Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/uKhq6T2MAGvVfls1OJbKI0iZXfE.roa
File: uKhq6T2MAGvVfls1OJbKI0iZXfE.roa (raw, json)
Hash identifier: aD9gfuvsbbXSz9JE+Xx6SuuOuKp5VGOLeBVvxBEdIOo=
Subject key identifier: B8:A8:6A:E9:3D:8C:00:6B:D5:7E:5B:35:38:96:CA:23:48:99:5D:F1
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 01864C9AADC90C46D5C206C7D9DFAF558CFB
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/uKhq6T2MAGvVfls1OJbKI0iZXfE.roa
Signing time: Mon 13 Feb 2023 21:07:30 +0000
ROA not before: Mon 13 Feb 2023 21:07:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 395092
IP address blocks: 217.195.152.0/22 maxlen: 22
213.108.246.0/23 maxlen: 23
45.95.16.0/22 maxlen: 22
45.155.36.0/22 maxlen: 22
2a0d:9ec0::/48 maxlen: 48
2a0d:d8c0::/48 maxlen: 48
2a0d:d8c0:1::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4c:9a:ad:c9:0c:46:d5:c2:06:c7:d9:df:af:55:8c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Feb 13 21:07:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8a86ae93d8c006bd57e5b353896ca2348995df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5e:9e:5d:d5:c8:73:69:34:dd:69:bb:6e:e2:
11:ac:f9:64:17:1c:27:42:5e:87:d7:45:11:1f:38:
a0:3b:5e:11:23:6b:90:50:e4:25:1b:36:19:8d:55:
38:dc:67:a5:7d:ba:31:a4:03:ca:23:29:c7:ee:1a:
50:4b:fe:f8:74:7f:6a:e8:3c:5b:fd:35:6c:44:5c:
47:32:34:90:00:e7:7f:20:df:58:d0:93:0b:31:36:
f7:9c:9c:87:79:77:c5:1f:89:4f:8b:80:9a:cb:e6:
16:27:a9:0b:e5:c5:b9:15:63:74:68:f7:60:ea:46:
77:03:2f:14:35:51:eb:d8:ac:18:a9:e7:00:e3:54:
9a:44:c9:2e:57:72:22:b6:b9:e1:53:aa:d8:db:4a:
7d:10:49:53:c5:8b:7c:35:70:f3:5f:67:aa:fe:51:
10:ba:22:12:19:f5:e2:79:5e:38:fd:4e:1a:2a:04:
f7:21:c3:ed:39:16:01:f2:4d:d6:37:58:4e:05:75:
5d:19:d0:60:fb:6a:cc:f2:c2:38:59:89:ae:b3:0d:
45:87:74:6b:56:af:ff:6a:1b:f9:29:4c:be:b3:01:
23:33:d5:93:63:ce:46:5d:b2:97:91:44:6e:2f:f6:
86:82:29:b6:12:91:09:e2:49:10:1a:95:3e:fc:0f:
3c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A8:6A:E9:3D:8C:00:6B:D5:7E:5B:35:38:96:CA:23:48:99:5D:F1
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/uKhq6T2MAGvVfls1OJbKI0iZXfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.16.0/22
45.155.36.0/22
213.108.246.0/23
217.195.152.0/22
IPv6:
2a0d:9ec0::/48
2a0d:d8c0::/47
Signature Algorithm: sha256WithRSAEncryption
58:6a:69:26:fe:37:77:f5:0b:99:eb:40:87:b3:8b:84:e7:1a:
95:ce:35:fc:4a:a6:46:9e:a1:4e:65:f3:00:f9:ba:ae:2c:c0:
ea:fd:3a:44:85:c8:b8:13:01:51:fc:27:28:4f:ca:50:5c:be:
7d:85:51:8f:7b:47:9b:71:d2:a9:80:9d:24:24:fa:69:be:fd:
21:4b:37:50:2e:e8:73:4f:62:4a:54:bc:c1:02:28:df:9c:10:
8c:a1:e9:85:5a:41:37:31:52:68:c0:e3:cb:2a:9d:16:53:a0:
d1:d3:be:10:10:e0:b0:82:78:1e:4a:50:88:f7:33:ad:2c:c6:
08:54:94:44:6c:85:e3:5f:2b:e0:54:f4:32:2f:ab:84:46:59:
87:0f:fb:78:22:c8:8a:2e:15:94:8a:a6:09:57:aa:a3:f7:e1:
58:3e:b6:5d:f5:2a:35:19:e6:07:cd:09:e1:06:3b:99:82:14:
75:37:b2:f6:51:77:44:15:37:02:09:1c:bd:77:be:8f:a2:39:
fe:db:a7:3c:98:91:50:cd:fe:10:b2:60:62:14:de:2b:42:4e:
2a:7e:95:66:f8:06:46:31:3b:93:e1:03:0d:63:75:90:bf:63:
40:fa:59:1a:be:42:d5:e6:4e:0d:3e:6b:93:aa:11:d8:2e:05:
8d:3a:28:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-ams.rpki-client.org