Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/1-Fv9I97sKB0Id0LcRNxl9xCCEMU.roa
File: 1-Fv9I97sKB0Id0LcRNxl9xCCEMU.roa (raw, json)
Hash identifier: AOgltjMB2zyWHFKQDpPU01eIfCTU3Bn6FOnWSLGufKU=
Subject key identifier: F8:5B:FD:23:DE:EC:28:1D:08:77:42:DC:44:DC:65:F7:10:82:10:C5
Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7
Certificate serial: 018A36A072CA95757F26C5AA87F05416FA65
Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/1-Fv9I97sKB0Id0LcRNxl9xCCEMU.roa
Signing time: Sun 27 Aug 2023 10:53:19 +0000
ROA not before: Sun 27 Aug 2023 10:53:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45027
IP address blocks: 193.109.217.0/24 maxlen: 24
45.153.74.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:36:a0:72:ca:95:75:7f:26:c5:aa:87:f0:54:16:fa:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7
Validity
Not Before: Aug 27 10:53:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f85bfd23deec281d087742dc44dc65f7108210c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c4:62:d6:54:81:04:1f:8b:7d:c3:e1:0a:48:
4a:62:46:b1:99:85:e8:22:14:be:c4:b8:87:23:62:
6c:19:55:de:07:c7:d3:88:db:15:45:0a:da:93:e6:
b5:95:4a:20:cd:11:22:5d:84:77:e2:f4:28:20:e7:
e9:44:62:45:07:64:53:f4:84:cb:34:77:01:49:a1:
49:2c:ad:d0:54:5d:c6:4a:40:7d:fe:ac:aa:a8:13:
13:5a:e0:48:19:36:48:63:cf:00:3b:eb:ab:09:3e:
1a:b1:1f:83:81:1a:df:ce:4d:07:81:6e:a7:43:19:
e7:1e:4b:a0:13:9b:59:e9:48:8c:f6:00:73:d2:da:
ed:9a:30:9d:75:0a:ee:2c:ad:6c:7a:35:6e:3a:c8:
06:90:52:a1:d0:4c:f2:ce:70:4f:a3:4f:e4:e6:94:
00:d2:b0:ec:2b:c2:13:9a:9f:ae:43:42:08:c1:9f:
a1:fd:17:15:e7:38:b7:a9:ed:5c:06:a6:b6:6e:78:
3e:ce:35:3d:44:65:a9:ca:5d:25:7a:ce:1f:fa:34:
b6:25:b7:43:c8:03:ba:a3:e7:74:3e:34:52:10:03:
35:d3:1b:3d:ce:d9:e3:2a:7a:4b:82:f1:36:f3:24:
f2:93:ec:01:e9:3b:a6:b8:94:2f:f1:1c:5e:d4:75:
23:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:5B:FD:23:DE:EC:28:1D:08:77:42:DC:44:DC:65:F7:10:82:10:C5
X509v3 Authority Key Identifier:
keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/1-Fv9I97sKB0Id0LcRNxl9xCCEMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.74.0/23
193.109.217.0/24
Signature Algorithm: sha256WithRSAEncryption
21:96:49:f6:b2:c1:f0:ae:b7:5f:64:88:c0:b2:f2:56:d6:1e:
10:34:c8:5e:4c:dd:43:3a:6c:10:2d:10:36:c1:aa:2a:dc:47:
b7:f8:53:92:55:2f:cf:b4:8f:f1:de:ba:31:62:c9:8d:fa:e6:
25:98:86:b8:c2:d3:12:29:ee:b5:ca:47:12:a4:58:82:a1:40:
0b:9d:9e:74:31:2e:ee:85:8e:62:9e:46:91:ec:6c:20:69:7e:
78:e7:ad:a0:18:74:fe:a9:cd:f4:b9:f0:31:36:33:77:5b:c6:
6c:eb:a8:ea:a4:ff:f6:09:45:f5:eb:02:04:76:cb:c2:1b:3d:
f1:bc:64:ff:41:6f:69:f9:fe:66:e9:d9:a5:21:8a:89:3e:ef:
d3:25:19:e9:2f:34:3b:4e:12:07:da:19:5f:88:fd:b0:6c:d1:
9d:c0:5b:9d:41:16:38:7e:a9:fe:32:ad:59:f0:a1:eb:b5:d1:
3a:ea:b1:e0:b4:89:2c:d8:e1:4b:e5:e6:37:3f:e3:66:2d:7d:
e2:c8:4d:bd:3d:e2:60:71:e5:88:dd:97:df:fd:e3:2f:56:79:
9e:a0:8d:6e:8b:de:f8:3b:02:29:fb:f3:66:e6:39:d5:dd:e4:
9f:ca:a6:4b:bb:37:c6:c7:a1:22:76:82:7b:8d:cc:d4:32:7b:
f0:e1:ea:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 27 11:53:02 2023 by rpki-client on console-ams.rpki-client.org