Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/przezp1gqbWokgzPDLBNwcVONy8.roa
File: przezp1gqbWokgzPDLBNwcVONy8.roa (raw, json)
Hash identifier: mXG8ur11JGfM/ExmfJO0KJkerTYIuCYjUOT4+1Zc0hI=
Subject key identifier: A6:BC:DE:CE:9D:60:A9:B5:A8:92:0C:CF:0C:B0:4D:C1:C5:4E:37:2F
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018A3CAC9CDFEF92F72925BB14A0F5085C1C
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/przezp1gqbWokgzPDLBNwcVONy8.roa
Signing time: Mon 28 Aug 2023 15:04:19 +0000
ROA not before: Mon 28 Aug 2023 15:04:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200385
IP address blocks: 45.144.213.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3c:ac:9c:df:ef:92:f7:29:25:bb:14:a0:f5:08:5c:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Aug 28 15:04:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6bcdece9d60a9b5a8920ccf0cb04dc1c54e372f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:21:ba:0d:db:8e:ff:13:c3:44:f7:db:3f:4b:
c6:97:11:da:a2:62:96:5e:91:c2:6a:bf:75:14:81:
08:74:51:eb:0c:b9:9d:69:ff:e9:e6:18:d0:8e:1b:
a4:7b:d2:da:16:96:4d:14:44:38:3d:89:60:30:57:
e5:1c:48:01:f9:1e:5e:f4:99:e6:9c:66:3d:5e:b5:
de:53:56:85:e4:23:53:c2:6f:18:32:98:63:8a:a4:
50:0e:a9:61:33:c9:a3:b1:42:f0:de:b8:fc:57:7a:
3c:91:85:44:5b:31:1b:c4:26:83:b2:25:bc:09:3d:
5c:bc:97:a9:20:44:0c:74:79:40:97:a3:7c:a9:e8:
8b:3b:a4:d4:d2:d6:88:a5:ce:10:53:bc:88:14:32:
77:a9:50:bc:ca:b0:fd:49:a7:7a:c1:31:02:9b:e1:
7d:39:83:89:87:3e:07:83:51:fd:ce:3b:82:12:b3:
1f:eb:53:4b:ec:bb:b0:08:84:87:3e:c0:50:6a:e1:
b3:6a:46:75:73:34:d6:13:9d:99:e5:9e:79:91:5d:
13:87:34:00:d5:e8:2d:47:0e:aa:00:be:5f:25:00:
50:d1:64:7f:76:d2:cd:03:c7:65:e7:c5:8c:66:4e:
0c:bb:90:a1:07:83:33:3e:21:d3:2e:bf:c6:26:bc:
8e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:BC:DE:CE:9D:60:A9:B5:A8:92:0C:CF:0C:B0:4D:C1:C5:4E:37:2F
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/przezp1gqbWokgzPDLBNwcVONy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.213.0/24
77.83.37.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:28:eb:3a:2e:f5:b2:03:f3:ed:01:6a:74:b1:5c:5d:3c:0b:
0d:c6:76:67:52:6c:4f:47:41:e3:06:97:4c:92:e2:07:50:ec:
a3:a3:d7:b9:7b:c8:53:21:c7:a5:e0:55:63:3e:35:f3:c1:e5:
34:b2:17:4e:dc:ee:ab:3a:10:1e:47:d4:0f:d5:0c:e9:0b:6b:
c7:6f:13:f9:0d:0f:a2:eb:39:15:c0:f0:84:68:a8:f7:f4:32:
bf:f9:8f:71:d5:5f:fb:6c:1d:2b:ec:e6:e6:63:16:0e:2a:aa:
1c:1f:e3:ed:08:20:14:d8:91:77:35:4d:ad:b5:7e:33:ba:64:
97:9c:b3:42:29:9e:58:82:15:ee:54:fc:ac:16:18:cd:cd:c9:
60:11:43:d7:1d:da:38:e6:86:f2:8a:01:a2:75:72:3b:be:f5:
7a:c1:e5:1a:70:09:52:ed:c0:53:c9:8a:cf:6a:64:4f:99:ad:
f4:b8:ee:74:b5:45:16:f1:01:58:aa:b3:c3:4e:73:2e:4a:36:
d3:0d:db:50:6b:3e:0d:db:3c:00:0b:ad:42:4b:75:7f:f2:be:
c3:df:68:e3:d1:3b:0c:bf:cb:20:73:e0:7e:16:d3:c0:a1:e6:
03:cb:dd:a2:b4:e4:1c:3a:2f:3f:17:45:a9:74:ee:03:9c:42:
37:4e:40:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 09:53:49 2023 by rpki-client on console-fra.rpki-client.org