Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/ReD8SjNHMyFN0KUuIop2DCIXCVo.roa
File: ReD8SjNHMyFN0KUuIop2DCIXCVo.roa (raw, json)
Hash identifier: u7HxF7dd+9CxjLAbghc8Xdjn05OrFEr+/qFYV6HwTAw=
Subject key identifier: 45:E0:FC:4A:33:47:33:21:4D:D0:A5:2E:22:8A:76:0C:22:17:09:5A
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 0189D4B281CAC286DC5306DAC6F60B745C78
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/ReD8SjNHMyFN0KUuIop2DCIXCVo.roa
Signing time: Tue 08 Aug 2023 10:30:15 +0000
ROA not before: Tue 08 Aug 2023 10:30:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 46.31.66.0/24 maxlen: 24
5.57.213.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d4:b2:81:ca:c2:86:dc:53:06:da:c6:f6:0b:74:5c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Aug 8 10:30:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45e0fc4a334733214dd0a52e228a760c2217095a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:85:36:72:36:43:a4:3a:87:47:e8:9a:19:b5:
c9:c3:d6:28:01:47:d7:8d:c4:38:8f:c0:0c:bb:37:
a0:21:2a:fe:b6:f2:5a:ac:da:d6:9d:c5:b7:d7:d5:
43:2a:77:c9:1c:13:41:30:dc:b4:00:7c:34:6c:c4:
96:d2:57:3d:19:23:f2:92:8e:4d:60:60:b4:1b:19:
55:57:59:0b:e8:76:85:fb:cf:77:ea:b6:0c:43:04:
91:0c:3b:8c:b1:33:e1:37:b4:3f:3e:6c:09:92:80:
7e:19:74:f9:cc:34:ee:54:30:9d:3e:9f:de:64:38:
8c:b3:29:c4:43:3d:73:b2:81:7a:58:07:b8:f9:43:
f7:6f:d3:81:f5:fd:56:33:50:fc:34:40:77:2a:56:
3a:32:0f:99:e3:19:de:39:18:d7:f4:65:8d:ff:4c:
40:ed:62:8e:bd:75:c8:b7:b5:b8:73:99:26:ae:8d:
33:28:7b:b8:17:d3:3f:f9:76:4c:87:35:65:a2:16:
d6:ed:47:4f:e7:65:9b:ea:31:0c:c7:37:cb:fe:07:
a1:38:04:64:75:96:51:7e:3c:a2:a4:d2:35:46:09:
c1:16:91:02:cc:bb:61:5a:40:18:8f:f4:ba:a9:b5:
7a:6b:5b:a0:f2:a5:47:05:c6:98:6e:0b:66:12:03:
97:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E0:FC:4A:33:47:33:21:4D:D0:A5:2E:22:8A:76:0C:22:17:09:5A
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/ReD8SjNHMyFN0KUuIop2DCIXCVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.213.0/24
46.31.66.0/24
Signature Algorithm: sha256WithRSAEncryption
44:8a:5a:93:0b:7a:83:14:9c:d2:64:06:28:a7:57:35:cc:b4:
a4:09:0f:8b:ce:7b:cd:e2:4d:1e:c6:68:bb:88:15:0c:a7:ce:
e7:49:70:be:12:ad:44:21:17:31:b5:68:b0:c9:d4:81:63:4e:
82:b1:a4:34:7b:6f:58:f1:0a:1d:d2:13:84:39:d5:3d:3f:93:
da:80:b8:36:09:f5:2d:7c:18:85:0c:4c:bc:25:88:5a:85:07:
40:b0:6e:58:e3:88:3a:6d:68:39:b8:5b:2f:5f:b5:cd:ee:aa:
f2:0c:f9:10:98:28:7d:45:a8:43:2f:d3:2f:10:26:2d:f5:e6:
66:5e:9c:86:06:c6:07:42:e3:fa:fd:8b:66:6c:2a:2b:c2:81:
5c:2c:e3:af:7c:14:f0:db:23:18:50:83:43:0d:d2:52:12:5e:
b3:72:45:2e:58:d4:e7:17:fe:8d:50:6b:c0:e4:f9:87:e1:d5:
fa:d3:e0:e9:20:85:72:e0:8c:68:91:0e:3b:c8:bb:d8:27:fa:
52:db:a9:36:6f:8d:a7:7f:d1:c2:85:ca:35:2e:2b:15:d3:fe:
b7:f6:16:27:03:57:a1:95:ed:13:10:c1:b4:1c:7b:75:75:9a:
e0:ae:eb:fc:6d:6a:51:bd:9d:36:e2:2d:33:f0:e1:e5:9d:11:
3c:f6:f2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 10:21:45 2023 by rpki-client on console-fra.rpki-client.org