Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/1MlxMbvsHMW2i2ivnb9unfpLEi4.roa
File: 1MlxMbvsHMW2i2ivnb9unfpLEi4.roa (raw, json)
Hash identifier: xeB1YdL1axdNVh2MWcHt/gAC2+WFA6MtaXpCvMwbQGk=
Subject key identifier: D4:C9:71:31:BB:EC:1C:C5:B6:8B:68:AF:9D:BF:6E:9D:FA:4B:12:2E
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018ADFE4DC2E242EAC3038E17EB267819338
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/1MlxMbvsHMW2i2ivnb9unfpLEi4.roa
Signing time: Fri 29 Sep 2023 07:43:52 +0000
ROA not before: Fri 29 Sep 2023 07:43:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200385
IP address blocks: 45.81.112.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
45.81.113.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:df:e4:dc:2e:24:2e:ac:30:38:e1:7e:b2:67:81:93:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Sep 29 07:43:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4c97131bbec1cc5b68b68af9dbf6e9dfa4b122e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b1:bb:b0:c4:5b:04:74:d0:bc:c5:3f:e1:e2:
19:e3:71:e2:14:e1:a1:bb:cb:68:27:16:55:6f:5c:
c5:c8:58:b6:d8:45:21:6e:f7:98:a5:b5:87:57:a9:
e5:2f:04:f8:d6:b5:3b:80:49:75:00:52:1a:67:e0:
99:1a:61:43:83:da:13:a9:5c:be:da:9e:85:aa:e2:
5f:81:25:49:67:2d:ca:5e:98:8b:1c:37:d1:31:1a:
fd:ab:ec:c0:72:2f:d5:15:64:d7:e8:bb:bc:3d:15:
f8:88:30:21:7d:0f:fd:65:20:1a:7f:00:4c:ad:6e:
42:be:8f:64:80:c7:d7:74:15:62:fd:7b:7d:6f:0c:
3d:ef:08:82:f6:ae:e0:93:92:34:85:85:0b:4d:b2:
5b:a7:de:f1:42:b5:77:3f:e7:d7:2a:25:b4:8e:04:
cf:08:c9:b4:3e:58:69:40:00:2c:29:0f:0d:37:17:
48:12:ec:18:9a:c7:80:a9:f7:86:50:15:8b:0b:a8:
ec:fe:c8:ad:85:50:61:16:ab:69:f3:03:ca:07:81:
3b:09:2d:73:55:97:f2:9e:17:0e:2f:bd:a6:d1:9e:
f7:9f:91:a8:a0:26:ab:87:28:f2:d8:93:b7:2e:cc:
d8:c0:1c:43:fa:91:bd:08:b7:8c:d0:21:96:78:61:
89:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C9:71:31:BB:EC:1C:C5:B6:8B:68:AF:9D:BF:6E:9D:FA:4B:12:2E
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/1MlxMbvsHMW2i2ivnb9unfpLEi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.112.0/23
45.81.115.0/24
Signature Algorithm: sha256WithRSAEncryption
49:11:17:d0:22:dd:87:9a:f1:50:0b:23:ed:50:65:c2:65:83:
cd:31:fc:44:1d:03:cf:81:48:f6:70:23:65:94:bf:7b:27:7b:
54:fc:f5:df:f2:4c:01:4c:93:56:dd:66:bf:3b:68:ba:9d:50:
23:be:ba:7c:8a:bf:ed:d3:6e:04:30:6c:56:7a:72:18:71:2a:
3f:9a:df:39:76:c3:af:b3:3f:dd:eb:10:dd:0e:3d:3d:6d:89:
d7:73:f3:13:3e:cd:74:9e:40:51:66:fe:63:14:e6:ce:e5:10:
c4:09:0d:97:87:b0:b4:57:c6:71:f4:af:2c:eb:36:ab:0c:4d:
2f:7b:c0:13:6e:76:98:96:a5:c9:a3:6e:54:4e:38:25:8a:51:
60:aa:87:e2:11:3a:64:72:99:ed:3e:e9:61:a6:9e:60:34:a6:
07:d9:2f:d8:fb:fa:ee:ae:2f:db:d1:45:27:74:b6:e8:90:9e:
e5:16:4d:0b:84:b8:0e:31:94:3b:61:54:16:16:04:4b:d5:45:
0d:0d:b3:72:7d:86:2d:da:31:be:66:ba:41:1b:74:d9:ca:ab:
dd:ad:52:da:44:d9:c0:c9:ad:a9:63:23:85:cd:9c:ae:9f:ec:
fa:40:9d:a9:71:41:36:93:82:b0:6a:9f:75:9c:90:ac:56:aa:
46:c6:a0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 29 17:06:21 2023 by rpki-client on console-ams.rpki-client.org