35:99:f5:06:59:38:d5:9a:97:47:63:ab:c4:26:48:
05:97:92:a7:83:e0:d3:aa:97:11:73:38:ca:54:b7:9d:ba:33:
00:8c:64:00:e4:1d:e7:cd:67:f7:59:80:b8:13:55:24:09:94:
12:fa:1d:c5:b7:f1:a6:9b:0f:6d:0d:63:00:da:5f:7c:95:b8:
8a:8f:79:bd:ec:10:ef:23:85:f4:d4:fb:9f:ae:d0:01:0e:62:
6e:a3:34:80:48:78:fe:d6:2b:b5:66:ec:31:47:cf:6b:d7:89:
75:3b:a5:bb:ac:90:6f:1f:e3:fa:c2:58:c8:bc:64:f2:16:b2:
e8:1b:27:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:50 2024 by rpki-client on console-ams.rpki-client.org