Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/jrdfK6joBWDCge9MsS03hEu3cAg.roa
File: jrdfK6joBWDCge9MsS03hEu3cAg.roa (raw, json)
Hash identifier: K+Nt/hNrdkd0wxO3m+HtOCLQT4bI1UoCL8Os7o/UyHU=
Subject key identifier: 8E:B7:5F:2B:A8:E8:05:60:C2:81:EF:4C:B1:2D:37:84:4B:B7:70:08
Certificate issuer: /CN=f3751cf8c3a2d36c9744c96519899945ac607820
Certificate serial: 01856EC23209E3BD4D2BDAECDDA0B62A1FC2
Authority key identifier: F3:75:1C:F8:C3:A2:D3:6C:97:44:C9:65:19:89:99:45:AC:60:78:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/jrdfK6joBWDCge9MsS03hEu3cAg.roa
Signing time: Sun 01 Jan 2023 19:14:58 +0000
ROA not before: Sun 01 Jan 2023 19:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48956
IP address blocks: 91.230.42.0/23 maxlen: 23
45.90.0.0/23 maxlen: 23
195.88.114.0/23 maxlen: 23
91.207.52.0/23 maxlen: 23
91.246.104.0/21 maxlen: 21
37.46.15.0/24 maxlen: 24
37.46.13.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:32:09:e3:bd:4d:2b:da:ec:dd:a0:b6:2a:1f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3751cf8c3a2d36c9744c96519899945ac607820
Validity
Not Before: Jan 1 19:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8eb75f2ba8e80560c281ef4cb12d37844bb77008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3f:ec:0b:03:c6:03:41:8a:52:6d:51:aa:e7:
3f:c3:08:c9:d5:ee:90:cb:35:de:84:cd:8a:3f:b9:
33:b3:69:81:b3:bb:1c:38:d1:46:84:cf:4b:67:42:
83:43:bc:14:51:f2:8c:e7:f3:e7:86:af:0b:a3:6a:
1f:5f:3e:11:2e:b2:60:7f:c0:fc:7d:a4:4d:3c:9b:
c1:89:4e:ab:dd:c2:36:91:2e:35:ae:3a:97:da:40:
82:5a:89:a1:98:57:4c:4d:97:bd:bc:51:3e:3b:e6:
6f:da:e0:d2:df:66:a2:07:aa:ad:8d:a9:49:af:a5:
f9:cb:3b:ca:5e:e5:06:24:8e:3e:b3:70:7d:f2:34:
65:71:bf:5b:73:99:e4:2e:73:31:ae:79:c0:20:0d:
ad:28:b5:82:08:f0:bf:80:a6:f9:b5:aa:d2:df:ef:
c5:83:c6:a4:5e:31:02:05:58:fb:8d:6e:c7:a4:42:
b0:b4:47:0d:c6:73:0d:0c:0d:67:91:28:7e:b8:98:
f4:50:3a:a0:3b:8d:c4:7d:70:c9:1b:d3:6e:85:78:
7e:df:49:4a:c1:5d:06:89:9b:9a:99:bd:e8:31:38:
30:80:2b:2b:5b:e5:19:79:bd:fb:d6:27:6d:7f:e5:
8a:0b:0b:0d:93:0f:bd:89:ea:8a:bb:68:7a:e4:3f:
e9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B7:5F:2B:A8:E8:05:60:C2:81:EF:4C:B1:2D:37:84:4B:B7:70:08
X509v3 Authority Key Identifier:
keyid:F3:75:1C:F8:C3:A2:D3:6C:97:44:C9:65:19:89:99:45:AC:60:78:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/jrdfK6joBWDCge9MsS03hEu3cAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.13.0/24
37.46.15.0/24
45.90.0.0/23
91.207.52.0/23
91.230.42.0/23
91.246.104.0/21
195.88.114.0/23
Signature Algorithm: sha256WithRSAEncryption
44:65:53:93:8a:78:c6:37:83:f1:aa:e1:72:d4:4f:0d:ae:5d:
35:5f:bb:44:f2:1e:7c:a1:2a:69:48:df:b7:f6:fe:d3:45:5f:
ca:7b:a1:7e:c6:31:23:c5:12:47:14:0f:f2:f6:2e:8e:f3:24:
d0:50:ad:bf:0f:f1:70:80:4f:d4:9e:ff:1e:9e:82:51:27:f5:
c2:65:2f:b6:1a:e3:d9:00:bb:b4:1c:e8:85:74:31:32:47:b1:
1f:ad:11:78:c7:98:65:dd:db:93:bf:19:5d:dc:3f:a7:9b:96:
49:24:50:04:de:04:f2:9b:05:29:28:b4:86:d2:d9:22:b9:f8:
6b:51:a2:1c:31:ac:73:0a:c1:61:84:c9:3f:c7:79:d3:0c:fe:
85:ba:8f:b9:39:0e:be:5c:fa:42:a0:c9:cb:88:1d:2b:2a:34:
1b:71:b4:05:a9:6a:62:e0:5d:ff:98:c1:6d:38:cc:b3:f7:bd:
17:84:f9:b5:84:cf:a5:5f:55:49:c3:61:3f:e4:74:97:b1:14:
dd:00:a2:6a:bc:24:57:91:2c:6a:03:55:c5:05:64:66:f0:30:
43:ca:db:b4:60:14:ec:ad:70:52:e8:db:27:9c:db:0f:38:1b:
37:2e:25:3c:a6:ef:42:24:73:55:37:46:3d:73:39:17:73:fe:
79:ec:c3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:51 2023 by rpki-client on console-ams.rpki-client.org