Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/9s3K0DBs0QN1ahFF3Btqi70qWOQ.roa
File: 9s3K0DBs0QN1ahFF3Btqi70qWOQ.roa (raw, json)
Hash identifier: iU/Y+a112OqW5/6jJhwZqBIJA9e6Xjfem6tXKLUpKwQ=
Subject key identifier: F6:CD:CA:D0:30:6C:D1:03:75:6A:11:45:DC:1B:6A:8B:BD:2A:58:E4
Certificate issuer: /CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Certificate serial: 0188FC378496C5769D1A8D7CC656E3CA1474
Authority key identifier: 45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/9s3K0DBs0QN1ahFF3Btqi70qWOQ.roa
Signing time: Tue 27 Jun 2023 09:37:56 +0000
ROA not before: Tue 27 Jun 2023 09:37:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45012
IP address blocks: 83.246.61.0/24 maxlen: 24
83.246.112.0/24 maxlen: 24
83.246.108.0/24 maxlen: 24
83.246.113.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fc:37:84:96:c5:76:9d:1a:8d:7c:c6:56:e3:ca:14:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Validity
Not Before: Jun 27 09:37:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6cdcad0306cd103756a1145dc1b6a8bbd2a58e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c4:75:2c:b5:4c:8f:08:52:b5:9d:c3:36:88:
a8:86:cf:db:0d:f4:63:70:ca:f6:05:49:12:d3:e8:
72:bf:96:9c:81:8f:e0:65:c5:04:61:53:2d:2f:16:
e4:de:c8:a6:18:a4:28:d5:3d:aa:5c:18:ea:b3:2e:
13:99:ee:e2:df:0f:6b:07:ff:31:c5:4b:0e:30:cb:
f4:6e:64:41:b1:57:93:2a:e8:11:6e:d1:86:dd:b8:
41:14:c5:4b:38:09:90:a1:aa:60:b7:62:45:6b:af:
8e:52:6b:ac:c4:49:1b:29:e4:a8:ec:a4:6c:e7:2b:
cd:eb:ce:c0:03:1b:1f:ca:96:53:8f:a9:71:a6:a1:
8c:83:e4:65:cb:fb:76:a4:23:bb:fb:8d:be:84:14:
80:54:1f:df:4c:26:4b:11:8e:2d:f1:21:89:7d:0e:
8a:b3:c6:05:28:61:97:e3:2e:db:12:c9:80:71:7f:
2a:29:09:0c:38:f9:f9:c8:e2:cf:55:4a:7d:22:47:
ed:09:4b:9f:92:66:ae:67:3b:7f:76:9d:85:75:a8:
f0:28:fa:3c:b0:70:5e:f2:c3:e2:67:b0:97:96:48:
e9:5f:d6:21:60:be:43:5b:c4:20:3b:54:4a:9d:27:
c8:b7:c5:60:32:69:7d:73:2d:ad:6b:0f:56:ba:08:
af:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CD:CA:D0:30:6C:D1:03:75:6A:11:45:DC:1B:6A:8B:BD:2A:58:E4
X509v3 Authority Key Identifier:
keyid:45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/9s3K0DBs0QN1ahFF3Btqi70qWOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.246.61.0/24
83.246.108.0/24
83.246.112.0/23
Signature Algorithm: sha256WithRSAEncryption
08:0a:03:d0:d7:ef:36:1f:f2:9b:28:a0:7f:cf:f6:9a:63:13:
9a:cb:fe:8a:2b:e1:74:26:ec:36:5b:da:cc:b7:20:7b:f2:77:
14:58:73:b7:00:49:c0:ab:15:7e:7e:76:f4:aa:15:c1:71:32:
2c:6c:40:df:e0:da:9c:f5:48:ed:0a:da:82:72:3f:12:13:9b:
7d:d2:a5:34:46:76:11:46:cf:bc:b5:0b:a3:64:e9:82:5c:71:
07:6f:ce:5f:38:ef:e6:4e:c3:e9:98:41:28:88:27:aa:04:e1:
09:aa:cc:6d:33:88:c3:fe:81:d1:1d:c5:96:68:bd:64:0f:58:
09:71:20:a1:ac:92:b1:93:9f:94:0b:af:11:49:c9:49:50:17:
3f:5b:c4:21:cd:7f:7d:89:a5:e0:01:5c:a4:1f:72:c4:59:7b:
95:63:50:80:f5:f0:37:89:b1:55:85:4d:87:de:c2:f9:5e:12:
74:5e:8c:54:62:b6:42:a4:96:1a:64:bd:70:6c:d8:cd:7b:61:
96:64:32:ac:f4:d1:ad:f3:ec:19:0a:a6:e5:c0:31:df:70:4f:
64:89:2c:63:4a:51:ae:04:83:fa:fc:fa:82:5b:7a:ab:f7:cb:
2d:9e:44:54:32:95:f1:ed:c7:8d:9c:e5:4b:fe:91:2f:0c:0a:
04:c6:82:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:04 2023 by rpki-client on console-ams.rpki-client.org