Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/M0RjTAbpvOrPfOnyLbFwW8URBSM.roa
File: M0RjTAbpvOrPfOnyLbFwW8URBSM.roa (raw, json)
Hash identifier: 1uEWpv1gQu9XUA5nh6f0xnjgT8oYlwqHaC8e6xxKLyA=
Subject key identifier: 33:44:63:4C:06:E9:BC:EA:CF:7C:E9:F2:2D:B1:70:5B:C5:11:05:23
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 018A943676997737F7CC48B3B463F07CFE86
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/M0RjTAbpvOrPfOnyLbFwW8URBSM.roa
Signing time: Thu 14 Sep 2023 15:01:51 +0000
ROA not before: Thu 14 Sep 2023 15:01:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206119
IP address blocks: 185.169.182.0/24 maxlen: 24
45.133.37.0/24 maxlen: 24
185.174.20.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:94:36:76:99:77:37:f7:cc:48:b3:b4:63:f0:7c:fe:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Sep 14 15:01:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3344634c06e9bceacf7ce9f22db1705bc5110523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:12:10:08:8f:88:c0:01:60:22:21:af:f9:71:
51:f4:96:70:26:ce:99:14:71:d3:7d:fb:d8:b9:18:
d8:23:02:49:a9:c4:80:7a:00:c3:45:c0:d3:c2:e8:
a3:84:18:42:0c:76:10:64:21:d5:71:18:78:4a:2f:
e6:58:3e:11:35:6e:ab:5d:6b:1a:c6:1d:7c:c2:38:
f6:a0:7a:93:46:45:ca:25:15:e8:65:43:87:cd:e1:
66:9f:d1:f2:e1:03:9d:10:98:9f:98:0a:7f:61:4f:
17:b2:da:41:cd:22:04:97:8e:e6:65:57:e7:9b:18:
97:76:d6:56:d3:f8:ab:fa:76:92:4f:b9:1e:66:9a:
63:ea:ed:1b:2a:8c:be:c5:a6:f4:41:a8:9b:44:b6:
8e:f3:3f:9b:ed:07:ee:1d:bc:f9:8e:42:2e:cb:ef:
7f:7d:37:cf:de:29:e5:51:b9:d9:ed:8e:6f:67:af:
55:bf:b7:90:f0:92:7e:d9:d1:7d:de:d6:85:0f:36:
29:00:b7:05:97:24:32:81:f2:28:e0:65:14:2d:55:
0e:58:d8:ef:50:27:4a:c1:c5:36:e3:bc:f7:38:51:
a2:48:2b:64:ca:e9:2b:74:1a:5c:f8:1b:44:d1:ca:
de:25:2f:b0:01:cc:6c:69:70:85:56:1a:e4:a2:f1:
0b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:44:63:4C:06:E9:BC:EA:CF:7C:E9:F2:2D:B1:70:5B:C5:11:05:23
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/M0RjTAbpvOrPfOnyLbFwW8URBSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.37.0/24
185.169.182.0/24
185.174.20.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:f2:45:b2:54:44:3d:dd:a5:ef:ed:63:38:54:46:e9:57:1f:
c8:c0:6c:da:b1:ce:9a:7c:18:9d:0b:44:d4:0b:88:71:ab:4c:
87:2a:94:e3:3a:7b:53:d8:f3:55:14:92:cd:e0:cc:58:66:9e:
aa:b2:b9:b7:55:7e:5c:d4:22:58:cc:73:24:3b:dd:c7:a5:37:
6a:40:b7:b3:7b:c3:70:e9:46:b0:33:54:00:50:98:a5:a6:ab:
d6:db:20:62:f3:28:99:6e:45:04:b8:f5:dc:37:4a:aa:46:0a:
47:86:4d:96:3a:15:c8:6e:f9:77:00:3a:5a:10:69:6d:f0:9c:
0a:f4:2f:7d:e7:63:d3:38:83:b1:7b:9c:a3:e0:d0:a5:5e:1b:
68:c2:64:18:f5:99:49:03:c9:db:23:ee:65:94:4d:7e:81:de:
fe:f0:f7:82:3b:e6:48:bb:a8:04:b8:85:9a:84:99:7d:f6:f6:
76:e9:8f:bf:a0:c0:96:6e:5a:67:a7:b3:d3:61:05:20:32:75:
e9:98:63:39:38:64:07:69:b2:eb:9d:b4:a4:fa:70:20:e8:c7:
2b:41:76:c3:1d:64:4a:ee:4e:5b:dc:66:46:7c:8b:03:1d:04:
3e:54:f1:81:3b:89:3a:5a:04:f3:ad:8c:2f:da:d7:19:ef:77:
3b:4e:b7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 17 21:38:49 2023 by rpki-client on console-ams.rpki-client.org