Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/kAWRAVLxpaV-HKrr1StVUkOa6FQ.roa
File: kAWRAVLxpaV-HKrr1StVUkOa6FQ.roa (raw, json)
Hash identifier: bTxsRvynZfGr7QMuKXhO4FJGAji2tFY5fh7QifZL5Xw=
Subject key identifier: 90:05:91:01:52:F1:A5:A5:7E:1C:AA:EB:D5:2B:55:52:43:9A:E8:54
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 01856ED4BFA0948F2F32C41913C78BFE5EE7
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/kAWRAVLxpaV-HKrr1StVUkOa6FQ.roa
Signing time: Sun 01 Jan 2023 19:35:14 +0000
ROA not before: Sun 01 Jan 2023 19:35:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 45.65.112.0/24 maxlen: 24
45.65.114.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:bf:a0:94:8f:2f:32:c4:19:13:c7:8b:fe:5e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jan 1 19:35:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9005910152f1a5a57e1caaebd52b5552439ae854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f8:8f:fe:1a:17:49:30:1e:ed:f6:3a:ff:cd:
ca:dd:6c:93:df:c5:b3:7f:19:d9:3e:ea:d0:bb:63:
dd:bc:64:05:ac:9f:67:ab:96:f6:2c:21:65:cd:ee:
7b:4c:40:f9:86:d3:74:ec:66:08:8a:49:00:da:66:
a3:97:f8:fb:5f:f5:02:23:6b:67:d4:96:95:7b:f6:
be:88:95:d3:9c:1a:13:5b:cf:c9:8e:b0:c6:4e:0e:
30:62:12:2b:b8:4d:52:ea:8a:4b:0f:55:40:21:a5:
d4:59:55:2c:e3:0b:e1:71:23:25:e4:da:7c:28:2b:
d2:f8:0d:13:23:52:f2:f4:a4:ef:03:36:59:fb:bb:
b8:28:25:e8:07:59:19:a0:3c:25:3d:dd:d4:4c:ba:
93:7a:63:a5:98:f2:d1:ea:81:e4:ae:37:ec:0f:56:
09:43:cd:e1:d1:72:21:ca:f5:d6:fd:2e:0d:80:d1:
00:03:36:f3:b3:58:77:c9:4a:5a:f0:6b:d6:de:8d:
87:e7:62:96:b3:a5:ae:c4:f4:16:98:d6:05:8b:83:
d6:7d:dd:04:47:3b:a7:c5:72:d4:7e:f7:20:48:d0:
ef:57:e1:79:9d:06:93:2a:c6:5d:41:a1:06:dd:ef:
b4:8e:17:03:8f:a6:42:0c:7e:ee:30:00:15:46:f6:
a6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:05:91:01:52:F1:A5:A5:7E:1C:AA:EB:D5:2B:55:52:43:9A:E8:54
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/kAWRAVLxpaV-HKrr1StVUkOa6FQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.112.0/24
45.65.114.0/23
Signature Algorithm: sha256WithRSAEncryption
28:8f:4f:69:8e:c2:57:20:c9:15:f1:a6:38:51:b5:d3:c5:8d:
f4:5f:11:a9:d8:f0:84:13:15:de:4a:0e:5e:90:ac:1f:2c:03:
bb:73:b8:00:f1:1a:b2:9c:f2:d7:6f:df:e9:10:a3:8e:cc:3a:
0f:a2:7a:cf:6f:07:a3:af:ea:b9:fb:b7:58:05:1f:cd:61:2c:
a6:63:76:17:aa:04:27:47:7b:fc:38:54:75:d6:f2:4d:b4:da:
2f:a4:ce:75:cf:0c:44:a8:b5:a4:34:81:65:9d:9c:2b:44:ce:
ad:ef:d9:d9:1f:92:e3:ef:05:9e:6e:9b:12:4e:ff:e8:d7:1f:
96:7e:c6:7f:a4:16:80:55:24:bb:0f:8e:d6:59:15:4c:e2:39:
6e:48:2b:14:e8:0a:f1:ed:7a:cc:0a:e4:2e:d1:bd:82:ae:68:
20:0d:92:bd:b3:91:c5:bd:24:b2:cc:0e:8e:e3:3f:40:f7:a1:
bf:c0:c7:aa:61:1e:08:55:ac:78:14:48:4e:e4:24:6d:5c:5c:
c1:e6:ec:c9:5a:16:83:71:7e:6a:89:19:f7:7b:4c:ee:af:8d:
5d:21:e5:cb:1f:1b:fe:1c:2a:db:82:dc:26:44:e5:c5:1e:dc:
05:0e:de:da:cb:f3:f9:e2:77:0e:5e:b4:2f:ce:15:ef:06:8f:
1d:ee:87:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:14 2023 by rpki-client on console-fra.rpki-client.org