Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/ySnwD73yEwHH8ip8SQZ6-io4g_w.roa
File: ySnwD73yEwHH8ip8SQZ6-io4g_w.roa (raw, json)
Hash identifier: 5QJWcad+3HbkXKmN7Odmv2huB0QOVE/mFkwJPuR6mUQ=
Subject key identifier: C9:29:F0:0F:BD:F2:13:01:C7:F2:2A:7C:49:06:7A:FA:2A:38:83:FC
Certificate issuer: /CN=239c45e43625522080aec53952989a13a28abd00
Certificate serial: 01856E0B039B058EBA7C8FCD08ECC974455E
Authority key identifier: 23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/ySnwD73yEwHH8ip8SQZ6-io4g_w.roa
Signing time: Sun 01 Jan 2023 15:54:53 +0000
ROA not before: Sun 01 Jan 2023 15:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205845
IP address blocks: 185.204.120.0/22 maxlen: 24
45.154.168.0/22 maxlen: 24
2a0a:f740::/29 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0b:03:9b:05:8e:ba:7c:8f:cd:08:ec:c9:74:45:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239c45e43625522080aec53952989a13a28abd00
Validity
Not Before: Jan 1 15:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c929f00fbdf21301c7f22a7c49067afa2a3883fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5b:1a:f2:ce:2e:ee:22:bd:5a:b9:3d:b6:43:
d3:a2:f5:5a:05:3c:37:12:fd:c4:ca:89:78:5e:bd:
c1:2a:83:9e:ad:f4:0d:27:96:ba:7c:db:32:a4:01:
6e:9f:c0:1d:65:09:5d:33:6d:77:27:79:b3:e6:91:
e7:fd:1d:8b:2a:c7:bd:7b:91:f0:78:c9:1e:05:a2:
62:ba:b3:6a:fb:ce:f3:39:d2:bc:e0:dd:d7:c7:2c:
70:d4:df:fd:5b:77:e2:de:d5:bd:82:ef:68:57:06:
ce:8f:e0:39:c6:9f:f6:c2:b0:6c:98:79:81:f5:10:
e3:28:9b:a5:4d:15:25:18:37:d0:e9:1b:49:c5:1b:
62:11:ed:4d:ee:df:13:95:ed:e6:e4:da:e8:3a:7d:
ad:f5:4a:ec:9c:cd:e3:1f:67:65:f2:5f:1e:83:ed:
33:2f:32:f1:e4:19:4c:44:4e:f4:46:74:08:46:97:
58:80:83:53:21:36:84:94:64:6e:e6:35:c6:44:a6:
88:08:f8:56:c4:89:ef:08:d7:fc:0f:00:da:f8:00:
8f:a1:35:6c:cc:dc:5e:45:da:7d:61:d9:97:ec:90:
e6:d5:1a:22:7f:2a:67:70:4e:0a:57:27:71:d1:c8:
08:6e:17:c0:1e:bf:24:d9:f6:cb:be:60:d9:15:b7:
74:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:29:F0:0F:BD:F2:13:01:C7:F2:2A:7C:49:06:7A:FA:2A:38:83:FC
X509v3 Authority Key Identifier:
keyid:23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/ySnwD73yEwHH8ip8SQZ6-io4g_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.168.0/22
185.204.120.0/22
IPv6:
2a0a:f740::/29
Signature Algorithm: sha256WithRSAEncryption
92:a9:f7:af:8f:e9:14:3c:eb:d0:e8:d2:a8:e4:41:d3:62:6c:
1c:26:58:49:91:13:59:2d:bc:28:42:e6:96:59:0d:71:f1:59:
46:98:28:92:29:ff:12:ca:31:a8:8e:50:97:b3:75:07:2d:56:
4c:d6:83:79:4a:22:92:4b:e7:c9:48:d8:ae:55:10:6b:71:b2:
19:97:08:a5:95:03:ec:5f:85:01:cb:e4:6a:57:63:15:31:12:
89:46:03:6e:7a:8d:bc:5d:c9:4d:5d:10:f2:af:96:95:d7:4f:
9b:d6:bf:db:66:f7:ea:53:a7:bf:29:0d:cd:88:0e:a1:61:1d:
60:a2:0f:a4:a2:e4:8e:b9:ed:84:34:31:7c:e0:7a:97:fe:9c:
fb:d0:d8:31:54:16:fd:63:b0:94:ff:01:c0:55:5f:6e:37:1e:
26:e0:c8:ad:52:d7:02:0a:8d:77:e3:6c:d6:40:ce:99:ee:ca:
b2:fd:56:a0:df:7a:db:04:7b:5a:5f:44:b7:8e:bb:b3:c1:4c:
9f:13:07:06:a2:1e:cc:cf:f6:e9:0e:e9:21:27:1c:b4:92:d4:
09:3c:4c:d5:ea:19:b5:5b:d6:4b:df:65:83:47:f7:86:1f:ad:
8a:19:a3:bc:c7:c9:a7:12:92:e5:3d:8b:87:f4:f6:f1:b7:87:
5a:47:0a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:24 2024 by rpki-client on console-fra.rpki-client.org