Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/xDmucibank-7V2R5We_pDLn7j70.roa
File: xDmucibank-7V2R5We_pDLn7j70.roa (raw, json)
Hash identifier: Qi6naCz3k1uyDhp58+I/6BiRTYgC8a8jn88Rso/krR0=
Subject key identifier: C4:39:AE:72:26:DA:9E:4F:BB:57:64:79:59:EF:E9:0C:B9:FB:8F:BD
Certificate issuer: /CN=a375369b2d4bb2e2dede668645313e344e6f1cc0
Certificate serial: 018B4306943036105DBCAB48ADDF49B0C4A1
Authority key identifier: A3:75:36:9B:2D:4B:B2:E2:DE:DE:66:86:45:31:3E:34:4E:6F:1C:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/xDmucibank-7V2R5We_pDLn7j70.roa
Signing time: Wed 18 Oct 2023 13:43:06 +0000
ROA not before: Wed 18 Oct 2023 13:43:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60456
IP address blocks: 45.81.204.0/22 maxlen: 22
2a0e:5f80::/31 maxlen: 31
2a0e:5f84::/31 maxlen: 31
2a0e:5f86::/31 maxlen: 31
2a0e:5f82::/31 maxlen: 31
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:43:06:94:30:36:10:5d:bc:ab:48:ad:df:49:b0:c4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a375369b2d4bb2e2dede668645313e344e6f1cc0
Validity
Not Before: Oct 18 13:43:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c439ae7226da9e4fbb57647959efe90cb9fb8fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:42:9b:eb:d4:20:a9:77:ac:24:95:ea:00:64:
74:00:ec:83:be:88:11:62:30:50:b9:53:59:cb:76:
bd:9d:18:1a:f1:17:c6:cb:b2:c6:e9:ad:e1:4b:3c:
f1:a5:65:5b:f4:65:38:b8:e9:f7:27:6a:99:04:ca:
f9:e2:51:f5:c8:46:34:0e:45:95:a1:0d:ea:bc:dc:
e0:49:2d:b6:4f:92:25:4e:59:94:08:bc:5e:32:35:
c8:11:76:ce:83:f4:55:58:f4:23:9e:61:da:6d:5d:
db:95:e9:3b:94:90:76:d2:3c:4b:5c:41:85:6a:6a:
cd:f1:df:54:1c:46:1e:32:b5:14:92:b2:b2:e7:d9:
c4:66:78:82:26:ca:e8:89:f4:a9:6b:61:82:eb:36:
87:8c:17:d9:bf:43:06:71:35:aa:b8:79:31:a3:75:
4d:31:37:c2:0c:0c:c3:a8:58:05:37:19:9b:0f:5d:
2b:87:6b:33:8f:8c:9b:c1:4d:74:f6:45:56:c5:93:
9c:f8:d2:1d:02:16:dd:f2:65:c4:22:ee:ac:5b:bc:
e9:d9:d2:f1:7e:f8:e7:be:54:6f:c9:d2:9c:5c:40:
53:5e:f8:40:e4:bd:a3:b8:a2:ff:b8:e9:cb:98:35:
db:95:b5:38:73:7e:f3:2a:3c:d3:8f:83:dd:08:7c:
3b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:39:AE:72:26:DA:9E:4F:BB:57:64:79:59:EF:E9:0C:B9:FB:8F:BD
X509v3 Authority Key Identifier:
keyid:A3:75:36:9B:2D:4B:B2:E2:DE:DE:66:86:45:31:3E:34:4E:6F:1C:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/xDmucibank-7V2R5We_pDLn7j70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.204.0/22
IPv6:
2a0e:5f80::/29
Signature Algorithm: sha256WithRSAEncryption
97:4f:b6:72:2f:6b:e7:fd:05:69:b2:79:83:b3:a3:4a:a1:1b:
16:3d:d1:ba:93:a9:d4:8b:a7:a0:8b:37:b3:69:4d:be:52:94:
0f:53:47:cd:b9:1e:2c:f4:2b:e5:84:f3:c8:bf:d5:46:fd:32:
21:81:9c:66:da:34:c6:34:80:18:6d:1f:68:8a:06:73:77:7e:
5c:28:b4:65:90:76:b8:6f:a8:c2:12:a1:4a:7e:e0:8b:4d:69:
f0:1c:89:d4:83:aa:77:83:68:30:22:57:2b:fa:c4:b7:23:ba:
c9:45:a7:f6:ae:ce:0c:83:72:40:aa:40:8f:98:10:30:7a:40:
46:6b:6a:fd:97:b4:e6:c2:52:b2:02:a7:86:37:64:d4:14:aa:
0d:8c:6e:13:4a:c8:f4:de:5b:60:f5:7a:4a:7b:1c:27:ae:a8:
f9:ae:29:48:a2:9d:39:fd:13:29:09:a8:ed:24:87:5a:13:b2:
b9:30:e8:ca:74:a3:6b:69:4c:04:6b:7c:31:c7:8c:6e:9a:79:
b0:50:15:2f:00:4d:44:a4:e2:be:25:64:8f:32:bb:09:b5:cc:
57:71:63:67:fc:74:ed:77:11:d5:80:d8:14:f5:63:34:68:6f:
3c:e8:60:03:88:dc:94:bd:74:1d:c6:60:e5:ab:d3:c5:95:87:
fa:ed:fb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 18 14:44:25 2023 by rpki-client on console-fra.rpki-client.org