Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/NahyeUtihgD0eLY4sQnwcsmv5io.roa
File: NahyeUtihgD0eLY4sQnwcsmv5io.roa (raw, json)
Hash identifier: WNzsKz4eCvqfAnfEjUT9IQ0BBnIyliGj3uWrDvc5cz0=
Subject key identifier: 35:A8:72:79:4B:62:86:00:F4:78:B6:38:B1:09:F0:72:C9:AF:E6:2A
Certificate issuer: /CN=046587901f13079bed8982f629e9dd15468cfef1
Certificate serial: 018571953797303B0E1441A1C04E865D4E08
Authority key identifier: 04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/NahyeUtihgD0eLY4sQnwcsmv5io.roa
Signing time: Mon 02 Jan 2023 08:24:42 +0000
ROA not before: Mon 02 Jan 2023 08:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208645
IP address blocks: 45.91.244.0/22 maxlen: 22
185.91.32.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:37:97:30:3b:0e:14:41:a1:c0:4e:86:5d:4e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046587901f13079bed8982f629e9dd15468cfef1
Validity
Not Before: Jan 2 08:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35a872794b628600f478b638b109f072c9afe62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:86:3b:cb:e1:31:26:96:b2:d0:38:34:67:4d:
74:14:41:01:6c:b1:98:4e:9c:80:8c:f8:d6:10:6e:
90:07:71:a5:ab:3d:d1:90:f9:dc:20:16:6e:9f:a5:
8f:ab:97:fc:16:7b:9f:e5:34:ef:b3:7a:12:10:c2:
8a:c9:ab:e1:99:30:e9:6b:e4:8d:19:16:44:63:7d:
47:c9:3e:66:0f:c9:71:7e:94:0e:e1:3d:cd:7c:2e:
bb:19:5f:4e:c0:4c:9f:49:25:dd:e3:79:9e:63:00:
72:ed:30:46:7e:d1:75:a7:0d:11:4a:71:2c:f4:48:
ff:ed:33:12:ed:58:7a:38:4e:50:16:00:f4:f6:18:
96:ff:8d:72:f9:5e:87:e2:71:a0:a4:4f:89:89:c5:
ec:07:b0:7a:e8:e6:c8:94:55:85:6e:d2:d5:55:b5:
b5:81:d5:47:2e:d0:49:81:ce:13:d3:1f:03:f8:cd:
ff:74:e2:9a:af:8c:39:59:5b:1d:5c:fd:98:f7:4d:
03:93:2c:a0:f2:55:37:f0:ab:6f:4e:0b:38:d3:ae:
aa:ab:88:60:fd:c8:76:2c:3e:ae:05:2e:43:fd:2f:
f5:10:eb:02:0b:94:0c:f0:d5:08:51:19:90:13:fe:
b7:b3:c0:26:7b:1f:de:7d:7c:92:65:a0:0b:69:6c:
e2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A8:72:79:4B:62:86:00:F4:78:B6:38:B1:09:F0:72:C9:AF:E6:2A
X509v3 Authority Key Identifier:
keyid:04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/NahyeUtihgD0eLY4sQnwcsmv5io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.244.0/22
185.91.32.0/22
Signature Algorithm: sha256WithRSAEncryption
d7:10:ab:53:76:c6:46:c4:3e:52:73:a4:9e:62:43:13:9f:fa:
b3:ef:fb:60:4d:24:1e:98:c2:ca:aa:53:b3:93:46:9c:cd:69:
f9:bf:c7:70:63:fe:d3:df:d0:9f:5e:c4:fb:83:58:a2:35:10:
3b:b9:9e:6b:15:7e:e2:26:30:6b:b0:1c:6c:b4:58:4c:17:49:
fc:f5:31:b3:d7:0b:6c:0b:e9:c5:4f:d3:ac:22:27:e0:b8:33:
e1:f5:88:a8:f4:07:af:cf:f8:e7:9f:28:05:c0:b0:9b:8d:44:
9a:af:a9:15:30:b0:71:42:04:87:8a:89:d2:9f:51:1c:36:8d:
1a:bc:d2:d3:d1:14:cf:cd:64:99:b7:82:d4:be:e8:a0:59:fc:
9e:da:58:7c:73:8b:d9:60:85:d8:b9:ea:be:e0:65:07:ca:59:
70:d6:12:5a:50:e1:ca:d4:84:08:b0:84:e0:2d:c7:31:92:6d:
3f:f9:25:bb:c2:ca:db:b0:b9:e7:dd:e0:6a:5f:74:70:ed:8f:
b3:38:17:43:3b:89:46:53:78:bf:14:64:1d:ba:a8:8b:e5:f2:
f8:8d:8f:0a:13:ea:89:8c:26:34:9d:c9:ce:70:68:ac:d5:79:
85:76:7b:21:5d:f3:b5:d9:a3:47:6f:40:bc:d2:7d:09:19:93:
cd:9c:c8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:23:44 2024 by rpki-client on console-fra.rpki-client.org