Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/J9objXZPHiDRKx8blOtHmfz3Jvs.roa
File: J9objXZPHiDRKx8blOtHmfz3Jvs.roa (raw, json)
Hash identifier: PLITXqu3N4yUDtAZiYYKp7asr+dnI/REkXu1aMUqEIw=
Subject key identifier: 27:DA:1B:8D:76:4F:1E:20:D1:2B:1F:1B:94:EB:47:99:FC:F7:26:FB
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018571A7B3333DDA0AB3E6048072CF237BA5
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/J9objXZPHiDRKx8blOtHmfz3Jvs.roa
Signing time: Mon 02 Jan 2023 08:44:53 +0000
ROA not before: Mon 02 Jan 2023 08:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204872
IP address blocks: 45.15.244.0/22 maxlen: 22
45.150.180.0/22 maxlen: 22
195.216.156.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:b3:33:3d:da:0a:b3:e6:04:80:72:cf:23:7b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 2 08:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27da1b8d764f1e20d12b1f1b94eb4799fcf726fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:90:bd:36:64:48:c7:c8:3d:75:f4:44:4d:94:
91:a6:ff:9c:f2:74:b4:62:c0:94:79:76:f9:3a:85:
20:c2:4e:2d:22:e1:e4:20:d9:e4:6b:82:ea:1d:34:
be:b4:ff:e3:94:36:8e:e8:cb:84:1f:80:d0:a5:62:
79:47:e5:16:31:49:e9:50:eb:26:31:df:f7:c2:5f:
df:9c:fe:bf:38:f3:1f:7b:ff:aa:5c:7c:46:aa:c1:
17:cc:39:0d:7d:0f:cd:96:e0:49:b6:22:e3:ac:e6:
03:0b:c1:51:53:da:99:64:f8:37:ad:68:da:6b:37:
37:25:88:9f:c4:08:e7:47:c7:3a:d7:33:17:a9:4e:
d6:fe:41:1d:14:fb:43:09:31:b4:c7:6f:39:1b:39:
17:19:b0:aa:fc:56:30:c3:cf:7b:43:89:3a:43:35:
05:81:8d:54:98:47:a4:d2:c0:8d:42:d1:a1:25:dc:
5d:3e:33:e2:92:a9:91:70:b8:cc:97:2d:ef:ec:8c:
4a:a6:4a:d1:d1:80:b6:04:b2:62:44:03:38:cb:ab:
51:7f:0a:8e:c3:c9:2d:de:25:9c:9f:36:6c:32:cc:
6b:8d:3b:03:be:db:0f:6e:3e:7c:61:02:78:3a:c6:
59:02:b2:f0:f5:01:32:3f:32:3e:12:8a:90:c7:93:
7d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:DA:1B:8D:76:4F:1E:20:D1:2B:1F:1B:94:EB:47:99:FC:F7:26:FB
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/J9objXZPHiDRKx8blOtHmfz3Jvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.244.0/22
45.150.180.0/22
195.216.156.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:0f:86:44:be:10:ff:cf:d7:5a:6c:06:59:97:59:5c:3b:6c:
bc:ba:7a:d0:00:e5:dd:41:cb:e1:ab:b8:9c:c0:20:a4:db:02:
09:12:ce:d6:82:84:3c:65:59:f6:0a:43:eb:1b:bf:7c:a9:ac:
59:ac:ff:ab:4f:03:7f:2a:77:b9:7d:53:3e:7c:a2:b8:eb:2c:
4b:99:86:44:a1:50:ba:c6:e4:1b:d8:35:9a:45:2b:4c:7e:8b:
3e:75:28:36:5b:aa:e2:68:b2:85:c0:23:7b:89:f3:98:31:7e:
7c:0b:d4:d8:53:85:a7:e5:f1:bf:2a:9e:30:5e:45:a2:c8:93:
0c:5b:73:f3:f7:d9:15:b0:9e:a9:92:80:7e:ba:44:5a:b5:04:
8a:20:b8:2d:30:8d:28:5f:a1:e5:e3:8a:32:10:df:e8:db:60:
d5:1b:32:44:48:c2:dc:a7:ff:e0:3a:b5:34:97:61:19:b7:a4:
83:42:45:91:c1:ea:02:0e:66:06:72:50:ac:d3:1f:5d:1c:47:
d7:75:f1:38:5c:6d:b8:12:59:3e:c2:65:5f:05:4c:9f:5b:e7:
97:e7:1b:61:66:47:0d:4b:5b:f7:7b:cc:11:6d:46:ce:8e:db:
52:60:7c:ff:d3:0b:73:65:81:7c:b1:b6:6b:3f:18:92:7c:99:
23:e6:93:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:06 2024 by rpki-client on console-ams.rpki-client.org