Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/AdwEzlx9XKK7K9UsIEttXrELjXI.roa
File: AdwEzlx9XKK7K9UsIEttXrELjXI.roa (raw, json)
Hash identifier: iuozZKih8NzGambJJfmQz0vPsstrwXyk7q/1beYYq1I=
Subject key identifier: 01:DC:04:CE:5C:7D:5C:A2:BB:2B:D5:2C:20:4B:6D:5E:B1:0B:8D:72
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018571A7BAECB2FF0B513B8FCD64E8C9CDB9
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/AdwEzlx9XKK7K9UsIEttXrELjXI.roa
Signing time: Mon 02 Jan 2023 08:44:55 +0000
ROA not before: Mon 02 Jan 2023 08:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207177
IP address blocks: 91.242.81.0/24 maxlen: 24
185.212.11.0/24 maxlen: 24
171.22.52.0/22 maxlen: 22
45.67.117.0/24 maxlen: 24
45.86.16.0/22 maxlen: 22
45.86.17.0/24 maxlen: 24
45.86.16.0/24 maxlen: 24
45.86.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:ba:ec:b2:ff:0b:51:3b:8f:cd:64:e8:c9:cd:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 2 08:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01dc04ce5c7d5ca2bb2bd52c204b6d5eb10b8d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:60:03:22:c4:34:d0:8e:bb:99:15:84:78:82:
93:6e:ed:26:dc:59:16:7c:84:3a:2a:0e:8b:34:39:
e0:04:3f:a3:6c:8c:e1:96:d8:35:68:a9:ce:fc:45:
c0:e6:a1:33:61:22:27:ca:28:c6:e2:a0:ce:c2:73:
09:3a:73:5b:c0:a3:94:b0:99:c3:31:7b:c2:d1:c7:
92:47:1f:1b:27:df:87:e2:5e:46:3f:86:0d:70:e4:
84:ae:81:38:e1:44:22:72:a4:a0:12:74:0b:dd:2d:
fd:6a:d9:51:1f:5a:78:7d:b2:cb:0d:9d:78:ae:94:
b5:3a:c2:b0:5f:51:e5:95:7a:01:87:80:d7:92:14:
f1:a0:17:fd:41:5b:7a:d9:3a:e3:2f:ba:50:ad:b7:
4b:bb:bd:b2:90:6b:fb:3c:16:7b:74:07:1f:f0:ba:
b6:d8:58:8d:03:4f:93:02:03:5b:0e:a9:4d:5a:04:
7b:04:96:eb:6f:f3:f9:c9:08:70:f6:5b:22:85:38:
33:e2:63:16:b9:37:62:1a:0a:e2:27:f0:93:fe:79:
07:b4:9f:38:ea:c3:8d:ba:34:00:8b:8e:0f:1b:c6:
b7:38:df:88:5f:6f:ed:23:9b:4b:8d:b3:c8:f1:17:
0f:84:ce:d8:50:a3:09:7b:ca:35:20:2f:97:af:4f:
58:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:DC:04:CE:5C:7D:5C:A2:BB:2B:D5:2C:20:4B:6D:5E:B1:0B:8D:72
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/AdwEzlx9XKK7K9UsIEttXrELjXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.117.0/24
45.86.16.0/22
91.242.81.0/24
171.22.52.0/22
185.212.11.0/24
Signature Algorithm: sha256WithRSAEncryption
81:70:68:07:29:68:c9:45:11:f6:f4:01:b1:6b:ae:51:5b:8e:
96:ac:90:15:98:2b:01:a2:27:15:22:8d:47:46:c5:dc:8e:4a:
7d:fd:0d:53:38:19:b8:01:d4:81:95:6e:7b:1e:f3:55:4a:f7:
85:90:ca:cd:91:c9:53:f4:39:a5:00:ef:b7:38:c0:ca:4d:6e:
ed:cf:67:39:84:54:eb:36:21:c9:fb:26:03:9f:b1:09:72:4e:
c9:77:f7:b9:37:38:b5:c0:8a:0b:94:47:a2:4d:ca:93:f9:1a:
b0:5d:40:43:d0:75:de:d6:10:e4:60:e6:0b:fa:3c:4d:58:0f:
d2:01:30:67:53:ef:ea:df:3d:27:b7:3a:e1:0c:19:cf:a5:75:
3d:3d:84:16:55:0d:bf:82:bf:52:ef:dd:f3:80:4b:24:1b:ee:
10:35:3b:67:64:b2:dd:9d:69:fd:5f:99:f5:da:6a:71:fa:8d:
e6:a3:66:51:fc:41:87:63:92:e7:62:aa:f4:f5:ab:61:fe:ca:
bf:2d:f2:b6:cb:0c:30:3f:d8:12:4e:95:c5:32:69:60:53:df:
12:98:92:d5:c0:81:d7:28:ff:ff:7e:de:df:e5:23:a0:0d:f9:
c4:16:2b:ee:1a:ef:c9:a9:06:ee:d8:1e:99:60:ee:2e:bb:c6:
83:a8:46:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:36 2023 by rpki-client on console-ams.rpki-client.org