Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/QsRrOcqpBitwUXZ5z2yi4mNmfB8.roa
File: QsRrOcqpBitwUXZ5z2yi4mNmfB8.roa (raw, json)
Hash identifier: rDorBey/mzfwck44CRXg5EU9uheFtGNjf97q91yE4Ig=
Subject key identifier: 42:C4:6B:39:CA:A9:06:2B:70:51:76:79:CF:6C:A2:E2:63:66:7C:1F
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 01860EAB99E799B56F6139748809ED581F21
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/QsRrOcqpBitwUXZ5z2yi4mNmfB8.roa
Signing time: Wed 01 Feb 2023 20:29:32 +0000
ROA not before: Wed 01 Feb 2023 20:29:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 82.115.217.0/24 maxlen: 24
45.140.210.0/24 maxlen: 24
45.140.211.0/24 maxlen: 24
45.140.208.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0e:ab:99:e7:99:b5:6f:61:39:74:88:09:ed:58:1f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: Feb 1 20:29:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42c46b39caa9062b70517679cf6ca2e263667c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:54:e2:c3:72:51:6b:3e:81:2f:43:9f:6f:0a:
a7:49:b7:4e:4f:4b:24:c3:8d:24:ad:ce:0b:7c:ad:
7e:f4:f9:78:d8:61:56:c6:a0:9d:4e:f7:a0:0a:71:
ed:7e:58:6c:7f:b8:db:c0:ed:61:cc:42:eb:7a:74:
3d:1b:2a:72:7a:15:80:c3:7c:f9:94:fd:f7:17:2d:
13:97:e8:ca:8c:d0:e3:89:41:e9:90:e7:f7:e0:15:
54:64:6e:ca:d4:68:85:22:62:d3:32:0b:91:4a:a9:
11:6b:fb:70:2e:b2:ef:77:20:3a:49:5d:d0:89:e5:
96:ae:1b:65:22:d4:69:39:7b:39:de:d7:13:85:fa:
ac:b1:da:ac:3b:f1:5b:7d:1e:e8:25:7a:90:3a:94:
56:03:66:e4:ee:ff:b6:da:27:f0:17:6f:b9:16:0d:
9f:ba:a2:2b:39:d1:a1:35:f9:f0:2e:af:23:ad:ba:
5a:11:40:2d:f8:b8:00:3a:ff:a0:b0:14:e1:89:ba:
55:e1:a8:5a:d1:e8:07:9f:67:3d:dc:4b:a3:4a:de:
37:c6:2b:31:40:7a:ee:94:15:a1:7c:58:ed:20:92:
a2:64:60:b1:c6:0d:f8:bc:5c:6b:cd:db:88:7b:7d:
ae:36:fc:05:8f:eb:78:1f:f0:0c:da:9d:2b:dd:fc:
ad:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C4:6B:39:CA:A9:06:2B:70:51:76:79:CF:6C:A2:E2:63:66:7C:1F
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/QsRrOcqpBitwUXZ5z2yi4mNmfB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.208.0/24
45.140.210.0/23
82.115.217.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:c4:29:b0:3b:96:d5:5b:96:87:52:51:6d:4f:cc:a1:58:a4:
3c:ec:31:24:71:70:48:01:89:72:77:61:74:14:db:df:bd:28:
09:40:f2:ec:53:6c:55:da:ef:12:df:b6:78:cd:af:ac:9e:a5:
64:3c:4d:27:f3:3f:0e:ac:38:96:14:4f:74:f1:23:20:08:13:
eb:72:57:72:09:31:9e:af:c4:dd:db:8b:c1:4d:d7:ff:6b:09:
4b:4b:56:d4:83:8c:8b:14:ab:1f:00:f1:af:a8:47:5d:1e:cf:
61:7a:21:29:31:a3:f4:5e:c5:ec:a0:ce:00:75:0b:18:74:5c:
ad:df:ac:e0:6f:a8:44:13:21:e7:dd:d2:ad:83:d6:4b:16:29:
69:54:e1:8f:c9:b2:2c:01:15:9e:75:3b:21:f6:05:21:37:b9:
8d:6f:ce:89:a5:7f:cd:47:0b:7f:4b:32:c0:6c:ad:54:a3:91:
03:2f:26:7e:8e:12:a1:61:1a:e6:85:84:5b:fe:40:92:04:bd:
39:73:22:40:c3:0a:bb:c8:6e:2c:76:05:2b:ac:6a:38:b0:08:
b6:a6:4a:5e:bc:38:62:66:02:07:ff:5d:ad:b6:87:6c:1a:0a:
35:a9:a4:95:1c:4a:a3:3d:72:06:79:b3:b7:b7:16:36:39:ec:
87:de:f2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:44 2023 by rpki-client on console-fra.rpki-client.org