Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/AR0wCdz00dCqohfu5dQAc_asQic.roa
File: AR0wCdz00dCqohfu5dQAc_asQic.roa (raw, json)
Hash identifier: obZllwYWP4ZLpYTJwrr1fm1Y8ERaPHOhDsfmbGWLoqE=
Subject key identifier: 01:1D:30:09:DC:F4:D1:D0:AA:A2:17:EE:E5:D4:00:73:F6:AC:42:27
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 018AC37286A84AF4FD22480CFBD62D59BB93
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/AR0wCdz00dCqohfu5dQAc_asQic.roa
Signing time: Sat 23 Sep 2023 19:09:37 +0000
ROA not before: Sat 23 Sep 2023 19:09:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 82.115.217.0/24 maxlen: 24
45.140.211.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c3:72:86:a8:4a:f4:fd:22:48:0c:fb:d6:2d:59:bb:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: Sep 23 19:09:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=011d3009dcf4d1d0aaa217eee5d40073f6ac4227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a3:d5:4a:c1:d6:01:51:63:38:5b:9e:84:64:
49:db:c2:bd:8f:5a:c9:32:8b:48:38:b4:c9:5e:71:
de:0b:c9:86:0f:51:b5:46:ed:3e:c2:17:91:77:6b:
81:32:3d:a8:36:de:4e:86:17:80:56:6f:7a:b1:db:
45:4b:2c:fc:41:fc:dd:b4:7b:73:90:23:10:95:a0:
25:5b:fd:8b:01:82:4f:1d:c3:ba:1c:c3:33:c7:fb:
51:3e:47:80:63:6d:e8:07:21:56:c9:57:67:07:42:
02:b5:82:f9:76:8f:67:64:04:24:94:c5:25:66:d7:
80:6b:a3:df:14:90:a4:e7:12:5e:3c:cc:f1:a5:f6:
a6:35:d6:6b:cb:38:85:b5:94:b5:36:04:29:91:7a:
d2:db:67:63:89:e2:b0:1a:02:2b:ee:fd:0c:cb:fe:
17:5b:9e:25:07:ed:67:cf:73:27:20:99:7d:ad:37:
e1:64:e5:2f:d7:7f:85:5a:a3:57:28:60:34:91:54:
a9:fc:e0:c4:8d:14:80:12:b6:dc:5b:2b:26:ab:ad:
fe:48:b6:cd:46:97:92:70:6d:a8:d6:63:0a:b9:8f:
95:c9:cf:ab:43:ee:36:f0:02:99:6f:f6:ab:7d:1a:
2b:f8:3a:96:ac:17:ab:af:a5:8d:ae:26:a7:bd:2d:
fd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1D:30:09:DC:F4:D1:D0:AA:A2:17:EE:E5:D4:00:73:F6:AC:42:27
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/AR0wCdz00dCqohfu5dQAc_asQic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.211.0/24
82.115.217.0/24
Signature Algorithm: sha256WithRSAEncryption
68:1f:a4:8d:0f:42:fc:e8:1c:cc:57:47:55:05:da:91:1f:6c:
37:6d:3c:24:8e:92:b7:a0:7f:6c:ec:fc:bc:28:12:3a:35:bc:
f8:a9:79:44:2d:54:61:b9:07:c8:4b:51:61:2e:aa:86:cd:7c:
bb:da:ac:16:60:69:67:4e:7d:31:a6:5b:54:48:3c:a8:77:76:
ad:3d:78:b7:80:8a:e2:09:53:51:b8:a1:17:f1:da:c2:6c:c4:
55:7a:89:de:c9:11:24:27:6e:36:05:6a:2b:59:32:96:f2:f8:
c3:1c:03:23:99:a6:a0:e6:35:a7:a9:50:a2:68:ea:07:a5:23:
50:b6:e7:8a:8d:c1:55:93:a3:87:e3:6f:c8:ee:59:1c:45:8f:
7f:4a:5c:59:82:50:9e:a9:a8:58:99:a6:9c:b2:8a:77:99:1b:
8c:e4:45:ff:67:1d:e0:1d:4f:3d:f0:43:86:5a:9e:e5:d2:9b:
17:9a:ae:d7:cc:dc:85:0a:27:e1:0b:35:32:63:58:66:a2:ea:
bd:2c:7b:f8:94:bb:aa:3f:f9:99:de:da:69:5a:a5:c0:43:ac:
eb:99:7d:ee:f9:f3:e0:2a:64:f4:4d:18:5d:ef:ba:30:ae:1e:
5a:b5:fb:39:36:ce:2d:29:ee:b5:eb:dd:c0:e2:3c:20:31:de:
c6:6e:17:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:23 2024 by rpki-client on console-fra.rpki-client.org