Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/aeV_iO_n9-jOnZww-bcNaVn9PJI.roa
File: aeV_iO_n9-jOnZww-bcNaVn9PJI.roa (raw, json)
Hash identifier: xAe326EU050JsZMylW8VTattzA0SsSkIirHhJRa6RN0=
Subject key identifier: 69:E5:7F:88:EF:E7:F7:E8:CE:9D:9C:30:F9:B7:0D:69:59:FD:3C:92
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0186169D8EC0039AF4302894559C26630436
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/aeV_iO_n9-jOnZww-bcNaVn9PJI.roa
Signing time: Fri 03 Feb 2023 09:31:09 +0000
ROA not before: Fri 03 Feb 2023 09:31:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 217.67.64.0/20 maxlen: 20
91.200.212.0/22 maxlen: 24
85.255.176.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:16:9d:8e:c0:03:9a:f4:30:28:94:55:9c:26:63:04:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Feb 3 09:31:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69e57f88efe7f7e8ce9d9c30f9b70d6959fd3c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a0:46:6b:71:a3:81:f4:80:3a:82:9f:4a:d8:
ef:94:b1:f7:67:3c:97:76:93:2c:76:5a:8b:46:f6:
64:bc:26:88:2a:4c:4d:ce:79:8d:9c:97:07:bf:65:
67:73:65:2f:72:cc:8b:0f:69:1e:e6:fd:46:1d:46:
fc:5f:f7:dd:66:90:c0:c8:85:2c:c2:37:d6:10:7e:
e4:2f:82:e6:ed:10:4e:d3:92:a6:f1:c9:17:6d:91:
3b:95:af:b7:40:c9:7c:39:47:2a:66:3a:0e:3e:91:
23:f6:43:ed:32:29:60:13:9b:57:a7:cd:e5:1d:14:
b4:7f:b6:0f:e4:50:bf:08:81:3f:2b:5b:09:1f:e4:
20:0c:a9:1a:61:5f:f7:b3:b3:5a:4b:00:8f:e7:46:
59:1c:c2:35:98:27:fd:f4:e2:e4:66:ad:e2:07:dc:
4b:a1:61:7f:b7:b6:14:89:9a:83:28:5f:86:59:b5:
d6:47:00:7a:a3:2f:26:b8:6a:c1:7e:96:dd:21:2d:
ab:10:bb:18:74:b4:01:f5:56:73:60:59:b9:f3:30:
b4:b0:0e:df:53:da:44:75:71:4e:93:43:5b:ab:f9:
14:04:df:48:3a:11:22:0e:2d:9c:4b:65:57:17:03:
3a:c7:21:ac:9c:9a:19:1b:e3:20:d0:5e:7e:29:5f:
a1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E5:7F:88:EF:E7:F7:E8:CE:9D:9C:30:F9:B7:0D:69:59:FD:3C:92
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/aeV_iO_n9-jOnZww-bcNaVn9PJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.176.0/21
91.200.212.0/22
217.67.64.0/20
Signature Algorithm: sha256WithRSAEncryption
74:03:16:9b:38:98:1b:45:a9:4e:0b:39:57:ae:d7:07:d5:78:
7a:f6:18:e3:94:33:79:4e:51:b0:ad:02:d8:54:40:39:7e:b3:
6f:22:ea:b4:a9:8c:49:13:52:29:e5:c1:04:45:66:4e:b8:af:
cb:05:71:7d:fd:07:b0:27:f1:54:55:1c:93:e0:41:1a:55:36:
5a:62:c9:cf:0e:ce:02:10:9f:18:71:ca:7c:d7:5b:0b:62:39:
99:7f:e0:b1:9e:b4:c9:91:ef:d6:2c:ad:61:83:bb:63:e2:9a:
ac:98:1b:24:45:1b:13:e2:53:81:a1:eb:68:66:75:c4:2e:09:
6c:b7:66:4a:54:e7:8a:b5:c5:92:20:1c:4c:bd:af:d4:11:16:
c6:49:75:5e:4a:76:ea:f2:3f:a1:2c:9a:18:f9:6f:f3:3e:e5:
42:73:f0:3e:5d:8e:4c:16:e1:ea:42:33:84:ba:a2:cd:bb:fe:
f7:28:7a:f3:ca:29:95:75:43:f3:bf:d1:a8:f9:59:4b:4a:05:
a4:2c:1c:3c:5b:99:0f:7d:de:fb:23:96:34:f7:62:f2:eb:fb:
36:d5:f1:37:64:15:c8:ca:74:9f:11:dd:a0:be:1e:80:b5:97:
6b:df:0b:1e:b7:2e:0f:c5:da:f8:7e:ac:0a:ba:e4:d0:4d:51:
09:fc:e3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org