Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/eXDA9cnkBYuy5PDvgfzu1Kgk17w.roa
File: eXDA9cnkBYuy5PDvgfzu1Kgk17w.roa (raw, json)
Hash identifier: ZbGcNbfsYYCIJcg0JoPhniBVKyegejIozcIVhQNbRvk=
Subject key identifier: 79:70:C0:F5:C9:E4:05:8B:B2:E4:F0:EF:81:FC:EE:D4:A8:24:D7:BC
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 018A2C0B67D102FA0B21A9EFED2BFF460CAC
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/eXDA9cnkBYuy5PDvgfzu1Kgk17w.roa
Signing time: Fri 25 Aug 2023 09:34:19 +0000
ROA not before: Fri 25 Aug 2023 09:34:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12679
IP address blocks: 45.151.98.0/24 maxlen: 24
94.137.78.0/24 maxlen: 24
94.137.72.0/24 maxlen: 24
94.137.91.0/24 maxlen: 24
94.137.90.0/24 maxlen: 24
94.137.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2c:0b:67:d1:02:fa:0b:21:a9:ef:ed:2b:ff:46:0c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Aug 25 09:34:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7970c0f5c9e4058bb2e4f0ef81fceed4a824d7bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1e:ba:63:90:4d:e5:1e:ce:fc:ee:f1:86:fb:
f4:a8:66:12:35:7d:02:62:a4:08:85:90:e8:e3:11:
dd:d6:b2:f5:7b:59:ae:13:f4:03:7b:87:3b:35:5d:
12:82:40:96:83:60:fb:8b:32:53:b0:e0:e0:44:df:
d3:f3:41:b3:25:29:59:18:37:eb:5d:e2:15:e3:6f:
53:d2:4a:38:fd:f5:78:ab:ab:47:4c:5e:e7:3d:eb:
11:fd:2f:09:46:02:5e:85:ea:0c:f9:5c:02:0a:d3:
dc:ae:66:25:ad:7e:e6:fc:ef:8d:6c:20:cf:7c:f0:
82:ad:85:36:1a:f9:e6:c8:df:6d:63:8d:d2:54:8c:
56:e5:ba:48:62:d6:cf:09:bb:3a:53:12:df:e3:12:
86:cb:11:2d:ac:39:1f:c6:10:57:69:36:eb:13:75:
47:4a:9b:ac:70:20:aa:4e:2f:d1:be:64:df:70:96:
8e:2b:44:c8:3c:66:17:68:4d:2f:2e:20:c3:97:82:
8a:af:1e:e3:1d:1c:42:d4:a0:3c:2d:35:27:15:73:
45:13:99:c3:5c:d9:9c:35:5a:bb:60:4b:12:49:79:
e6:3a:c7:45:1e:e2:e7:d3:26:78:5f:a5:a4:13:e5:
4c:44:c1:18:4a:3d:a4:1c:68:cd:87:5c:bc:eb:e0:
3e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:70:C0:F5:C9:E4:05:8B:B2:E4:F0:EF:81:FC:EE:D4:A8:24:D7:BC
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/eXDA9cnkBYuy5PDvgfzu1Kgk17w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.98.0/24
94.137.72.0/24
94.137.78.0/24
94.137.89.0-94.137.91.255
Signature Algorithm: sha256WithRSAEncryption
77:d9:35:f4:b1:7d:4c:95:0c:f8:dc:17:8e:15:35:07:59:21:
89:a0:82:97:15:12:e5:d1:e5:d6:6d:e1:38:c6:13:aa:c7:0e:
69:88:d7:05:cf:50:f5:3e:e8:b9:c2:7c:2a:79:0f:96:4f:4a:
a4:16:17:b4:43:b3:22:ad:28:d4:52:7c:20:2c:9b:bb:ac:16:
d5:6d:81:b5:3c:73:eb:70:d8:c3:cf:45:8c:02:1b:f3:68:e7:
96:a1:60:f4:9f:ec:9b:41:6b:d7:a6:28:cd:82:11:cf:1f:38:
ef:9d:60:b3:16:17:56:dc:f9:5f:3d:47:54:f3:94:c7:49:3d:
7c:34:45:30:e5:f3:a2:04:cf:bf:7f:32:98:95:d6:67:a6:39:
69:a7:cc:87:e7:b7:89:a0:b0:c9:6c:6e:7c:77:f9:fd:90:ff:
8c:f4:98:fb:9e:d0:70:9b:7b:1d:a7:c2:2b:ce:69:07:1c:c1:
80:18:aa:f3:fc:40:22:51:0b:05:cc:fc:8d:59:7c:65:d4:47:
a7:b4:2a:ac:77:a2:6d:fb:51:1f:51:f7:06:fd:9f:f8:a7:fd:
f0:d7:fb:82:70:93:a6:b8:3d:b0:82:7d:cf:e0:88:2e:50:25:
bc:90:54:de:cd:e2:52:ba:5f:f6:18:3d:9c:c7:6d:95:85:88:
d4:4d:eb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 22:56:22 2023 by rpki-client on console-ams.rpki-client.org