Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/2BNKATJdD2WPPKwzWFZGn0cyifU.roa
File: 2BNKATJdD2WPPKwzWFZGn0cyifU.roa (raw, json)
Hash identifier: ywEfsgLmghuTBi30cZHrYaV+avzYpCbbxqDoRLk4qLQ=
Subject key identifier: D8:13:4A:01:32:5D:0F:65:8F:3C:AC:33:58:56:46:9F:47:32:89:F5
Certificate issuer: /CN=238857660dc7fa60846f765b94cb69576255adb6
Certificate serial: 01856FA6D437B6A729F2E944ECCA5B708725
Authority key identifier: 23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/2BNKATJdD2WPPKwzWFZGn0cyifU.roa
Signing time: Sun 01 Jan 2023 23:24:42 +0000
ROA not before: Sun 01 Jan 2023 23:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28875
IP address blocks: 185.104.16.0/22 maxlen: 24
45.15.80.0/22 maxlen: 24
2a00:f740::/32 maxlen: 48
2a0e:2b80::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a6:d4:37:b6:a7:29:f2:e9:44:ec:ca:5b:70:87:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=238857660dc7fa60846f765b94cb69576255adb6
Validity
Not Before: Jan 1 23:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8134a01325d0f658f3cac335856469f473289f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8b:22:a9:9e:03:78:d2:6d:39:23:11:5d:6d:
3a:ac:93:16:c3:bc:e3:43:5a:99:26:10:83:79:79:
52:9a:19:f0:dc:3b:e7:99:f8:60:0f:d5:16:57:1d:
88:8f:81:19:af:35:bb:09:47:91:f6:ed:b7:fb:9a:
ba:d5:20:4f:e8:94:d1:39:a8:4c:e1:0e:c1:ac:3d:
ec:21:b9:e9:0b:a5:00:17:07:e8:ba:a9:68:7c:fd:
58:b9:7e:34:88:37:ae:98:2f:60:b3:72:88:79:6c:
81:45:ce:eb:89:be:52:50:66:ba:48:5a:c8:b6:74:
c7:c9:a3:f8:34:2c:cd:d5:90:f6:f0:b5:17:c3:89:
35:10:86:21:49:c4:f0:2c:c4:86:5b:8c:95:00:a7:
c5:f1:8f:e6:20:23:c7:17:e7:4b:1b:4a:e9:70:1f:
d3:0d:10:5d:70:b6:03:5d:76:a8:7d:71:7a:c1:94:
01:86:e1:19:34:96:68:73:28:8d:22:50:10:43:43:
03:e0:7d:a4:46:e4:1f:a0:86:5c:52:77:33:ff:cb:
51:2e:09:fb:51:a0:47:1e:ef:36:25:2d:f3:af:8f:
9e:81:aa:ed:f5:28:d9:63:bb:9d:f5:db:9c:42:02:
41:09:dc:4b:9f:03:5f:05:7e:08:25:9b:f7:37:27:
fc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:13:4A:01:32:5D:0F:65:8F:3C:AC:33:58:56:46:9F:47:32:89:F5
X509v3 Authority Key Identifier:
keyid:23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/2BNKATJdD2WPPKwzWFZGn0cyifU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.80.0/22
185.104.16.0/22
IPv6:
2a00:f740::/32
2a0e:2b80::/32
Signature Algorithm: sha256WithRSAEncryption
a0:00:01:c9:1f:02:63:5c:e3:a0:23:06:8d:a6:3b:65:59:48:
af:7b:e3:f2:b5:c1:18:47:e0:60:f4:51:a6:b2:68:85:2b:02:
36:7c:d2:82:0e:66:b1:67:d2:1c:5d:7a:5b:d1:75:85:a1:0e:
3f:61:89:5b:30:c3:1f:e7:f9:a8:06:2c:37:c0:cc:8d:04:9f:
90:ea:ed:58:34:8a:c0:d2:51:09:d9:a0:be:c0:a2:9d:f2:99:
6c:89:d9:d3:77:42:c5:7d:7c:b0:4d:2c:16:59:ab:2a:1e:89:
03:09:10:a5:f2:35:fb:fb:ef:e7:df:50:40:90:02:36:54:bd:
8a:6d:b6:57:45:33:7f:4b:4b:79:49:93:cf:31:5f:f6:f8:77:
9e:e4:ed:f7:a0:3d:2e:dc:95:b8:3a:19:05:c4:e3:a5:92:3f:
ee:16:c5:cc:ff:bd:51:e4:d7:9e:04:4e:d3:6f:7d:72:a7:31:
9a:90:39:dc:89:da:82:de:02:10:36:80:e0:89:f1:e7:e8:a4:
ab:2b:a9:e1:a6:86:0c:75:f2:56:fb:79:83:c3:5a:2c:a0:43:
c9:61:30:a1:fb:d5:e2:69:09:9b:4d:64:a1:cb:18:58:9d:4e:
ba:99:03:83:c4:20:78:8f:19:de:b6:a9:ca:02:97:a2:88:41:
c4:ef:fe:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:16 2024 by rpki-client on console-ams.rpki-client.org